Russian Intelligence Hacks IP Cameras to Spy on Military Logistics Across NATO States and Ukraine

Russian intelligence services are actively compromising internet-connected IP cameras across NATO states and Ukraine by exploiting two fundamental security failures: default credentials that were never changed and outdated firmware that was never patched. These are not sophisticated zero-day attacks — they are entirely preventable hygiene failures that have had life-threatening consequences, including the alleged targeting of military personnel in Ukraine. With over 87,000 vulnerable cameras identified across the EU and NATO, this represents a massive, systemic exposure of critical surveillance infrastructure to adversarial nation-state actors. The case underscores that IoT and physical security devices are often the weakest link in an organization's network, frequently overlooked in standard patch and configuration management cycles.