https://www.theregister.co.uk/2018/07/16/zoomeye_iot_dahua/

Login passwords for tens of thousands of Dahua digital video recorder devices have been cached by ZoomEye, an IoT search engine, and published on the web so that even the dumbest hacker could crack unpatched kit.

"A new low has been achieved in the ease of hacking IoT devices," said Ankit Anubhav, principal researcher at NewSky Security. "One does not even need to connect to the Dahua devices to get the credentials."