{"id":39629,"date":"2021-02-18T12:01:09","date_gmt":"2021-02-18T12:01:09","guid":{"rendered":"https:\/\/www.threatshub.org\/blog\/nurserycam-horror-show-secure-daycare-video-monitoring-product-beamed-dvr-admin-creds-to-all-users\/"},"modified":"2021-02-18T12:01:09","modified_gmt":"2021-02-18T12:01:09","slug":"nurserycam-horror-show-secure-daycare-video-monitoring-product-beamed-dvr-admin-creds-to-all-users","status":"publish","type":"post","link":"https:\/\/www.threatshub.org\/blog\/nurserycam-horror-show-secure-daycare-video-monitoring-product-beamed-dvr-admin-creds-to-all-users\/","title":{"rendered":"Nurserycam horror show: &#8216;Secure&#8217; daycare video monitoring product beamed DVR admin creds to all users"},"content":{"rendered":"<p><span data-label=\"updated\">Updated<\/span> A parental webcam targeted at nursery schools was so poorly designed that anyone who downloaded its mobile app gained access to admin credentials, bypassing intended authentication, according to security pros \u2013 with one dad saying its creators brushed off his complaints about insecurities six years ago.<\/p>\n<p>Anyone could have logged into Nurserycam&#8217;s DVRs thanks to poor design choices \u2013 and a decision to &#8220;authenticate&#8221; logins by passing the device&#8217;s admin username and password to parents, claimed a reverse engineer who looked into the matter.<\/p>\n<div aria-hidden=\"true\" class=\"adun\" data-pos=\"top\" data-raptor=\"condor\" data-xsm=\",button,mpu,\" data-sm=\",button,mpu,\" data-md=\",button,banner_plus,mpu\"> <noscript> <a href=\"https:\/\/pubads.g.doubleclick.net\/gampad\/jump?co=1&amp;iu=\/6978\/reg_security\/front&amp;sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&amp;tile=2&amp;c=2YC6mqZT9sUb-IyS5roLu5AAAAEQ&amp;t=ct%3Dns%26unitnum%3D2%26raptor%3Dcondor%26pos%3Dtop%26test%3D0\" target=\"_blank\" rel=\"noopener noreferrer\"> <img decoding=\"async\" src=\"https:\/\/pubads.g.doubleclick.net\/gampad\/ad?co=1&amp;iu=\/6978\/reg_security\/front&amp;sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&amp;tile=2&amp;c=2YC6mqZT9sUb-IyS5roLu5AAAAEQ&amp;t=ct%3Dns%26unitnum%3D2%26raptor%3Dcondor%26pos%3Dtop%26test%3D0\" alt> <\/a> <\/noscript> <\/div>\n<p>Melissa Kao, a director of Footfallcam Ltd, the firm behind Nurserycam, insisted to <i>The Register<\/i> that what infosec researchers had found was &#8220;legacy non-functional codes&#8221; [sic] that were &#8220;there to distract hackers&#8221;.<\/p>\n<p>Footfallcam Ltd was recently seen on <i>The Register<\/i> after it threatened an infosec researcher with a baseless police report <a target=\"_blank\" href=\"https:\/\/www.theregister.com\/2021\/02\/12\/footfallcam_twitter_kerfuffle\/\" rel=\"noopener noreferrer\">unless he deleted a Twitter thread<\/a> pointing out one of its products&#8217; shortcomings.<\/p>\n<div aria-hidden=\"true\" class=\"adun\" data-pos=\"mid\" data-raptor=\"eagle\" data-xsm=\",button,mpu_plusplus,\" data-sm=\",button,mpu_plusplus,\" data-md=\",button,mpu_plusplus,\"> <noscript> <a href=\"https:\/\/pubads.g.doubleclick.net\/gampad\/jump?co=1&amp;iu=\/6978\/reg_security\/front&amp;sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&amp;tile=3&amp;c=33YC6mqZT9sUb-IyS5roLu5AAAAEQ&amp;t=ct%3Dns%26unitnum%3D3%26raptor%3Deagle%26pos%3Dmid%26test%3D0\" target=\"_blank\" rel=\"noopener noreferrer\"> <img decoding=\"async\" src=\"https:\/\/pubads.g.doubleclick.net\/gampad\/ad?co=1&amp;iu=\/6978\/reg_security\/front&amp;sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&amp;tile=3&amp;c=33YC6mqZT9sUb-IyS5roLu5AAAAEQ&amp;t=ct%3Dns%26unitnum%3D3%26raptor%3Deagle%26pos%3Dmid%26test%3D0\" alt> <\/a> <\/noscript> <\/div>\n<p>Internet of Things security prober Andrew &#8220;Cybergibbons&#8221; Tierney <a target=\"_blank\" rel=\"nofollow noopener noreferrer\" href=\"https:\/\/cybergibbons.com\/security-2\/a-warning-to-users-of-nurserycam\/\">published a warning<\/a> to Nurserycam&#8217;s users after realising how insecure the product was. He wrote: &#8220;These issues would allow any parent, past or present, to access the video feeds from the nursery. There is also the chance that anyone on the Internet could have accessed them.