← All lessons
Threats · Intermediate · 4 min
IoT & industrial systems
When hacking moves from data to the physical world.
What it is
IoT means internet-connected devices: cameras, routers, smart TVs. OT (operational technology) and ICS (industrial control systems) run power grids, water plants and factories. These devices often run old software, rarely get patched and were built before anyone expected them to be online. Attacks here can cause physical damage, not just data loss.
Real case · 2010
Stuxnet
A highly sophisticated worm, widely attributed to the US and Israel, sabotaged Iranian uranium centrifuges by changing their speeds while showing operators normal readings. It crossed air-gapped networks via USB drives.
Source: Wikipedia: Stuxnet
How defenders stop it
- Keep industrial networks separate from office IT
- Never expose control systems directly to the internet
- Change default credentials and update firmware
- Monitor for unexpected commands to controllers
Check yourself
1. Why are OT systems hard to patch?
- They don't use software
- Downtime can stop a factory or utility, and devices may run for decades
- Patches are illegal
- They're always offline
Show answer
Downtime can stop a factory or utility, and devices may run for decades. Availability and safety come first in OT, so changes are planned carefully.
2. What does OT stand for?
- Open telemetry
- Operational technology
- Online tools
- Over-the-air transfer
Show answer
Operational technology. OT is the technology that runs physical processes: power grids, water plants and factories.
3. What's the most important rule for industrial control systems?
- Restart them every hour
- Give every engineer admin access
- Connect them to the office Wi-Fi
- Never expose them directly to the internet
Show answer
Never expose them directly to the internet. Control systems were often built before anyone expected them online. Keep them off the internet and separate from office IT.
Answer them in the app to earn XP.
Next: SQL injection →