Supply Chain Compromise: Russian Backdoor Detected in NERO R-ONE Traffic Cameras
A sophisticated supply chain attack has targeted Slovakia's critical transport infrastructure through the procurement of NERO R-ONE high-speed traffic cameras. The compromise involved a Cyprus-based shell company utilizing fraudulent certifications to secure no-bid contracts, bypassing standard security vetting. Investigation by the National Security Authority (NBU) identified a hardware-level backdoor within the devices, facilitating remote code execution (RCE) via SMS-based command-and-control (C2) using hardcoded Russian mobile numbers. This vulnerability allows for unauthorized remote manipulation of traffic data and potentially high-level espionage against government facilities, representing a significant escalation in Russian hybrid warfare tactics within the European Union.
Supply Chain Compromise: Chinese-Origin Components in Royal Navy Drone Systems
A proactive vulnerability sweep identified hardware backdoors within System-on-a-Chip (SoC) components used in Royal Navy drone surveillance cameras. These Chinese-manufactured chipsets established unauthorized outbound telemetry and data exfiltration channels to state-sponsored Command and Control (C2) infrastructure via undocumented firmware protocols. The compromise enables the exfiltration of real-time video feeds, GPS coordinates, and mission parameters, directly degrading UK naval operational security. Remediation requires a comprehensive Hardware Bill of Materials (BOM) audit and the physical replacement of affected sensor modules across the deployed fleet.