Lentis, Cyber-Attacks on Cyber-Physical Systems

Introduction

A cyber-attack can be defined as an attack on computer systems/architecture, or information systems with malicious intent. The attack could be an individual or group acting against other individuals, business or civilian groups with the intention of acquiring unsecured data from the victim. Specifically, cyber-attacks on cyber-physical systems are becoming increasing as physical systems become more interconnected. These attacks also disrupt vital services, compromise safety of users, and risk severe economic damage, especially when targeting systems that are essential to daily functions.

A cyber-physical system (CPS) is a system in which there is some connection between a physical entity and its related cyber component. The connection is typically sustained between system components by feeding data through sensors or actuators. The main distinction between a CPS and a typical computer is that a CPS has physical inputs and outputs.[1][2]

Examples of cyber-physical systems include industrial control systems, smart power grids, autonomous vehicles, smart home technologies, and medical devices. Because these systems often operate in real time and control critical infrastructure, they require high levels of reliability and security. Any breaches in these systems could lead to long-term consequences, such as service outages, safety hazards, and loss of trust from frequent users.

The large scale interconnection of CPS devices through networks and cloud based platforms is commonly referred to as the Internet of Things (IoT). IoT allow devices to communicate, share data, and operate more efficiently, but they also introduce new security challenges. Many CPS and IoT devices are built with limited computational resources, including restricted processing power, memory, and energy capacity, which makes it difficult to implement strong security mechanisms such as advanced encryption, real time monitoring, and intrusion detection. [3] These limitations can weaken overall system security and increase vulnerability to cyber-attacks, particularly in large scale, distributed environments. As a result, securing cyber physical systems have become a critical area of research and policy, emphasizing the need for strong authentication, and resilience against both cyber and physical threats. Future work to mitigate risk of attacks must prioritize continuous monitoring and secure architecture to remain proactive.

Types of Cyber-Physical Systems

Smart Car

A smart car is equipped with visual and weather sensors that feed information to the driver and to the auto response functions of the car itself, such as automated driving, and vehicle-to-vehicle (V2V) communication. New CPS components in cars are commercial-off-the-shelf (COTS) and are integrated from third parties. Many car producers fail to realize that new security issues arise from integrating these heterogeneous components in the vehicle. Tire Pressure Monitoring Systems (TPMS), for instance, have unencrypted communication with the vehicle. Attackers could exploit this communication, and retrieve unique vehicle IDs.[4]

Smart Home

A smart home could have weather sensors to auto regulate various temperature, lighting, and appliance components in the home. All of these features could be easily programmable from a universal device. Some devices are already commercially available, such as Nest, Google Home, and Amazon Echo. If hackers took control of a home's smart thermostat, like Nest, they could have complete information on the family's schedule, specifically when people are in and out of the home. [5][6]
(Video: Nest Thermostat Hacking)

Although security measures like two-factor authentication can help prevent cyber attacks, they make the user experience more tedious which makes companies more reluctant to make these protections mandatory. For platforms like Google Next and other smart home ecosystems, this creates a tradeoff between usability and security, where simplifying access may unintentionally weaken system protection.[7]

The Internet of Things Cybersecurity Improvement Act of 2020 introduced baseline security requirements for devices used by federal agencies, aiming to improve standards among manufactures that contract with the government. While this law does not directly regulate consumer smart home devices, it encourages broader industry adoption of strong cybersecurity practices.[8]

Smart Grid

Smart meters could be placed on homes to communicate with the utility providers on a daily basis for close monitoring of electricity use. This could help utility providers better predict peak electricity demand, thus decreasing wasted electricity. Looking to future, if more homes are equipped with electric storage capabilities such as solar panels and/or electric vehicle batteries, it becomes easier to scale up renewable energy integration. The grid is currently highly centralized due to reliance on fossil fuel plants, and needs diversified storage opportunities for renewable energy.[9]

Drones

Unmanned aerial vehicles (UAV) or drones are a widely used technology. The U.S. Custom and Border Protection uses MQ-9 Reaper, a type of UAV, for surveillance missions across the border.[10] Law enforcement agencies began to operate commercial drones to replace their manned helicopter units.[11] Fire fighters use commercial drones to gather structural information of hazardous buildings before they perform search and rescue missions.[12] Companies like Amazon are developing autonomous package delivery systems using drones. Hobbyists fly drones for entertainment.

