06/03/2026
A surveillance camera should not become a pathway into critical infrastructure.
But that is exactly the type of exposure SecurityScorecard researchers identified using Driftnet in our latest research report.
Inside one municipal utility environment, researchers found:
πΉ 30 instances of Dahua and Hikvision surveillance equipment
β οΈ Exposed ICS and SCADA-related services
β οΈ Weak encryption across hundreds of internet-facing systems
β οΈ Consumer devices operating near operational infrastructure
Many IP cameras ship with limited security controls and can be leveraged for:
β’ Man-in-the-Middle attacks
β’ Malware staging
β’ Distributed Denial-of-Service activity
β’ Lateral movement into operational environments
The camera is rarely the final target. It is often the entry point.
Driftnet helps SecurityScorecard uncover hidden exposure across internet-facing infrastructure before attackers operationalize it.
π Read the report and find out how Driftnet delivers the visibility organizations need to move from reactive security to continuous, threat-informed defense: https://securityscorecard.com/resources/reports/securityscorecards-new-driftnet-engine-reveals-americas-small-town-surveillance-blind-spot/?utm_campaign=&utm_content=&utm_medium=social&utm_source=facebook