Scans for Hikvision Intelligent Security API, (Sun, Jul 19th)
2026-07-20T01:23:46Z•566850dad61359948dc82d6387e1432003b804a28c42bfdb77e297fa56310e7b
ai-assistantcamerachromiumcredentialscritical-vulnerabilitiesdshieldedgeexploitedhikvisionhoneypotintelligent security apiiotmcpmicrosoftpatch-tuesdayreconnaissancescanningsiemvulnerability-managementwireshark
What happened
SANS ISC diary roundup (mid–July 2026): honeypots detected internet‑wide scans targeting Hikvision’s Intelligent Security API (continued widespread targeting of IoT/camera devices). Microsoft Patch Tuesday (July 2026) addresses 622 vulnerabilities (including 62 rated critical), with two vulnerabilities already exploited and one disclosed prior to the patch release; Chromium/Edge have an additional ~427 vulnerabilities. Other notes: active scans for MCP servers and AI assistant credentials were observed, DShield SIEM received an update, and Wireshark 4.6.7 was released fixing 12 vulnerabilities
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- sans_isc_diary
- Record identifier
- 566850dad61359948dc82d6387e1432003b804a28c42bfdb77e297fa56310e7b
- Enrichment time
- 2026-07-20T01:23:46Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.