Security Sales & Integration April 2021 - 20

VIDEO

IMAGING

RECORDING

MANAGEMENT

Verkada Breach Exposes
150K Security Cameras
▶ SAN MATEO, Calif. - Verkada, a
provider of enterprise security software
and hardware, was breached, giving hackers access to more 150,000 Internet-connected security cameras that were being
used inside schools, jail cells, hospital
ICUs, and major companies like Tesla,
Nissan, Equinox, Cloudflare. The hack
was conducted by a loose-knit anti-corporate hactivist group called APT-69420,
based in Switzerland.
According to the group's representative
Till Kottmann, they accessed Verkada's
systems on March 8 and the hack lasted
for 36 hours. She described Verkada, based
here, as a " fully-centralized platform " that
made it easy for her team to access and

download footage from thousands of
security cameras. The leaked footage appears to include major companies and institutions, but not private homes.
The video and images purport to capture a range of activities that might be
sensitive, like security video from the Tesla car manufacturing line and a screenshot
from inside the security firm Cloudflare.
Some of the material is highly personal,
including video of patients in hospital intensive care units and prisoners inside the
Madison County Jail in Huntsville, Ala.
In news reports, Kottman described the
security on Verkada systems as " nonexistent and irresponsible, " and said her group
targeted the company to demonstrate how

OSSA Releases Camera Cybersecurity Spec

▶ SAN RAMON, Calif. - The Open Security & Safety Alliance
(OSSA) announces two key developments as part of its mission to
promote trustworthy and innovative security and safety solutions.
First, a new specification is now available to members that focuses on camera cybersecurity measures. OSSA also introduces a
new App Developer Council designed to attract and involve app developers in the Alliance's growing ecosystem of stakeholders from
all facets of the security, safety and building automation space.
The newest technical specification - the OSSA Camera Cyber Security Specification - contains definitions and guidelines
regarding mandatory and optional security determinations for
cameras. It is largely based on an existing standard by the International Electrotechnical Commission (IEC), with an additional
clear focus on the security market and OSSA philosophy by transparently dividing the roles and responsibilities between camera
manufacturers, the operating system (OS) provider and the system-on-chip (SoC) vendor, in particular.
The specification also prescribes responsibility changes in the
event of individual OS modifications by camera manufacturers.
The mandatory part of these guidelines will be used as input for
the forthcoming OSSA certification framework.
Earlier this year the Alliance created the annual OSSA App Developer Council. Depending on the size of the developer company,
the council is said to provide benefits including heavy industry
exposure, early access to finalized Alliance deliverables, and exclusive insight into the OSSA specification roadmap.

20 Security Sales & Integration APRIL 2021

SS2104 pp20 Video.indd 20

Some cameras let the hackers access
Verkada customers' separate corporate
networks, according to news reports.

easy it is to access Internet-connected cameras placed in highly sensitive locations.
In statement to Bloomberg, a Verkada
representative said: " We have disabled all
internal administrator accounts to prevent any unauthorized access. Our internal security team and external security
firm are investigating the scale and scope
of this potential issue. "

Milestone Releases New Husky VMS
Appliance Series

▶ LAKE OSWEGO, Ore. - Milestone Systems announced the
launch of a new Husky appliance series during the company's recent MIPS global partner event and video technology conference,
which was held virtually for the first time. The company offers its
partners and customers a range of six video management appliances that cover a variety of use cases from simple setups in small
sites, including retail, to larger and more complex installations
such as critical facilities.
Milestone says with its reliability, ease of use and optimal
XProtect integration, the new Husky series enables partners
and customers to achieve much more with their Milestone
XProtect video management solution, powered by Dell Technologies OEM Solutions. Partners and customers will also get
extensive service and support with a single point of contact for
both hardware and software, along with the possibility to access onsite support through a global support network, according to the announcement.
The new Husky series is preloaded with the XProtect VMS, with
the intent to save integrators time on setup and installation. Upon
turning on the hardware, users can begin using the appliances after inputting their XProtect license code.
" This new portfolio brings together ease of use, performance,
reliability and optimal integration with XProtect and importantly,
a comprehensive service offering and the flexibility that Dell Technologies will bring, " says Milestone CTO Bjørn Skou Eilertsen.
securitysales.com

3/22/21 10:04 AM

http://www.securitysales.com

Security Sales & Integration April 2021

Table of Contents for the Digital Edition of Security Sales & Integration April 2021