[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fZFbgAeJ9WzDD-WAygyb4_ZrRjBXJtM1x8donXzhP3fc":3},{"lesson":4},{"id":5,"slug":6,"article_id":7,"title":8,"body":9,"prevention":10,"framework_refs":11,"framework_notes":23,"status":24,"created_at":25,"published_at":26,"article":27,"tags":31,"podcasts":50,"controls":51},"e471863d-b421-4c74-8afe-23c92d5569d1","physical-camera-compromise-exposes-millions-of-license-plate-images-and-encryption-keys","477db946-7029-4eaf-8850-15405e310dd2","Physical Camera Compromise Exposes Millions of License Plate Images and Encryption Keys","Hackers physically accessed a Flock Safety surveillance camera and extracted its onboard storage, recovering an encryption key and millions of vehicle and pedestrian images — data that was never intended to be accessible at the device level. The root cause lies in poor device hardening: encryption keys stored alongside the data they protect offer no real security, and physical access to the device yielded full access to sensitive records. This matters because surveillance infrastructure operates at the intersection of physical and cyber security, and a compromise of one camera can expose the operational logic and data of an entire network. The incident also reveals that these systems collect far more data than publicly disclosed, raising serious privacy and civil liberties concerns.","**Immediate actions:**\n- Audit all deployed edge\u002FIoT cameras to confirm encryption keys are stored in secure hardware enclaves (e.g., TPM chips) and never co-located with the encrypted data.\n- Conduct a physical security review of all deployed camera units to ensure tamper-evident seals and physical access controls are in place.\n\n**Long-term improvements:**\n- Implement a Zero Trust architecture for IoT devices so that physical compromise of a single unit cannot expose broader system data or credentials.\n- Enforce strict data minimization policies, ensuring cameras retain only the minimum data necessary and purge records on a defined schedule.\n- Require third-party penetration testing — including physical attack simulations — for all surveillance hardware before and during deployment.\n\n**Detection measures:**\n- Deploy tamper-detection alerts that notify operators immediately when a device is opened or storage is accessed outside normal operational parameters.\n- Establish continuous integrity monitoring of device firmware and configuration to detect unauthorized changes resulting from physical or remote compromise.",[12,13,14,15,16,17,18,19,20,21,22],"CIS Control 4: Secure Configuration of Enterprise Assets and Software","CIS Control 3: Data Protection","CIS Control 12: Network Infrastructure Management","NIST SP 800-82: Guide to Industrial Control Systems (ICS) Security","NIST CSF PR.DS-1: Data-at-rest protection","NIST CSF PR.AC-3: Remote access management","NIST SP 800-53 SC-28: Protection of Information at Rest","NIST SP 800-53 PE-3: Physical Access Control","GDPR Article 25: Data Protection by Design and by Default","GDPR Article 32: Security of Processing","ETSI EN 303 645: Cybersecurity for Consumer IoT Devices",{},"published","2026-09-16T12:22:20.956586+00:00","2026-09-16T12:22:20.852+00:00",{"id":7,"url":28,"slug":29,"title":30},"https:\u002F\u002Fwww.wired.com\u002Fstory\u002Fhackers-flock-camera-data-shows-how-system-works\u002F","hackers-got-inside-a-flock-camera-its-data-shows-how-the-system-really-works-513c0b","Hackers Got Inside a Flock Camera. Its Data Shows How the System Really Works",[32,38,44],{"id":33,"name":34,"slug":35,"description":36,"color":37},"859cf0ad-a7e9-42bb-a75d-bac6511fa5d5","Configuration Management","configuration-management","Misconfigs, default credentials, exposed services","#eab308",{"id":39,"name":40,"slug":41,"description":42,"color":43},"c8b843a5-d5a7-41d1-8d3b-cabded09d2ef","Data Protection","data-protection","Unencrypted data, missing DLP, poor classification","#3b82f6",{"id":45,"name":46,"slug":47,"description":48,"color":49},"f43a7f30-5046-4b10-9dba-1a704139821e","Network Segmentation","network-segmentation","Lateral movement, flat networks, missing firewalls","#06b6d4",[],[52,56],{"slug":53,"name":54,"problem":55},"asset-inventory","Cyber asset inventory","You cannot patch, monitor or protect the devices, cloud resources and accounts you do not know you have.",{"slug":57,"name":58,"problem":59},"encryption-key-management","Encryption and key management","Stolen data stays unreadable, and the keys stay under your control."]