&#8221;<\/p>\n<p>Nurserycam is an internet-connected DVR with a port-forwarding firewall in front of it, taking its feed from CCTV cameras deployed inside nurseries and pointed at the children. The idea is to let parents monitor their children remotely. Several nurseries (daycare centres for preschool kids aged six months to five years) around the UK appear to have deployed the system, judging by search results for the Nurserycam name.<\/p>\n<h3 class=\"crosshead\"> <span>You get an admin password, you get an admin password, you too!<\/span><br \/>\n<\/h3>\n<p>Tierney held that if a person knew the IP address for one of Nurserycam&#8217;s DVRs, they could log into the device and view live camera feeds thanks to the system&#8217;s poor design. They could even have viewed up to 18 months of footage featuring children and nursery workers, he added.<\/p>\n<p>Tierney, who spoke extensively to <i>The Register<\/i>, explained in his blog: &#8220;For all parents connecting to a given nursery, they are given the same username and password for the DVR. In the examples I have been shown, the username is admin and the password are obvious words followed by 888. This means that the parents, past and present, have all been given the administrator password for the DVR.&#8221;<\/p>\n<p>We understand that the admin credentials were visible in the source of the webpage shown to parents using Nurserycam&#8217;s web app to access the live camera feeds of children. Moreover, those admin passwords were not unique to each DVR.<\/p>\n<p>Nurserycam&#8217;s Kao insisted that the DVRs&#8217; default passwords were changed after installation. Tierney told <i>El Reg<\/i> that parent users of the app at different nurseries had confirmed to him this was not true.<\/p>\n<h3 class=\"crosshead\"> <span>Pattern of behaviour<\/span><br \/>\n<\/h3>\n<p>A parent who spoke to <i>The Register<\/i> and asked not to be named said he had reported similar flaws to Nurserycam back in 2015 \u2013 and was brushed off by Kao. At the time, this father had realised that any Nurserycam video feed could be viewed by simply changing the URL in the web browser: a flaw known in infosec as an insecure direct object reference (IDOR) vulnerability.<\/p>\n<p>While the vuln was eventually fixed, the dad recounted to us how Kao had phoned him after his initial report direct to the company \u2013 and had initially refused to identify herself.<\/p>\n<p><i>El Reg<\/i> has reviewed evidence showing the firm seemed more concerned with knowledge of the flaws being made public than with remediation, <a target=\"_blank\" href=\"https:\/\/www.theregister.com\/2021\/02\/12\/footfallcam_twitter_kerfuffle\/\" rel=\"noopener noreferrer\">similar to last week&#8217;s Footfallcam debacle<\/a> (where Kao&#8217;s fellow Footfallcam Ltd director, Edward Wong, threatened an infosec bod with a police report unless he deleted Twitter criticism of another product&#8217;s poor design). While there were no specific threats made, it appeared removing this criticism was of greater importance to the company than fixing its product&#8217;s security shortcomings, which seemingly were still a problem six years later.<\/p>\n<p>Controversies in the lively UK infosec world over insecure IoT products and poor responses by industry to security issues are not unusual. However, when live video feeds of young children are freely available online to anyone with just a little technical knowhow, the people behind that system have a moral imperative to act fast.