TLDR InfoSec · MISCELLANEOUS
RISKY BULLETIN: SLOVAKIA FINDS RUSSIAN BACKDOOR IN TRAFFIC SPEED CAMERAS
Summary from the TLDR InfoSec newsletter
Slovakia's national security service (NBU) discovered that recently installed traffic cameras contain a backdoor granting shell and network access via SMS commands from hardcoded Russian phone numbers. The compromised NERO R-ONE cameras, allegedly purchased through a Cyprus shell company, were identified as rebadged units manufactured by a St. Petersburg-based firm. In addition to the SMS backdoor, the NBU technical report revealed that the devices shipped with SecureBoot disabled and exposed live video streams without authentication.