Commercial drones have vulnerabilities that can be exploited. Many drone manufacturing companies such as DJI and 3D Robotics use different flight control platforms like Pixhawk, however they operate under same communication protocol, MAVLink. MAVLink was developed as an open source program for hobbyists. Since security features add cost, MAVLink does not have security features to protect drones from cyber physical attacks.[13]

MAVLink pairs the drone and the ground control station with NetID. A properly programmed attacking device can parse the radio transmission to obtain and update this paired NetID. Then, the attacking device can send commands to power off or take control of the drone. The code to parse the radio transmission is easy to look up, so anyone could conduct a cyber physical attack on commercial drones running with MAVLink.(Video: Anti drone device)[14]

Transportation Systems

A transportation system is a facility consisting of the means and equipment necessary for the movement of passengers or goods.[15] Transport networks have become increasingly digital, which makes them highly susceptible to cyber attacks. Electronic data can now track the location, status, and condition of vehicles and infrastructure. Electronics are used to monitor weather-related risks, such as hurricanes or landslides, that will cause damage or delays to transportation systems. Any organization will be exposed to cyber attacks if they use computer networks or internet for sales, administrative functions, automated control systems, or storage of confidential information [16] . Specifically, the major transportation systems at risk are:

1. Railroads/trains
2. Airplanes and airports
3. Connected cars (cars with internet access)

Medical Devices

A medical device is any instrument, machine, or piece of equipment used to diagnose, treat, or monitor patients in a clinical setting. As healthcare facilities have become increasingly reliant on network connectivity, medical devices have evolved from standalone tools into integrated components of hospital IT ecosystems. Electronic data can now track device status, patient vitals, and equipment performance in real time. While this has improved patient outcomes and support doctors make treatment decisions, this also leads to organizations being susceptible to cyber threats if they connect medical devices to internal networks. The rapid growth of AI and blockchain technologies has further accelerated the digitization of healthcare, shifting the industry from conventional hub based systems toward more interconnected, personalized healthcare management systems [17].

Precision Agriculture

Precision agriculture, also known as smart farming, is an innovative strategy that utilizes technologies such as GPS, IoT sensors, drones, and others to manage larger expanses of farm land, and optimize resources like fertilizers and pesticides. Smart farming has proven to increase efficiency, profitability, and promote sustainable crop production.[18] As resources become more scarce with a growing demand, associated costs of farming have risen, making precision agriculture all the more vital. The system works by using automated machinery known as variable rate technology (VRT) that adjusts the rate of resource input on the go. In addition to VRTs, site-specific crop management (SSCM) assists by tailoring soil and crop input to field locations based on need. These machineries are supported by GPS and drone sensing technology that map field variability and provide aerial imagery, respectively.[19]

Agendas of Cyber Attacks

January 2016 Cyber Attacks Statistics (Image: Hedwig in Washington, CC BY-SA 4.0)

Criminal

This is the most common agenda, comprising of 60.6% of cyber attacks in January 2016.[20] In many of these cases, the attacker targets the digital assets of a company or transportation network. This includes personal info such social security numbers of customers and employees, credit card numbers, and intellectual property of the company.

• A Dutch-based trafficking group hid cocaine and heroin in cargoes shipping containers of timber and bananas from South America by hacking into computer networks of companies operating in the port of Antwerp. This allowed the hackers to access secure data about the location and security details of containers, meaning the traffickers could steal the smuggled cargo before the legitimate owner arrived.[21]
• In 2018, a major data breach against Marriott International occurred. Attackers were able to gain illegal access to the Starwood guest reservation database, exposing personal guest details of roughly 500 million guests; including passport numbers and contact information.[22] This attack was a turning point in terms of data protection, leading companies to take extreme measures to mitigate future risk.

Criminal cyber attacks may also be motivated by malice. In this case, the attacker could be a disgruntled employee or customer that wants to get back at the system. They could also be motivated by desire to prove their ability to perform a cyber attack. These cyber attacks could be the result of untargeted malicious code and random selection.

• In Lodz, Poland, a 14-year-old modified a TV remote control so that it could be used to change track points. The teenager hacked into the train system for the information needed to build the device, essentially making it his own personal train set. As a result, four vehicles were derailed injuring twelve people. He had no desire to hurt anyone, but was hacking into this system as a prank.[23]

Hacktivism

Hacktivism is defined by the hacking, or breaking into a computer system, for a politically or socially motivated purpose.[24] It is the second most common agenda, comprising of 27.7% of cyber attacks in January 2016.[20]

• A group protesting the Communications Decency Act in 1996 hacked into the Department of Justice website and changed the title to the “Department of Injustice.”[25]
• Over the past several years, Pro-Russia hacktivists have conducted cyberattacks against U.S. critical infrastructure. The Russia-Ukraine conflict in 2022 increased the number of pro-Russia groups with some appearing to have associations with the Russian state. They used low sophisticated methods such as scanning for exposed systems and exploiting weak remote access. Their activities have affected sectors like energy, water, and agriculture, sometimes causing operational disruption. [26]

Cyber Espionage

Cyber espionage is the use of computer networks to gain illicit access to confidential information, typically that held by a government or other organization.[27] This is more sophisticated than most other cyber attacks and attackers are looking for trade secrets and intellectual property of other countries or governments. This comprised of 7.4% of cyber attacks in January 2016.[20]

