IBM Research Calls Out Smart Building Risks

IBM X-Force researchers found that building automation systems are often Internet‑connected and weakly protected; in a red-team engagement they compromised a central monitoring server by exploiting a poorly secured D-Link router, an exposed diagnostics page that revealed encrypted credentials, and decrypted passwords to access the control server. The report warns that the combination of widespread connectivity (84% of systems connected) and limited remediation (29% taking action) creates significant risk to organizations and recommends isolating and managing building management systems, vetting vendors, applying patches, and monitoring for unusual activity.