DEF CON 33 - Help! Linux in my Webcam! (•_•) - Mickey Shkatov, Jesse Michael
Source: YouTube · DEFCONConference · published Oct 10, 2025 · 41:28
Security researchers discovered webcams including Lenovo run Linux OS, making them vulnerable to attacks that turn them into malicious USB devices [0:00].
Key Takeaways:
• Found 8MB firmware update revealing Linux on Sigma Star SOC [3:05]
• Demonstrated attacks: keyboard emulation, network setup, remote access [19:48]
• Multiple vendors use similar chips with poor GPL compliance [15:02]
• Showed 0-day exploit on OBSBOT camera, gaining root via bootloader [29:02]
Findings highlight how peripherals can become attack vectors, challenging USB security assumptions [35:15].
Sources:
Generate CPE Credits
Generate a professional CPE document from this video's transcript.
Estimated credit: 0.5 CPE hours
Estimate uses the video runtime (1 hour ≈ 1 CPE, rounded to the nearest 0.5, minimum 0.5, maximum 2.0). The final amount can be lower after review, never higher.
Topic: Cybersecurity. Commonly maps to: Security and Risk Management, Security Operations. Exact CISSP domains are assigned during generation.
Free account. One generation at a time, with a daily limit.
CPEBuddy is independent and not affiliated with or endorsed by ISC2, ISACA, or any certification body. Exports are formatted for common CPE submissions; acceptance is at your certification body's discretion.
Transcript Preview
First 800 characters of the transcript
Quick intro. I'm Mickey. That's Jesse. We hack things. Um, we give talks. That's who we are. There's a lot of, um, stuff online. We work for a company called Eclipsium. We want to mention them because they help us fund all of this stuff. Um, quick terminology for those unaware. Uh, UART is a serial communication protocol that you, uh, Yeah. Wow, it's really distracting that noise from the other place. >> Don't tempt me. Um, okay. So, yours a serial communication protocol. Uh, usually in IoT devices, OTAA over the air, UVC, basically read it yourselves. Um, one thing I want to be clear about that, uh, I do want some participation. If anyone has a question, shout cuz I can't see anything. I have a light in my eyes. So, either come to the microphones and ask us a question or interrupt, yell. …