10 years on from the Target breach. Has building cyber security improved?

A decade after the Target breach, the article argues that risks to connected building management systems have increased despite lessons learned, citing more internet-exposed devices, a proliferation of lower-cost vendors and installer weaknesses, remote access via poorly secured RDP and cloud/mobile APIs, greater Shodan discoverability, and cheap cellular modems that bypass enterprise controls. It urges collaboration between cyber, facilities, and procurement teams, inclusion of supplier security requirements, and physical checks of plant/control rooms to prevent security sidestepping.