VideoCybersecurity — research and guidesSecurity for IP cameras, NVRs, VMS platforms and connected video infrastructurehttps://videocybersecurity.com/2026-09-05T00:00:00ZCamera firmware and the patching problemhttps://videocybersecurity.com/research/camera-firmware-and-patching/2026-09-05T00:00:00Z2026-09-05T00:00:00ZCamera firmware is versioned by silicon, delivered by hand and signed only above a floor — what that means for choosing a build and keeping an estate on it.Where camera segmentation goes wronghttps://videocybersecurity.com/research/camera-network-segmentation/2026-09-05T00:00:00Z2026-09-05T00:00:00ZCamera VLANs fail at the rule set more often than at the drawing. Vendor documentation shows the four places it happens, and what to write instead.Common camera ports and protocolshttps://videocybersecurity.com/research/camera-ports-and-protocols/2026-09-05T00:00:00Z2026-09-05T00:00:00ZThe ports cameras and VMS servers actually listen on, the shipped enabled-or-disabled state each vendor documents, and the numbers nobody has confirmed.End-of-life cameras and cyber riskhttps://videocybersecurity.com/research/end-of-life-cameras/2026-09-05T00:00:00Z2026-09-05T00:00:00ZWhat an end-of-support commitment actually covers, whose clock it runs from, and which camera makers publish no lifecycle policy we could retrieve.How cameras end up on the internethttps://videocybersecurity.com/research/how-cameras-become-internet-exposed/2026-09-05T00:00:00Z2026-09-05T00:00:00ZEvery published count of internet-exposed cameras counts devices answering at a routable address, which is not the same population as the reachable one.What Mirai did to the camera industryhttps://videocybersecurity.com/research/mirai-and-the-camera-industry/2026-09-05T00:00:00Z2026-09-05T00:00:00ZCameras and DVRs are named in the Mirai charging documents. What three plea agreements admit, what researchers only estimated, and what nobody ever verified.Procurement rules that now govern surveillance equipmenthttps://videocybersecurity.com/research/video-surveillance-procurement-rules/2026-09-05T00:00:00Z2026-09-05T00:00:00ZWhat Section 889, the FCC authorisation rules and their enforcement, the Entity List, UK PSTI and the EU Cyber Resilience Act actually require, and from when.Which video vendors publish security advisorieshttps://videocybersecurity.com/research/which-vendors-publish-advisories/2026-09-05T00:00:00Z2026-09-05T00:00:00ZCNA status, advisory locations and disclosure policy across thirteen video-security vendors, checked against the CVE Program's own roster on 5 September 2026.