Flock Condor PTZ cameras left live on the internet without passwords

In late December 2025, technologist Benn Jordan and security researcher Jon “GainSec” Gaines found Flock Condor PTZ cameras exposed on the public internet. 404 Media reported that at least 60 Condor cameras were live-streaming without any authentication, along with 30 days of archived video; the feeds and admin interfaces were unencrypted and required no username or password. The access could have allowed changing camera settings, running diagnostics, viewing logs, deleting videos and remotely controlling the cameras. A 404 Media reporter watched himself on a live feed from his phone while standing in the street, and colleagues hundreds of miles away viewed the same link. Gaines reported finding 67 live feeds and debug web interfaces. Straight Arrow News reported one exposed camera captured children on a playground. No public remediation cost was reported.