<\/p>\n<p>It is also important that end users of those products \u2013 nurseries and parents alike \u2013 are aware that Nurserycam&#8217;s claims that its video streams were &#8220;safer than online banking&#8221; were simply not true.<\/p>\n<p>While Footfallcam Ltd claims it has fixed the vulnerabilities Tierney (and others) highlighted, it <a target=\"_blank\" href=\"https:\/\/twitter.com\/cybergibbons\/status\/1361617789644070914\" rel=\"noopener noreferrer\">appears<\/a>, at the time of writing, that these fixes apply only a basic level of security that ought to have been in place for years.<\/p>\n<p>We have asked the Information Commissioner&#8217;s Office for comment. \u00ae<\/p>\n<h3 class=\"crosshead\"> <span>Bootnote<\/span><br \/>\n<\/h3>\n<p>A <a target=\"_blank\" href=\"https:\/\/twitter.com\/_MG_\/status\/1359582075439882240\" rel=\"noopener noreferrer\">Twitter thread<\/a> prompted by the controversies over this company&#8217;s practices makes eye-opening reading, though <i>The Register<\/i> has not verified its contents.<\/p>\n<h3 class=\"crosshead\"> <span>Updated to add<\/span><br \/>\n<\/h3>\n<p>An ICO spokesperson said: &#8220;Children&#8217;s personal information \u2013 including images \u2013 requires specific protection under data protection law. Any company or organisation processing children&#8217;s data must make sure they have appropriate security measures in place to protect this data, and should carry out a risk assessment beforehand.<\/p>\n<div aria-hidden=\"true\" class=\"adun\" data-pos=\"top\" data-raptor=\"falcon\" data-xsm=\",button,dbutton,mpu_plus,dmpu,\" data-sm=\",button,dbutton,mpu_plus,dmpu,\" data-md=\",button,dbutton,mpu_plus,dmpu,\"> <noscript> <a href=\"https:\/\/pubads.g.doubleclick.net\/gampad\/jump?co=1&amp;iu=\/6978\/reg_security\/front&amp;sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&amp;tile=4&amp;c=44YC6mqZT9sUb-IyS5roLu5AAAAEQ&amp;t=ct%3Dns%26unitnum%3D4%26raptor%3Dfalcon%26pos%3Dmid%26test%3D0\" target=\"_blank\" rel=\"noopener noreferrer\"> <img decoding=\"async\" src=\"https:\/\/pubads.g.doubleclick.net\/gampad\/ad?co=1&amp;iu=\/6978\/reg_security\/front&amp;sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&amp;tile=4&amp;c=44YC6mqZT9sUb-IyS5roLu5AAAAEQ&amp;t=ct%3Dns%26unitnum%3D426raptor%3Dfalcon%26pos%3Dmid%26test%3D0\" alt> <\/a> <\/noscript> <\/div>\n<p>&#8220;When an organisation buys in products or services that will be involved in the processing, they need to ensure that they choose ones that are designed with data protection in mind. This is part of a data protection by design approach and can help them to protect children&#8217;s personal information. Organisations should consider these issues when doing their risk assessment.&#8221;<\/p>\n<p> READ MORE <a href=\"https:\/\/go.theregister.com\/feed\/www.theregister.com\/2021\/02\/18\/nurserycam_security_problems_footfallcam_ltd\/\">HERE<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p>Company has a habit of reacting badly to vuln disclosures Updated\u00a0 A parental webcam targeted at nursery schools was so poorly designed that anyone who downloaded its mobile app gained access to admin credentials, bypassing intended authentication, according to security pros \u2013 with one dad saying its creators brushed off his complaints about insecurities six years ago.