Ethical Hacking News
Cybercrimes are no longer limited to just stealing data; they have evolved to attack physical building systems, resulting in severe consequences. As organizations prioritize the security of their IT systems, attackers are shifting their focus to operational technology (OT) systems, which can have real-world consequences.
Cybercrimes now target physical building systems, resulting in severe consequences. Building automation systems (BAS) and operational technology (OT) systems are increasingly vulnerable to attacks. The use of AI and machine learning algorithms has enabled attackers to exploit vulnerabilities in BAS and OT systems. 73% of organizations own BAS that have been used in ransomware attacks, and 91% of these systems communicate over insecure protocols. The lack of visibility into OT environments makes them attractive targets for hackers. The consequences of a physical system attack can be severe, including food supply degradation, fire, and loss of life.
Cybercrimes are no longer limited to just stealing data; they have evolved to attack physical building systems, resulting in severe consequences. According to recent reports, cybercriminals are increasingly targeting physical systems, including building automation systems (BAS), which control and monitor facilities' HVAC, lighting, energy usage, and water consumption. This trend is part of a broader shift towards physical system attacks, which can have real-world consequences.
In August 2026, a ransomware attack disrupted building-management systems at a Canadian hospital, affecting door access controls, central HVAC monitoring, and the issuing of staff access cards. This incident highlights the potential impact of physical system attacks on critical infrastructure. Similarly, in the French supermarket hacks, cybercriminals exploited the internet connectivity of refrigeration units to disrupt operations and cause food supply degradation.
The increasing sophistication of cyberattacks is largely attributed to the use of artificial intelligence (AI) and machine learning algorithms. These technologies enable attackers to understand more about building automation systems, especially those using obscure operating systems like VxWorks, older Unix-type systems. AI also makes it easier for attackers to find bugs and exploit vulnerabilities in these systems.
According to a report by ServiceNow's Armis Labs, 73 percent of organizations own BAS that have been used in ransomware attacks, and 91 percent of these systems communicate over insecure protocols. This lack of security measures makes BAS and operational technology (OT) systems attractive targets for ransomware operators and government-backed hackers.
The complexity of OT systems is also a factor in the increasing number of attacks. Many organizations lack visibility into their OT environments, and in 30 percent of incidents, investigations do not begin with a detection alert. Instead, they start with someone noticing that "something seemed wrong" in operations. This lack of visibility, combined with the threat of AI-powered attacks, worries experts.
The rise of physical system attacks highlights the need for organizations to prioritize the security of their OT environments. As IT systems become more secure, attackers will likely shift their focus to OT systems, which can have real-world consequences. The consequences of a physical system attack can be severe, including food supply degradation, fire, and even loss of life.
In conclusion, the trend of physical system attacks is a growing concern for organizations and governments. The use of AI and machine learning algorithms has enabled attackers to exploit vulnerabilities in BAS and OT systems, resulting in severe consequences. It is essential for organizations to prioritize the security of their OT environments and invest in measures to detect and prevent these types of attacks.
Cybercrimes are no longer limited to just stealing data; they have evolved to attack physical building systems, resulting in severe consequences. As organizations prioritize the security of their IT systems, attackers are shifting their focus to operational technology (OT) systems, which can have real-world consequences.
Related Information:
https://www.ethicalhackingnews.com/articles/Cybercrimes-Are-Just-Getting-Started-The-Rise-of-Physical-System-Attacks-ehn.shtml
https://www.theregister.com/security/2026/10/17/cybercrims-go-beyond-stealing-data-to-attack-physical-building-systems/5303677
Published: Sat Oct 17 07:25:12 2026 by llama3.2 3B Q4_K_M
