IoT & Smart Device Security
IP Camera & Surveillance Security
IP cameras are the most numerous, and most neglected, computers in most organizations: default passwords, years-old firmware, UPnP-punched internet exposure, and microphones nobody inventoried. They built the Mirai botnet that took down Dyn in 2016, and the 2021 Verkada breach exposed 150,000 live feeds. Cameras need credential resets, firmware lifecycles, and network isolation like any other fleet.
Key points
- Change every default camera password and disable unused accounts and ONVIF profiles.
- Block cameras from initiating internet connections, view via VPN or local NVR only.
- Disable UPnP on routers so cameras can't re-expose themselves.
- Track firmware per model with EOL dates; replace unpatchable units.
- Segment cameras onto isolated VLANs with no route to workstations or servers.
- Audit who can view which feeds and log access, Verkada showed why.
- Cover lenses and mute mics in sensitive areas by policy, not trust.
- Include cameras in incident response: a compromised camera is a network foothold.
Field note
Disable UPnP first; cameras re-expose themselves through it faster than any admin can close ports manually. The router setting matters more than the camera settings.
Frequently asked questions
What was the Mirai botnet?
2016 malware that enslaved default-credential cameras and DVRs, then used them to DDoS Dyn, taking down major sites across the US East Coast.
What happened with Verkada in 2021?
Attackers breached super-admin access and viewed ~150,000 live camera feeds, showing centralized cloud camera platforms are high-value targets.
Are baby monitors and doorbells included?
Absolutely, same weak-default, rare-update pattern in consumer packaging.
Do cameras really attack servers?
Yes, as botnet nodes, as lateral-movement beachheads, and as exfiltration paths for audio/video.
How Kinetikatech helps with iot & smart device security
We've handled this hundreds of times: Fridges, cameras, controllers, and building systems were never designed for the hostile internet, we secure them anyway. With 24/7 Server Monitoring and Server Management, you get the full loop, we assess, we implement, we watch it around the clock, and we pick up within 30 minutes when it matters.