\u2026  READ MORE HERE&#8230;<\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"colormag_page_layout":"default_layout","footnotes":""},"categories":[63],"tags":[],"class_list":["post-39629","post","type-post","status-publish","format-standard","hentry","category-the-register"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v27.8 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>Nurserycam horror show: &#039;Secure&#039; daycare video monitoring product beamed DVR admin creds to all users 2026 | ThreatsHub Cybersecurity News<\/title>\n<meta name=\"description\" content=\"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security &amp; Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.threatshub.org\/blog\/nurserycam-horror-show-secure-daycare-video-monitoring-product-beamed-dvr-admin-creds-to-all-users\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Nurserycam horror show: &#039;Secure&#039; daycare video monitoring product beamed DVR admin creds to all users 2026 | ThreatsHub Cybersecurity News\" \/>\n<meta property=\"og:description\" content=\"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security &amp; Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.threatshub.org\/blog\/nurserycam-horror-show-secure-daycare-video-monitoring-product-beamed-dvr-admin-creds-to-all-users\/\" \/>\n<meta property=\"og:site_name\" content=\"ThreatsHub Cybersecurity News\" \/>\n<meta property=\"article:published_time\" content=\"2021-02-18T12:01:09+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/pubads.g.doubleclick.net\/gampad\/ad?co=1&amp;iu=\/6978\/reg_security\/front&amp;sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&amp;tile=2&amp;c=2YC6mqZT9sUb-IyS5roLu5AAAAEQ&amp;t=ct%3Dns%26unitnum%3D2%26raptor%3Dcondor%26pos%3Dtop%26test%3D0\" \/>\n<meta name=\"author\" content=\"TH Author\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@threatshub\" \/>\n<meta name=\"twitter:site\" content=\"@threatshub\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"TH Author\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"5 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/nurserycam-horror-show-secure-daycare-video-monitoring-product-beamed-dvr-admin-creds-to-all-users\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/nurserycam-horror-show-secure-daycare-video-monitoring-product-beamed-dvr-admin-creds-to-all-users\\\/\"},\"author\":{\"name\":\"TH Author\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#\\\/schema\\\/person\\\/12e0a8671ff89a863584f193e7062476\"},\"headline\":\"Nurserycam horror show: &#8216;Secure&#8217; daycare video monitoring product beamed DVR admin creds to all users\",\"datePublished\":\"2021-02-18T12:01:09+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/nurserycam-horror-show-secure-daycare-video-monitoring-product-beamed-dvr-admin-creds-to-all-users\\\/\"},\"wordCount\":956,\"publisher\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#organization\"},\"image\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/nurserycam-horror-show-secure-daycare-video-monitoring-product-beamed-dvr-admin-creds-to-all-users\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/pubads.g.doubleclick.net\\\/gampad\\\/ad?co=1&amp;iu=\\\/6978\\\/reg_security\\\/front&amp;sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&amp;tile=2&amp;c=2YC6mqZT9sUb-IyS5roLu5AAAAEQ&amp;t=ct%3Dns%26unitnum%3D2%26raptor%3Dcondor%26pos%3Dtop%26test%3D0\",\"articleSection\":[\"The Register\"],\"inLanguage\":\"en-US\"},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/nurserycam-horror-show-secure-daycare-video-monitoring-product-beamed-dvr-admin-creds-to-all-users\\\/\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/nurserycam-horror-show-secure-daycare-video-monitoring-product-beamed-dvr-admin-creds-to-all-users\\\/\",\"name\":\"Nurserycam horror show: 'Secure' daycare video monitoring product beamed DVR admin creds to all users 2026 | ThreatsHub Cybersecurity