[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fFLfl3DBto5wHMxM8uOMBnfId6M7gOEOHrtV4b6TlB8k":3},{"article":4,"iocs":42,"watch_terms":43,"solutions":44,"lesson":12},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"url":11,"image_url":12,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":22,"category":23,"article_tags":26},"8da16f4b-f025-45f8-ad2e-226c01f1846f","Hackers exploit exposed GeoVision CCTV software to disable Defender and deploy cryptominers","hackers-exploit-exposed-geovision-cctv-software-to-disable-defender-and-deploy-c-cfe37d","Threat actors are abusing internet-exposed GeoVision surveillance software to break into corporate networks, disable Microsoft Defender, and quietly install cryptomining malware, according to new research from Huntress. The Huntress Security Operations Centre (SOC) began seeing the activity on 8 November, with most attacks landing between 8 and 10 November and activity continuing over the past […] The post Hackers exploit exposed GeoVision CCTV software to disable Defender and deploy cryptominers appeared first on IT Security Guru.","Threat actors are exploiting internet-exposed GeoVision surveillance software to infiltrate corporate networks. The attackers disable Microsoft Defender and deploy cryptomining malware, according to Huntress research. The activity was first observed on November 8th, with a surge between November 8th and 10th.","Hackers exploit exposed GeoVision CCTV software to disable Defender and deploy cryptominers.","https:\u002F\u002Fwww.itsecurityguru.org\u002F2026\u002F11\u002F13\u002Fhackers-exploit-exposed-geovision-cctv-software-to-disable-defender-and-deploy-cryptominers\u002F?utm_source=rss&utm_medium=rss&utm_campaign=hackers-exploit-exposed-geovision-cctv-software-to-disable-defender-and-deploy-cryptominers",null,"2026-11-13T14:05:30+00:00","2026-11-13T15:00:04.557317+00:00",7,[17,20],{"name":18,"type":19},"GeoVision CCTV software","product",{"name":21,"type":19},"Microsoft Defender","89f78b1c-3503-45a1-9fc7-e23d2ce1c6d5",{"id":22,"icon":12,"name":24,"slug":25},"Malware","malware",[27,32,37],{"category":28},{"id":29,"icon":12,"name":30,"slug":31},"80544778-fabb-4dcd-aa35-17492e5dcf4f","Vulnerabilities","vulnerabilities",{"category":33},{"id":34,"icon":12,"name":35,"slug":36},"d6f63bb8-0801-486a-be7f-171400700454","IoT\u002FOT","iot-ot",{"category":38},{"id":39,"icon":12,"name":40,"slug":41},"e7b231c8-5f79-4465-8d38-1ef13aea5a14","Threat Intelligence","threat-intelligence",[],[18,21],{"controls":45,"vendors":125},[46,75,96],{"slug":47,"name":48,"problem":49,"products":50},"attack-surface-management","External attack surface management (EASM)","You find your forgotten internet-facing systems before attackers do.",[51,59,67],{"vendor_slug":52,"vendor_name":53,"vendor_logo":54,"product_slug":55,"product_name":56,"url":57,"description":58},"holm-security","Holm Security","\u002Fvendor-logos\u002Fholm-security.png","holm-security-platform","Holm Security Platform","https:\u002F\u002Fwww.holmsecurity.com\u002F","Vulnerability scanning of systems, web applications, cloud and the external attack surface, plus phishing simulation.",{"vendor_slug":60,"vendor_name":61,"vendor_logo":62,"product_slug":63,"product_name":64,"url":65,"description":66},"runzero","runZero","\u002Fvendor-logos\u002Frunzero.png","runzero-platform","runZero Platform","https:\u002F\u002Fwww.runzero.com\u002Fplatform\u002F","Finds and fingerprints everything on the network and in the cloud, including IoT and OT devices, without agents or credentials, and flags exposures.",{"vendor_slug":68,"vendor_name":69,"vendor_logo":70,"product_slug":71,"product_name":72,"url":73,"description":74},"watchtowr","watchTowr","\u002Fvendor-logos\u002Fwatchtowr.png","watchtowr-platform","watchTowr Platform","https:\u002F\u002Fwatchtowr.com\u002Fplatform\u002F","Continuous discovery of internet-facing assets, with automated testing for exploitable vulnerabilities.",{"slug":76,"name":77,"problem":78,"products":79},"asset-inventory","Cyber asset inventory","You cannot patch, monitor or protect the devices, cloud resources and accounts you do not know you have.",[80,81,88],{"vendor_slug":60,"vendor_name":61,"vendor_logo":62,"product_slug":63,"product_name":64,"url":65,"description":66},{"vendor_slug":82,"vendor_name":83,"vendor_logo":84,"product_slug":85,"product_name":83,"url":86,"description":87},"lansweeper","Lansweeper","\u002Fvendor-logos\u002Flansweeper.png","lansweeper-asset-inventory","https:\u002F\u002Fwww.lansweeper.com\u002Fproduct\u002Fasset-inventory\u002F","Discovery with and without agents that keeps one central, always-updated inventory of devices, software and their details.",{"vendor_slug":89,"vendor_name":90,"vendor_logo":91,"product_slug":92,"product_name":93,"url":94,"description":95},"axonius","Axonius","\u002Fvendor-logos\u002Faxonius.png","axonius-cyber-assets","Axonius Cyber Assets","https:\u002F\u002Fwww.axonius.com\u002Fplatform\u002Fcyber-assets","A continuously reconciled view of every asset, who owns it, which security controls cover it and where it drifts from policy.",{"slug":97,"name":98,"problem":99,"products":100},"endpoint-detection-response","Endpoint detection and response (EDR and XDR)","Malware and hands-on-keyboard attackers on laptops and servers get spotted and stopped.",[101,109,117],{"vendor_slug":102,"vendor_name":103,"vendor_logo":104,"product_slug":105,"product_name":106,"url":107,"description":108},"eset","ESET","\u002Fvendor-logos\u002Feset.png","eset-protect","ESET PROTECT","https:\u002F\u002Fwww.eset.com\u002Fint\u002Fbusiness\u002Fsolutions\u002Fendpoint-protection\u002F","Endpoint protection platform with detection and response add-ons.",{"vendor_slug":110,"vendor_name":111,"vendor_logo":112,"product_slug":113,"product_name":114,"url":115,"description":116},"elastic","Elastic","\u002Fvendor-logos\u002Felastic.png","elastic-security","Elastic Security","https:\u002F\u002Fwww.elastic.co\u002Fsecurity","SIEM and endpoint security built on Elasticsearch, with open detection rules.",{"vendor_slug":118,"vendor_name":119,"vendor_logo":120,"product_slug":121,"product_name":122,"url":123,"description":124},"crowdstrike","CrowdStrike","\u002Fvendor-logos\u002Fcrowdstrike.png","falcon-insight-xdr","Falcon Insight XDR","https:\u002F\u002Fwww.crowdstrike.com\u002Fen-us\u002Fplatform\u002Fendpoint-security\u002Ffalcon-insight-xdr\u002F","Endpoint detection and response with extended detection across other security tools.",[126],{"slug":127,"name":128,"logo_path":129,"roles":130},"huntress","Huntress","\u002Fvendor-logos\u002Fhuntress.png",[131],"reported_by"]