BadCam Vulnerability: How Trusted Lenovo Webcams Become Remote Attack Weapons
Security researchers have discovered a critical vulnerability dubbed “BadCam” (CVE-2025-4371) that allows cybercriminals to remotely convert trusted Lenovo webcams into persistent BadUSB attack weapons. The flaw affects popular 510 FHD and Performance FHD models used across UK businesses, enabling attackers to reflash firmware and transform webcams into fake keyboards that inject malicious commands. Unlike traditional malware, BadCam attacks survive complete system wipes and reinstalls, creating unprecedented persistence. With thousands of vulnerable devices in UK offices, businesses must immediately audit their Lenovo webcams and update to firmware version 4.8.0 to prevent exploitation of this firmware-level threat.