News\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/nurserycam-horror-show-secure-daycare-video-monitoring-product-beamed-dvr-admin-creds-to-all-users\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/nurserycam-horror-show-secure-daycare-video-monitoring-product-beamed-dvr-admin-creds-to-all-users\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/pubads.g.doubleclick.net\\\/gampad\\\/ad?co=1&amp;iu=\\\/6978\\\/reg_security\\\/front&amp;sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&amp;tile=2&amp;c=2YC6mqZT9sUb-IyS5roLu5AAAAEQ&amp;t=ct%3Dns%26unitnum%3D2%26raptor%3Dcondor%26pos%3Dtop%26test%3D0\",\"datePublished\":\"2021-02-18T12:01:09+00:00\",\"description\":\"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/nurserycam-horror-show-secure-daycare-video-monitoring-product-beamed-dvr-admin-creds-to-all-users\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/nurserycam-horror-show-secure-daycare-video-monitoring-product-beamed-dvr-admin-creds-to-all-users\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/nurserycam-horror-show-secure-daycare-video-monitoring-product-beamed-dvr-admin-creds-to-all-users\\\/#primaryimage\",\"url\":\"https:\\\/\\\/pubads.g.doubleclick.net\\\/gampad\\\/ad?co=1&amp;iu=\\\/6978\\\/reg_security\\\/front&amp;sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&amp;tile=2&amp;c=2YC6mqZT9sUb-IyS5roLu5AAAAEQ&amp;t=ct%3Dns%26unitnum%3D2%26raptor%3Dcondor%26pos%3Dtop%26test%3D0\",\"contentUrl\":\"https:\\\/\\\/pubads.g.doubleclick.net\\\/gampad\\\/ad?co=1&amp;iu=\\\/6978\\\/reg_security\\\/front&amp;sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&amp;tile=2&amp;c=2YC6mqZT9sUb-IyS5roLu5AAAAEQ&amp;t=ct%3Dns%26unitnum%3D2%26raptor%3Dcondor%26pos%3Dtop%26test%3D0\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/nurserycam-horror-show-secure-daycare-video-monitoring-product-beamed-dvr-admin-creds-to-all-users\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Nurserycam horror show: &#8216;Secure&#8217; daycare video monitoring product beamed DVR admin creds to all users\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#website\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/\",\"name\":\"ThreatsHub Cybersecurity News\",\"description\":\"%%focuskw%% Threat Intel \u2013 Threat Intel Services \u2013 CyberIntelligence \u2013 Cyber Threat Intelligence - Threat Intelligence Feeds - Threat Intelligence Reports - CyberSecurity Report \u2013 Cyber Security PDF \u2013 Cybersecurity Trends - Cloud Sandbox \u2013- Threat IntelligencePortal \u2013 Incident Response \u2013 Threat Hunting \u2013 IOC - Yara - Security Operations Center \u2013 SecurityOperation Center \u2013 Security SOC \u2013 SOC Services - Advanced Threat - Threat Detection - TargetedAttack \u2013 APT \u2013 Anti-APT \u2013 Advanced Protection \u2013 Cyber Security Services \u2013 Cybersecurity Services -Threat Intelligence Platform\",\"publisher\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#organization\"},\"alternateName\":\"Threatshub.org\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#organization\",\"name\":\"ThreatsHub.org\",\"alternateName\":\"Threatshub.org\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wp-content\\\/uploads\\\/2025\\\/05\\\/Threatshub_Favicon1.jpg\",\"contentUrl\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wp-content\\\/uploads\\\/2025\\\/05\\\/Threatshub_Favicon1.jpg\",\"width\":432,\"height\":435,\"caption\":\"ThreatsHub.org\"},\"image\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#\\\/schema\\\/logo\\\/image\\\/\"},\"sameAs\":[\"https:\\\/\\\/x.com\\\/threatshub\"]},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#\\\/schema\\\/person\\\/12e0a8671ff89a863584f193e7062476\",\"name\":\"TH Author\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g\",\"caption\":\"TH Author\"}}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Nurserycam horror show: 'Secure' daycare video monitoring product beamed DVR admin creds to all users 2026 | ThreatsHub Cybersecurity News","description":"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.threatshub.org\/blog\/nurserycam-horror-show-secure-daycare-video-monitoring-product-beamed-dvr-admin-creds-to-all-users\/","og_locale":"en_US","og_type":"article","og_title":"Nurserycam