Free tools Windows power users keep installed
One-click scans. No signup required.
The July 30, 2026 FBI and EPA warning describes remote attacks on internet-facing programmable logic controllers (PLCs) at water and wastewater utilities—but it does not say default credentials were the confirmed way attackers got in. Its practical lesson is broader: you cannot secure devices you have not identified, assigned to an owner, and placed under a plan for access, support, and safe operation.
What the 2026 water-sector warning says—and does not say
The FBI and EPA reported that malicious actors remotely accessed internet-facing Rockwell Automation/Allen-Bradley MicroLogix 1100 and 1400 PLCs. They changed IP addresses and passwords, disrupting monitoring and control; reported consequences included pressure loss and flooding. The agencies said incidents had occurred in at least seven states since July 27, 2026. The operational impact depends on what a PLC monitors or controls, the equipment and function it supports, and whether operators can safely use manual procedures. Read the July 30 FBI/EPA public service announcement.
As an Amazon Associate I earn from qualifying purchases.
The notice identifies internet-facing PLCs as the observed targets, but does not establish default passwords as the initial access route. Attackers changing passwords after gaining access is not evidence that a default password enabled entry. Treat default credentials as a serious general risk, not as a confirmed explanation for these specific incidents.
The advisory says similar considerations may apply to other PLC brands; the described observed behavior concerns the named Rockwell Automation models. Do not assume every PLC, consumer IoT device, router, and industrial control system faces identical consequences or needs identical operating procedures.
#1 Best Overall
- 2024 PCMag Editor's Choice - Praised for its outstanding value, delivering sharp 2K resolution and a comprehensive feature set.
- Compact, Versatile, Weatherproof - The Tapo C120 is a compact camera suitable for indoor and outdoor use, featuring an IP66 rating for withstanding rain, dust, and rugged conditions.
- Magnetic Base for Flexible Mounting - Easily attach the C120 camera to any metal surface with its magnetic base. Versatile mounting on railings, frames, or even the refrigerator.
- 2K QHD 4MP Resolution - Crystal-clear detail in every shot. Capture every moment with stunning 2K quality that ensures even the finest details are never missed.
- Starlight Color Night Vision - The built-in Starlight sensor delivers bright, colorful video at night, with two spotlights for extra illumination in darker conditions.
Why default credentials still matter
CISA and NSA guidance identifies default credentials as a common misconfiguration in network devices and IoT products that can enable unauthorized access. A compromised network device may also create opportunities for further movement: the guidance describes how printers and scanners with privileged accounts can become stepping stones. This establishes a broader security concern, not the entry method in the 2026 water-sector incidents. See CISA and NSA guidance on common misconfigurations.
Compromised connected devices can also be used as infrastructure for other malicious activity. In a September 2024 advisory, the FBI, Cyber National Mission Force (CNMF), and NSA described a PRC-linked botnet involving routers, firewalls, network-attached storage (NAS), and IoT devices used as proxies. Their estimate was over 260,000 devices as of June 2024; that is a historical estimate, not a 2026 botnet count. Read the September 2024 joint advisory.
Rank #2
- Ultra-compact, tamper-resistant, and weatherproof 2K HD PoE camera with long-range night vision.
- 2K (4MP) video resolution
- Ultra-wide viewing angle (102.4°)
- 30 m (98 ft) IR night vision
- AI event detections
Router security remains relevant too. A July 13, 2026 partner bulletin says Russian FSB Center 16 actors scan for and exploit poorly configured routers and network devices, and urges configuration upgrades, stronger authentication, and monitoring. Read the July 2026 router-hygiene bulletin.
Turn a device warning into an inventory and action plan
A useful inventory is more than a list of product names. It lets the organization identify an exposed or unsupported device, determine who can authorize a change, understand what service depends on it, and choose a safe remediation. Work with operational staff before active discovery or changes that could interrupt an industrial process.
Rank #3
- SMART PERSON/VEHICLE/ANIMAL DETECTION: Say goodbye to unwanted alarms. With advanced person/vehicle/animal detection, the camera identifies genuine threats using cutting-edge algorithms, providing you with ultimate peace of mind. Animal detection is supported if your camera's firmware is updated to the latest version.
