Israel cybersecurity company reveals "critical vulnerabilities" in Canon cameras

Israeli cybersecurity company Check Point Software Technologies announced on Sunday that it has revealed "critical vulnerabilities" in advanced cameras of the Japanese giant Canon.

Canon cameras with lenses are pictured at the stand of Japanese camera maker Canon on the press day of the world's largest fair for imaging in Cologne September 17, 2012. [File photo: Reuters via VCG/Ina Fassbender]

For the research, Check Point used Canon's EOS 80D cameras which support both USB and Wi-Fi.

The Israeli company revealed that through the USB and connections to Wi-Fi networks, these modern cameras are vulnerable to ransomware and malware attacks.

It has been found that hacking attacks can be done directly on the camera remotely or via the existing USB connection in the camera to the computer.

According to Check Point's report, this is possible through the picture transfer protocol of the cameras.

"Any 'smart' device is susceptible to attacks," said Eyal Itkin, security researcher at Check Point. "Cameras are no longer just connected to the USB, but to the Wi-Fi network and its surrounding environment."

"This makes them more vulnerable to threats as attackers can inject ransomware into both the camera and PC it is connected to," Itkin added.

Check Point added it had updated Canon with the findings, and the companies worked together to fix them.

According to Check Point, given that the protocol is standardized and embedded in other camera brands, similar vulnerabilities can be found in cameras of other brands as well.

Check Point also issued recommendations to camera owners, such as making updates, turning off Wi-Fi when it is not needed, and avoiding connecting to public networks.