Nation-state adversaries are reported to exploit compromised internet-connected IP cameras to conduct surveillance operations, according to March 2026 threat intelligence reporting. This represents a shift from opportunistic criminal activity to deliberate state-sponsored intelligence collection infrastructure. Organizations with internet-exposed camera systems face nation-state threat exposure and must treat IP cameras as high-value targets requiring enterprise endpoint-level hardening controls.