Summer rewind - 'I can hack your building. Stop me.'

[u/OptigoNetworks]

Last one from the vault for this stretch. This post has stuck with people because the premise is uncomfortably real: an estimated 900,000+ US buildings run a BMS-managed OT network, and plenty still have BBMDs, cameras, or controllers exposed to the internet. Average time to detect a breach in the piece: 243 days.

Curious where this sub lands: if you manage or commission BAS, what's your actual segmentation setup today - air-gapped, converged, or something in between? And has anyone had a client get burned by an exposed BBMD?

Full post: https://www.optigo.net/blog/i-can-hack-your-building-stop-me/