Every Axis camera comes with a default administrator password. The single most important security step you can take is to change this immediately. Furthermore, Axis cameras often come with unnecessary features enabled by default to simplify initial setup. For a production environment, any service not explicitly required for your operation (e.g., FTP, SSH, Bonjour) should be disabled to reduce the device's "attack surface."
: Regularly update to the latest firmware to patch known vulnerabilities.
One rainy Tuesday at 3:00 AM, he typed the AXIS string into a search bar. He clicked the first result.