Turning Camera Surveillance on its Axis - Critical Vulnerabilities in Axis Communications Platforms

Explore critical security vulnerabilities in Axis Communications surveillance systems through this 22-minute DEF CON 33 conference talk. Examine the cybersecurity implications when adversaries compromise surveillance cameras across thousands of Western organizations and companies, particularly as trust in Chinese-made IoT devices declines and alternatives become limited. Discover how surveillance platforms can become double-edged swords, with focus on Axis Communications—a major video surveillance provider used by U.S. government agencies, schools, medical facilities, and Fortune 500 companies. Learn about an in-depth analysis of the Axis.Remoting communication protocol that reveals critical vulnerabilities enabling attackers to achieve pre-authentication remote code execution on Axis platforms. Understand how this access can serve as a gateway into organizational internal networks through surveillance infrastructure, and explore a novel technique for passive data exfiltration that allows attackers to map organizations using this equipment for potential targeted attacks.