Tag archive
48,667 hosts answer on the BACnet/IP port. Who-Is and I-Am are unauthenticated by design, and WriteProperty is where the category changes.
The levels are the memorable part of the reference architecture and the least useful part of the control. Treating the model as a contract turns a diagram into something testable.
A ZoomEye comparison of ports 102, 502 and 44818 that explains why the three industrial protocol counts should not be summed.
Eighteen Million Fingerprint Matches: Reading the Huawei Surface Behind the NCSC Sanction Review
CVE-2026-86326 in the Plant Network: What Persistent Unsigned Firmware Does to...
ZoomEye measurements of Modbus, EtherNet/IP and Siemens S7 exposure on the public internet, with an honest account of what the distributions do and do not show.
What the July 2026 water utility PLC attacks reveal about internet-exposed control systems, default credentials, and the limits of exposure measurement data.
AA26-231A documents a shift in tradecraft: AI tooling removes the expertise barrier that once protected industrial controllers.
How AI-generated exploits are lowering the barrier to attacking Siemens S7 PLCs, and how to defend OT environments.
ZoomEye measurement of internet-facing industrial controllers, with query counts and defensive interpretation.
Why a flat VPN into an OT network is a durable attack path, and how identity-based, per-session access changes the model without stopping the plant.
AA26-231A warned of AI-assisted reconnaissance against Siemens S7 PLCs without disclosing a new vulnerability. The response it requires is exposure and configuration work, not a patch.