horror show: 'Secure' daycare video monitoring product beamed DVR admin creds to all users 2026 | ThreatsHub Cybersecurity News","og_description":"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.","og_url":"https:\/\/www.threatshub.org\/blog\/nurserycam-horror-show-secure-daycare-video-monitoring-product-beamed-dvr-admin-creds-to-all-users\/","og_site_name":"ThreatsHub Cybersecurity News","article_published_time":"2021-02-18T12:01:09+00:00","og_image":[{"url":"https:\/\/pubads.g.doubleclick.net\/gampad\/ad?co=1&amp;iu=\/6978\/reg_security\/front&amp;sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&amp;tile=2&amp;c=2YC6mqZT9sUb-IyS5roLu5AAAAEQ&amp;t=ct%3Dns%26unitnum%3D2%26raptor%3Dcondor%26pos%3Dtop%26test%3D0","type":"","width":"","height":""}],"author":"TH Author","twitter_card":"summary_large_image","twitter_creator":"@threatshub","twitter_site":"@threatshub","twitter_misc":{"Written by":"TH Author","Est. reading time":"5 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.threatshub.org\/blog\/nurserycam-horror-show-secure-daycare-video-monitoring-product-beamed-dvr-admin-creds-to-all-users\/#article","isPartOf":{"@id":"https:\/\/www.threatshub.org\/blog\/nurserycam-horror-show-secure-daycare-video-monitoring-product-beamed-dvr-admin-creds-to-all-users\/"},"author":{"name":"TH Author","@id":"https:\/\/www.threatshub.org\/blog\/#\/schema\/person\/12e0a8671ff89a863584f193e7062476"},"headline":"Nurserycam horror show: &#8216;Secure&#8217; daycare video monitoring product beamed DVR admin creds to all users","datePublished":"2021-02-18T12:01:09+00:00","mainEntityOfPage":{"@id":"https:\/\/www.threatshub.org\/blog\/nurserycam-horror-show-secure-daycare-video-monitoring-product-beamed-dvr-admin-creds-to-all-users\/"},"wordCount":956,"publisher":{"@id":"https:\/\/www.threatshub.org\/blog\/#organization"},"image":{"@id":"https:\/\/www.threatshub.org\/blog\/nurserycam-horror-show-secure-daycare-video-monitoring-product-beamed-dvr-admin-creds-to-all-users\/#primaryimage"},"thumbnailUrl":"https:\/\/pubads.g.doubleclick.net\/gampad\/ad?co=1&amp;iu=\/6978\/reg_security\/front&amp;sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&amp;tile=2&amp;c=2YC6mqZT9sUb-IyS5roLu5AAAAEQ&amp;t=ct%3Dns%26unitnum%3D2%26raptor%3Dcondor%26pos%3Dtop%26test%3D0","articleSection":["The Register"],"inLanguage":"en-US"},{"@type":"WebPage","@id":"https:\/\/www.threatshub.org\/blog\/nurserycam-horror-show-secure-daycare-video-monitoring-product-beamed-dvr-admin-creds-to-all-users\/","url":"https:\/\/www.threatshub.org\/blog\/nurserycam-horror-show-secure-daycare-video-monitoring-product-beamed-dvr-admin-creds-to-all-users\/","name":"Nurserycam horror show: 'Secure' daycare video monitoring product beamed DVR admin creds to all users 2026 | ThreatsHub Cybersecurity News","isPartOf":{"@id":"https:\/\/www.threatshub.org\/blog\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.threatshub.org\/blog\/nurserycam-horror-show-secure-daycare-video-monitoring-product-beamed-dvr-admin-creds-to-all-users\/#primaryimage"},"image":{"@id":"https:\/\/www.threatshub.org\/blog\/nurserycam-horror-show-secure-daycare-video-monitoring-product-beamed-dvr-admin-creds-to-all-users\/#primaryimage"},"thumbnailUrl":"https:\/\/pubads.g.doubleclick.net\/gampad\/ad?co=1&amp;iu=\/6978\/reg_security\/front&amp;sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&amp;tile=2&amp;c=2YC6mqZT9sUb-IyS5roLu5AAAAEQ&amp;t=ct%3Dns%26unitnum%3D2%26raptor%3Dcondor%26pos%3Dtop%26test%3D0","datePublished":"2021-02-18T12:01:09+00:00","description":"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.","breadcrumb":{"@id":"https:\/\/www.threatshub.org\/blog\/nurserycam-horror-show-secure-daycare-video-monitoring-product-beamed-dvr-admin-creds-to-all-users\