2026-09-17
The Reolink Argus 4 Pro keeps first at 9.3 and the ranking carries forward. On 11 September the EU Cyber Resilience Act's vulnerability reporting rules became enforceable, and security cameras are the product class that shows best why the law exists.
Tech Times points to the Aisuru botnet as the kind of damage the rules target. By 2025 it had grown to launch denial of service attacks above 29.7 terabits per second from an estimated 300,000 to 700,000 compromised consumer routers, video recorders and IP cameras. Under Article 14, a maker that learns a flaw in its camera is being actively exploited now has 24 hours to warn authorities through ENISA's Single Reporting Platform and 14 days after a fix to file a final report. The duty covers cameras already installed, and fines reach 15 million euros or 2.5 percent of global turnover.
That gives owners a clear reason to keep firmware current, and it gives me a sharper way to judge cameras. My setup routine after this week looks like this. Enable automatic updates, change the default admin password on any camera or recorder with a local login, and turn off remote port forwarding on the router, since app based remote viewing handles access safely. Then put cameras on a separate guest or IoT network if your router offers one.
The Argus 4 Pro fits that routine well. It records 4K across a 180 degree dual lens view with color night vision, stores footage on a microSD card or a Reolink Home Hub, runs on battery with solar top ups, and receives regular firmware releases through the Reolink app. Arlo Pro 5S at 8.8 remains the choice for anyone who wants polished cloud features and dual band Wi-Fi, and eufyCam S3 Pro at third stays my pick for a multi camera system with local storage on the HomeBase.
I will watch how each brand publishes security advisories over the coming months and fold that into my software support scores.
CRA rules now enforceable
From 11 September makers must warn EU authorities within 24 hours of an actively exploited camera flaw.
Why cameras are central
The Aisuru botnet used an estimated 300,000 to 700,000 hijacked routers, recorders and IP cameras.
Owner hardening routine
Auto update firmware, change default passwords, drop router port forwarding and use an IoT network.
Argus 4 Pro still leads
4K dual lens 180 degree view, color night vision, local storage and solar power keep it first at 9.3.
Advisories join the scoring
How brands publish security advisories will feed into software support scores going forward.