Internet-connected cameras designed to watch homes, roads and workplaces are being repurposed as wartime intelligence sensors. Governments and aligned hacking groups use compromised feeds to track troops, discover military sites and assess attacks, while automation helps them search and analyze video at a scale human teams could not match.
One case documented by The Wall Street Journal began with Team OneFist, a hacking group that supports Ukraine, taking control of a camera in Sevastopol in Russian-occupied Crimea. The group used the camera to follow a military helicopter to a previously unknown Russian air base, then shared the location with Ukrainian forces. The Journal reported that Ukraine attacked the base soon afterward, damaging aircraft and air-defense systems.
A surveillance network hiding in plain sight
Israel’s National Cyber Directorate says Iran-linked groups breached more than 250 sensitive Israeli security cameras in 2026. The targets included license-plate readers and cameras near strategic sites and places where soldiers gathered. In Ukraine, the SBU security service says it has secured, reoriented or blocked roughly 40,000 cameras that posed possible risks since Russia’s 2022 invasion.
The activity extends beyond active battlefields. Dutch intelligence agencies warned in July that Russian state actors were systematically compromising cameras across Europe to monitor military transport routes, arms deliveries to Ukraine and Ukrainian personnel.
Why cameras remain easy targets
Many cameras have weaker protections than laptops and phones. They may retain default passwords, sit directly on the public internet or go years without security updates. Facilities teams, rather than information-security staff, often install and maintain them. Attackers can automate the search for exposed devices, and AI systems can sift large volumes of footage for vehicles, weapons and movement patterns.
The defensive steps are basic but consequential. A summary of the Dutch guidance urges owners to limit direct internet exposure, replace default passwords and mask sensitive areas from a camera’s field of view. A camera does not need to face a military facility to reveal useful information; roads, neighboring buildings and routine traffic can all expose patterns.
