Sources, by chapter.
All sources checked October 12, 2026.
Letter
1. House Committee on Homeland Security, "Threat Snapshot: Cyber Threats Remain Heightened Amid Lapse in Information Sharing Authorities, Government Shutdown," October 31, 2025. At least 44 U.S. states reported cyber incidents affecting state and local government systems in 2025. homeland.house.gov/?p=7684
Chapter 2
2. CISA, ICS Advisory ICSA-24-214-07, "AVTECH IP Camera," August 1, 2024. CVE-2024-7029. Commands can be injected over the network; known public exploitation; the vendor did not respond to CISA. cisa.gov
3. CISA, ICS Advisory ICSA-25-162-10, "PTZOptics and Other Pan-Tilt-Zoom Cameras," June 12, 2025. Hard-coded passwords users cannot change; SSH or telnet cannot be disabled; government services and facilities listed among sectors. No known public exploitation at publication. cisa.gov
4. FBI, Cyber National Mission Force and NSA, Joint Cybersecurity Advisory, September 18, 2024. A botnet linked to Flax Typhoon held more than 260,000 devices as of June 2024, including IP cameras and video recorders. ic3.gov
Chapter 3
5. CISA, ICS Advisory ICSA-24-191-04, "Johnson Controls Software House C-CURE 9000," July 2024. Weak installer credentials could allow administrative access. No known public exploitation. cisa.gov
6. CISA, ICS Advisory ICSA-24-191-05, "Johnson Controls Software House C-CURE 9000," July 2024; updated January 16 and July 17, 2025. Incorrect default permissions could expose credentials used for application access. No known public exploitation. cisa.gov
Chapter 7
7. City of Saint Paul, presentation to the Minnesota Legislative Commission on Cybersecurity, August 27, 2025. Attack detected July 25, 2025; Minnesota National Guard cyber team deployed for 17 days. lcc.mn.gov
8. Infosecurity Magazine, August 2025. The mayor confirmed the Interlock ransomware group was responsible and that the city would not pay. Officials have not said how the attackers got in. infosecurity-magazine.com
9. Observed: a NetOps IQ deployment at a government facility. Confirmed by NetOps IQ's CTO. Published with the customer's approval. Agency and location withheld.
Findavi capabilities (Chapters 5, 7 and 8)
10. NetOps IQ, Findavi platform. On-site appliance, AI on the appliance, supported actions, Observe, Approve and Autonomous modes, separate security and service checks. Device and action support is confirmed for each deployment. netopsiq.com/product.html