CVE

CVE-2016-7407

View on NVD ↗

The dropbearconvert command in Dropbear SSH before 2016.74 allows attackers to execute arbitrary code via a crafted OpenSSH key file.

Exploitation IoCs 2

IP 112
IP 159

MITRE ATT&CK TTPs 4

T1021
Remote Services
Lateral Movement
 T1059
Command and Scripting Interpreter
Execution
 T1078
Valid Accounts
Defense Evasion
 T1133
External Remote Services
Persistence

Source Articles

Russian Intelligence Hacks IP Cameras to Spy on Military Logistics Across NATO States and Ukraine
Russian intelligence services are actively hijacking internet-connected IP cameras across NATO countries and Ukraine to conduct cyber espionage, monitoring military logistics, troop movements, and weapons shipments. The attackers exploit default credentials and outdated firmware rather than zero-day vulnerabilities, using automated image recognition to identify military assets. While the number of confirmed breaches is low, the exposure of over 87,000 vulnerable devices presents a significant risk. The Dutch intelligence agencies AIVD and MIVD have issued warnings and mitigation guidance to secure camera systems.
hacker-news Jul 20, 2026