An Earth-Shattering Kaboom: Bringing a Physical ICS Penetration Testing Environment to Life


Whether it’s in the water we drink, the medicines we take, or the electricity we use to read blog posts on the internet, Industrial Control Systems (ICS) are part of our daily lives.

There’s so much that relies on these systems, you’d like to assume they’re engineered and tested to guard against cyberattacks. You’d be wrong. Why aren’t our systems prepared for attacks? This is a tricky question. The systems running our critical infrastructure contain equipment 20+ years old. It’s not uncommon to see equipment 50+ years old which would require a full system revamp due to dependencies, and can easily cost millions.

Read more…
Source: Rapid7


Sign up for the Cyber Security Review Newsletter
The latest cyber security news and insights delivered right to your inbox


Related:

  • US Government partners urge hardening industrial refrigeration and cold chain monitoring systems

    November 5, 2026

    The Cybersecurity and Infrastructure Security Agency (CISA), Federal Bureau of Investigation (FBI), Health and Human Services (HHS), U.S. Department of Agriculture (USDA), and the Department of Transportation (DoT)—hereafter referred to as “the authoring organizations”—are aware of malicious cyber activity targeting industrial refrigeration and cold chain monitoring systems globally. Organizations in the Healthcare and Public Health, ...

  • Cyberattack targets French blood banks

    November 4, 2026

    A cyberattack on several French blood banks sought to raise temperatures to extremely high levels but was thwarted before it could do any damage to blood products or samples, authorities said. The incident comes after supermarkets in a number of European countries reported this week that their fridges and freezers warmed up after they were ...

  • A fresh wave of cyberattacks has hit Europe’s supermarket refrigerators, destroying food across countries

    November 2, 2026

    A second wave of cyberattacks is suspected to have hit supermarket refrigerators across Europe, causing fridges to increase temperatures and spoil food at dozens of stores across Belgium, Ireland, Luxembourg, and Sweden. Supermarket giants Ahold Delhaize and Colruyt confirmed the hacks overnight, with one Belgian company that operates Delhaize’s systems saying that the hackers had changed ...

  • Hundreds of French supermarkets hit by cyberattack on refrigeration systems

    October 12, 2026

    Several supermarkets were forced to discard fresh and frozen food, Intermarché said, and have yet to estimate the losses. The Paris prosecutor has opened an investigation. Hundreds of French supermarkets belonging to the Intermarché and Coopérative U chains have fallen victim to a cyberattack targeting their refrigeration systems, the two retail giants said on Monday. Around 150 ...

  • AI systems are fully capable of carrying out attacks against infrastructure

    October 11, 2026

    Autonomous AI systems are fully capable of carrying out a nightmare cyberattack scenario – finding and attacking critical operational technology and industrial equipment, and shutting down access to water, power, and other daily life necessities. If this happens, defenders may only have minutes to detect and block it, according to a Booz Allen Hamilton report. The consulting ...

  • Defending against an active threat to Siemens S7 Series PLCs

    August 19, 2026

    This advisory relates to an active threat to Siemens S7 Series programmable logic controllers (PLCs). However, ongoing PLC targeting activity is broader than Siemens PLCs. All PLC owners and operators should apply relevant mitigations to reduce the risk to their devices and systems. The Siemens-specific content in this advisory should be understood and applied as ...