Hikvision surveillance equipment vulnerabilities are being exploited, and the attack activities overlap with the time of Russian air strikes on Ukraine.

From September 23 to October 1, there was a sudden increase in attempts to exploit vulnerabilities in Hikvision surveillance equipment. Attackers exploited the CVE-2021-36260 vulnerability, which has a risk score of 9.8. The attack activities overlapped with the time of Russian air strikes on Ukraine.

Why it matters. Hikvision is a globally significant supplier of surveillance equipment, and the compromise of its devices could impact Ukraine's surveillance and military reconnaissance capabilities.