Defenseless Infrastructures: Rising Physical Cyber Threats

## Executive Summary This report warns that dark‑web marketplaces and underground forums are enabling physical and cyber attacks against critical infrastructure by trading exploits, POCs, and hacking tools; it documents high‑severity vulnerabilities in HID Mercury physical access controllers (including a CVSS 10.0 RCE), active exploitation of Hikvision cameras, exposed LenelS2 portals, and real‑world substation vandalism, and it recommends urgent patching, segmentation, hardening of physical controls, continuous monitoring, and law‑enforcement collaboration.