- EXCEPTIONAL 5MP SUPER HD: This PoE IP camera boasts 5MP videos at 25fps, capturing passing moments in ultra-sharp resolution without missing key details. With 18 specs IR lights and 3D-DNR technic, this camera is capable of delivering up to 100ft astounding night vision.
- MULTIPLE RECORDING OPTIONS: You can save 24/7 recordings or motion-detected videos to a 512GB microSD card (not included), FTP server, NAS, and Reolink PoE NVRs (Please note the hardware version) without an extra fee. Note that this PoE surveillance camera does not support third-party NVRs or camera systems.
- EASY REMOTE ACCESS WITH FREE APP/CLIENT: Enjoy live view, playback, and notifications via the free Reolink App and Client (iOS, Android, Windows, Mac) without any subscription. For first-time setup and activation, the camera must be connected to the same local network via a PoE switch/NVR using an Ethernet cable. For troubleshooting and setup assistance, contact Reolink's customer support for step-by-step guidance.
- TIMELAPSE TO SEE THE DAY IN A MINTUTE: This surveillance camera supports recording time-lapse videos. You can keep tracking of your 3D printing, see the whole construction process in a few minutes, or capture beautiful views from sunrise to sunset. It is easy to use and fun to share with friends. (Time lapse only works on Reolink App.)
1. Find and identify connected assets
Record each device’s class, manufacturer, model, serial number or other identifier, firmware or software version, physical location, network addresses, owner, operational purpose, and remote-access path. Include PLCs, routers, firewalls, NAS devices, and other connected equipment within the scope of your organization. The FBI/EPA notice specifically asks reporters to include model numbers, serial numbers, and IP addresses for network-connected PLCs.
2. Map exposure and paths of access
For each device, note whether it is directly reachable from the public internet, connected through a cellular modem, managed remotely, or accessible to a vendor or integrator. Record which internal systems can reach it as well. The FBI and EPA recommend removing direct public-facing PLC exposure and mediating remote access through a secure gateway or jump host. The 2026 router bulletin separately emphasizes stronger authentication and configuration upgrades.
Rank #4
- SMART PERSON/VEHICLE/ANIMAL DETECTION: Say goodbye to unwanted alarms. With advanced person/vehicle/animal detection, the camera identifies genuine threats using cutting-edge algorithms, providing you with ultimate peace of mind. Animal detection is supported if your camera's firmware is updated to the latest version.
- Exceptional 5MP Super HD and Sound Recording: Boasting a high resolution of 2560x1920 at 25 fps, the RLC-520A security IP camera can capture crystal clear video with vivid details. With the built-in microphone, it also picks up ambient sound for an extra layer of security.
- Time-Lapse to See the Day in a Minute: This surveillance camera supports recording time-lapse videos. You can keep tracking of your 3D printing, see the whole construction process in a few minutes, or capture beautiful views from sunrise to sunset. It is easy to use and fun to share with friends. (Time lapse only works on Reolink App.)
- Faster and Simplified PoE Installation: Thanks to the power over Ethernet (PoE) technology, this outdoor camera can transmit videos and get power, signal, data via only one network cable, no WiFi worries. Simplified wiring means easier and cleaner installation. NOTE: Power supply is not included.
- Flexible Recording Options: The surveillance camera supports 24/7 continuous recording when movement is detected or during a scheduled time. Videos can be saved on a microSD card (up to 512GB, not included), Reolink NVR, or FTP server. Choose a way you prefer and enjoy customized security.
3. Assign credential responsibility
Verify that default credentials have been replaced with strong, unique credentials, and document the accountable team and approved recovery method. The 2024 FBI/CNMF/NSA botnet advisory also recommends replacing default passwords with strong passwords. For an operational controller, credential changes must follow the organization’s change-management and safety procedures; do not treat a password reset as a casual field adjustment.
