BSides London 2026

Our Aaron Thacker will be presenting: A Hardware Hacker’s Guide to Conference Cameras – With a Twist

Abstract: This talk is about hardware-hacking vulnerability research on a popular conference camera; how it works, the vulnerabilities within, and repurposing the device for more. This talk will showcase the impact of these issues from eavesdropping on conversations to smuggling DOOM into a conference meeting, and video manipulation.

Description: Conference room cameras are the ultimate trusted insider. Compromise one and you’re now part of the meeting, listening to every word. This talk covers the story of two vulnerabilities – CVE-2026-39430 and CVE-2026-39431, what it took to find them, and how they could be used.

The first part of this talk will involve taking this mystery conference camera apart, showing how it works, and talking about how these cameras are typically built. I’ll then discuss how these vulnerabilities were found and some of the techniques used along the way.

In the second half of this talk, you can expect to see backdoor access, DOOM, and my attempts to manipulate live video streams with AI magic. Do you trust what the camera is showing you? Are videos even real anymore? (cue the existential crisis)