Europe to Push New Security Rules Amid IoT Mess
Summary: The European Commission is drafting cybersecurity requirements for Internet of Things devices such as Web-connected cameras, routers and DVRs, as part of a plan to overhaul EU telecommunications laws, with a labeling system modeled on EU energy-consumption ratings floated as a template. Flashpoint Intel found more than 515,000 systems vulnerable to flaws in XiongMai Technologies boards, whose Web admin page can be bypassed by navigating to "DVR.htm" before login, and whose root/xc3511 password is hardcoded into firmware that users cannot feasibly change.
Key Takeaway: Flashpoint attributed roughly 65% of US Mirai attacking sources - about 3,000 of some 400,000 addresses - to Dahua, which stated DDoS threats had not affected its North America devices and that affected units ran pre-January 2015 firmware with default credentials.
Read the original at Krebs on Security ↗
- Topics
- Data Breaches
- Related
- TSMC employee data breach linked to cloud provider Cyber Risks · Nov 15, 2026Data Breach at La Poste Subsidiary Maileva Affects 22 Million People in France Cyber Risks · Nov 15, 2026City of Osaka warns of data breach impacting 1 million as Japan reels from dozens of cyber incidents Cyber Risks · Nov 13, 2026