4. Restrict what devices can communicate with
Use firewalls or access-control lists (ACLs) to allow only authorized communication between expected devices. Segment IoT devices where appropriate, and disable unused services and ports when safe and supported. The FBI/EPA guidance applies the ACL and secure-gateway recommendations to PLCs; the joint 2024 advisory gives broader segmentation and unused-service guidance for connected devices.
Best Value
- 16MP UHD & COLOR NIGHT VISION: Featuring two 4K image sensors, this dual-lens camera brings 16 UHD clarity to you, ensuring no small detail goes unnoticed. The F1.6 super aperture and 1/2.7'' CMOS sensor enable greater light intake, while 6x infrared LED lights unveil all night details up to 100ft.
- 180° PANORAMIC VIEW & MOTION TRACK: The dual-image stitching algorithms, coupled with 4-core SoC, create 180° panoramic views with less distortion & fewer blind spots. Thanks to the Motion Track feature that displays the complete movement of the target over time in one picture, you can save the hassle of viewing the entire video to find suspicious moments.
- SMART DETECTION & TWO-WAY TALK: Smartly detect person/car/animal movements from other objects, reducing false alarms. Upon motion detection, you’ll receive Push/email instantly and can talk with people by the cam side via 2-way talk directly through Reolink App/Client.
- PoE TECH & IP67 WEATHERPROOF: Only one cable handles both data transmission and stable power supply. (Note: The PoE NVR/switch/injector and DC power adapter are not included.) An easy setup for all-level users. Reolink Duo 3 PoE endures all weather conditions and facilitates ceiling or wall mounting. Ideal for versatile settings.
- SMART USER EXPERIENCE & TIME LAPSE: Enhance your surveillance efficiency with multiple smart features: remote live viewing, custom motion zones, and smart playback (up to 16x speed). Plus, time-lapse condenses long-term events into minutes, facilitating easy observation of transformations.
5. Track configuration integrity and support status
Keep known-good configuration baselines and backups, review logs and project files for unauthorized changes, and verify backups before using them to restore a system. Record vendor support status, update availability, and retirement timing. The FBI/EPA recommends tracking end-of-life systems by product, owner, location, and retirement date, maintaining a rolling 12-month forecast, and reviewing it quarterly. Unsupported hardware no longer receives security updates, so an end-of-life date is a security and operations planning field, not just procurement paperwork.
6. Plan for safe continuity and recovery
Determine whether manual controls, standby equipment, fail-safe mechanisms, isolation procedures, or backups can maintain service if a device becomes unavailable or its configuration is suspect. Routinely test the relevant capabilities. For PLCs, coordinate any mode changes or restoration with operators and established safety and change-control procedures; the FBI/EPA notice advises validating a controller before switching it to run mode and preserving safe manual operations.
Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.Prioritize remediation by exposure, impact, and support
When several devices need attention, compare them on the factors that affect both compromise risk and the consequences of a change:
Recommended Free Tools
- Exposure: Is the device directly internet-facing, or is access mediated through a secure gateway or jump host?
- Identity: Are credentials unique and strong, and are cellular modems and remote-management features secured?
- Network reach: Can the device communicate only with expected peers, or does it have unnecessary paths and enabled services?
- Visibility and integrity: Are logs monitored, and can current PLC logic and configuration be checked against a known-good baseline?
- Lifecycle: Is the device supported and updateable? If not, is replacement scheduled or an isolation control in place?
- Operational resilience: Have manual operation, safe restoration, backups, fail-safe behavior, and standby capacity been validated?
This is a way to compare architectures and controls, not a ranking of products. The FBI and EPA state that their notice does not endorse commercial entities, products, companies, or services.
Use the inventory to close the gap
A security warning becomes actionable when each affected asset has an identity, an owner, a known access path, an authentication status, a support date, and a documented next step. For a directly exposed PLC, prioritize safe removal of public-facing access and restrict communications; for any device, verify credential ownership and its lifecycle plan. Keep industrial changes under operator-led safety and change-management procedures so that risk reduction does not create an avoidable service or safety failure.
Quick Recap
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
