• December 22, 2025

    Building Automation Cybersecurity Basics

    The summary below are highlights from a podcast video about cybersecurity basis for building automation systems. This is a good [...]

  • November 3, 2025

    Ransomware in the Building: What Facility Managers Must Know

    Quick Summary Ransomware is now a direct threat to building infrastructure, not just corporate IT systems. Real incidents have disrupted [...]

  • October 16, 2025

    Zero Trust for Building Automation: Securing Every Device at the Edge

    Quick Summary Zero Trust brings continuous verification to the edge of your smart building—every device, command, and data flow. With [...]

  • October 2, 2025

    Top BAS/BMS Protocol Vulnerabilities

    Quick Summary Legacy BAS/BMS protocols share common vulnerabilities, including no encryption, weak authentication, spoofing risks, replay attacks, and weak access [...]

  • September 23, 2025

    From Air Gaps to Always Connected: The Evolution of Smart Building Cyber Threats

    Quick Summary Smart building cyber threats have evolved alongside the shift from isolated, air-gapped BAS to always-connected systems. While connectivity [...]

  • September 17, 2025

    The Hidden Cyber Risks Inside HVAC, Lighting, and Access Control Systems

    Quick Summary HVAC, lighting, and access control systems may appear harmless but can be exploited to cause serious operational, financial, [...]

  • September 9, 2025

    Why Building Automation Systems Are the New Cybersecurity Target

    Quick Summary Building Automation Systems (BAS) are increasingly targeted by cybercriminals because they manage critical building functions such as HVAC, [...]

  • August 7, 2025

    Overcoming Niagara Framework Cyber Vulnerabilities

    Key Points Comprehensive Vulnerability Mitigation: DOME encrypts all device communications, enforces unique cryptographic identities, blocks unauthorized actions, and prevents lateral [...]

  • July 9, 2025

    BACnet Security and Operational Issues with Self-Signed Certificates

    Key Points Security Risks Without Trusted Validation: Self-signed certificates lack third-party verification and a root of trust, making BACnet/SC systems [...]

  • May 27, 2025

    Cybersecurity Challenges in Retrofitted Smart Buildings

    Key Points Legacy Systems Are Inherently Vulnerable: Most retrofitted buildings rely on outdated OT devices and insecure protocols (like BACnet [...]