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.threatshub.org\/blog\/nurserycam-horror-show-secure-daycare-video-monitoring-product-beamed-dvr-admin-creds-to-all-users\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.threatshub.org\/blog\/nurserycam-horror-show-secure-daycare-video-monitoring-product-beamed-dvr-admin-creds-to-all-users\/#primaryimage","url":"https:\/\/pubads.g.doubleclick.net\/gampad\/ad?co=1&amp;iu=\/6978\/reg_security\/front&amp;sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&amp;tile=2&amp;c=2YC6mqZT9sUb-IyS5roLu5AAAAEQ&amp;t=ct%3Dns%26unitnum%3D2%26raptor%3Dcondor%26pos%3Dtop%26test%3D0","contentUrl":"https:\/\/pubads.g.doubleclick.net\/gampad\/ad?co=1&amp;iu=\/6978\/reg_security\/front&amp;sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&amp;tile=2&amp;c=2YC6mqZT9sUb-IyS5roLu5AAAAEQ&amp;t=ct%3Dns%26unitnum%3D2%26raptor%3Dcondor%26pos%3Dtop%26test%3D0"},{"@type":"BreadcrumbList","@id":"https:\/\/www.threatshub.org\/blog\/nurserycam-horror-show-secure-daycare-video-monitoring-product-beamed-dvr-admin-creds-to-all-users\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.threatshub.org\/blog\/"},{"@type":"ListItem","position":2,"name":"Nurserycam horror show: &#8216;Secure&#8217; daycare video monitoring product beamed DVR admin creds to all users"}]},{"@type":"WebSite","@id":"https:\/\/www.threatshub.org\/blog\/#website","url":"https:\/\/www.threatshub.org\/blog\/","name":"ThreatsHub Cybersecurity News","description":"%%focuskw%% Threat Intel \u2013 Threat Intel Services \u2013 CyberIntelligence \u2013 Cyber Threat Intelligence - Threat Intelligence Feeds - Threat Intelligence Reports - CyberSecurity Report \u2013 Cyber Security PDF \u2013 Cybersecurity Trends - Cloud Sandbox \u2013- Threat IntelligencePortal \u2013 Incident Response \u2013 Threat Hunting \u2013 IOC - Yara - Security Operations Center \u2013 SecurityOperation Center \u2013 Security SOC \u2013 SOC Services - Advanced Threat - Threat Detection - TargetedAttack \u2013 APT \u2013 Anti-APT \u2013 Advanced Protection \u2013 Cyber Security Services \u2013 Cybersecurity Services -Threat Intelligence Platform","publisher":{"@id":"https:\/\/www.threatshub.org\/blog\/#organization"},"alternateName":"Threatshub.org","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.threatshub.org\/blog\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/www.threatshub.org\/blog\/#organization","name":"ThreatsHub.org","alternateName":"Threatshub.org","url":"https:\/\/www.threatshub.org\/blog\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.threatshub.org\/blog\/#\/schema\/logo\/image\/","url":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2025\/05\/Threatshub_Favicon1.jpg","contentUrl":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2025\/05\/Threatshub_Favicon1.jpg","width":432,"height":435,"caption":"ThreatsHub.org"},"image":{"@id":"https:\/\/www.threatshub.org\/blog\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/x.com\/threatshub"]},{"@type":"Person","@id":"https:\/\/www.threatshub.org\/blog\/#\/schema\/person\/12e0a8671ff89a863584f193e7062476","name":"TH Author","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/secure.gravatar.com\/avatar\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g","caption":"TH Author"}}]}},"_links":{"self":[{"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/posts\/39629","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/comments?post=39629"}],"version-history":[{"count":0,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/posts\/39629\/revisions"}],"wp:attachment":[{"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/media?parent=39629"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/categories?post=39629"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/tags?post=39629"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}