• High end UAVs have exploitable vulnerabilities. In 2011, Iran hijacked the RQ-170 Sentinel UAV, operated by the CIA. The Iranians first jammed the radio communication channel controlling the Sentinel from the ground control center. This forces Sentinel to rely on GPS to determine its latitude, longitude, altitude, and velocity. Iran then sent false GPS coordinates, guiding Sentinel to land on their territory, while Sentinel thought it was landing on its home base.[28]

Cyber Warfare

Cyber warfare is a politically motivated attack on an enemy's computer or information systems.[29] These attacks aim to disrupt critical infrastructure and cause property damage and loss of life. These would be considered terrorist attacks from organizations such as ISIS. This comprised of 4.3% of cyber attacks in January 2016.[20]

Commercial drones are easy to exploit without leaving any logs or traces to track attackers. Terrorists can use these drones as a weapon.

• ISIS recently started to use drones as a weapon by delivering bomb or chemical weapons.
• Cartels and drug dealers uses commercial drones to smuggle narcotics, and inmates also uses drones to smuggle contrabands such as cell phones, cigarettes, and drugs to their cells. In early 2016, Maryland inmate was able to arrange to deliver these contrabands to right in front of his cell window.[30]

Data Harvesting

Profiling or harvesting data is the process of examining, analyzing, and summarizing datasets to understand underlying correlations or consistencies. The process begins with collection and ends with documentation, often in the form of reports. While not all data harvesting is malicious, it can be done illegally and is frequently the driver behind cyber attacks. Attackers use data harvesting as a technique to gather information such as user credentials (known as credential theft), and later use these credentials to illegally access systems, share them on the dark web, or advance their future attacks[31].

Other forms of illegal data harvesting include:

• Phishing: act of sending emails or other messages, acting as a reputable company, in order to harvest data
• Social Engineering: exploiting human error by manipulating their psychology to reveal confidential information

With that, data harvesting is a driving agenda behind cyber attacks, which often allows attackers to advance their attacks and access cyber-physical systems.

Case Studies

Iranian-Affiliated PLC Attacks on Critical Infrastructure (2026)

In early April 2026, the Cybersecurity and Infrastructure Security Agency (CISA) issued a warning regarding Iranian-affiliated cyber attacks targeting critical infrastructure through Programmable Logic Controllers (PLCs). Unlike sophisticated exploits, attackers leveraged legitimate engineering tools to compromise industrial systems that had been left internet-exposed with weak security configurations. The attacks were motivated by geopolitical tensions rather than financial gain.

The sectors primarily targeted were those relying on Rockwell Automation/Allen-Bradley PLCs[32], including water and wastewater systems, the energy sector, government services, and food and beverage manufacturing. Attackers gained unauthorized access by exploiting systems that lacked basic protections such as multi-factor authentication, network segmentation, and firewall rules restricting remote access. Once inside, they altered PLC settings and project logic files, causing Human-Machine Interface (HMI) displays to show operators false data and system statuses. This meant that facility operators were making decisions based on inaccurate readings, potentially allowing dangerous conditions to go undetected. The attacks resulted in operational disruptions, financial losses, and interference with critical infrastructure systems. This example demonstrates how a cyber attack can produce real-world physical consequences that extend well beyond simple data theft.

The impact of these attacks varies across different participant groups, each with unique ideas, interests, and values. Rockwell Automation, as the main manufacturers of the Allen-Bradley PLC’s, played a vital role. Since they were responsible for the security vulnerabilities that led to their product getting hacked, they suffered reputational risks and even potential liabilities. Incidents like these can reduce public trust in their products and increase pressure to develop tools with more security [33].

The primary companies that utilized these products were key parts of U.S. infrastructure, such as the Water and Wastewater Systems, energy sectors, and manufacturing companies. Their primary goal is to create and maintain safe, secure resources for the American public. They utilize PLC products to automate, control, and monitor machinery [34]. As a result of the attack, critical data was manipulated and crucial project files were lost, illustrating the importance, but also dependence, of vital infrastructure on emerging technologies.

Six government agencies were involved in monitoring the cyber attack, including the Federal Bureau of Investigation, Cybersecurity and Infrastructure Security Agency, Department of Energy, National Security Agency, Environmental Protection Agency, and United States Cyber Command. They investigated the attack and issued alerts to the public and organizations about the risk of similar intrusions. Cyber attacks like these increase the burden on such agencies to respond to threats.

In this case, Iranian-affiliated hacking groups were the attackers, whose goal was likely to create operational disruptions and financial losses. However, since this event occurred very recently, investigations into the attackers' exact motives are continuing to happen [34].

The last associated participants are the general U.S. public. They represent a highly vulnerable group, since they lose resources such as clean water and energy, if there is a disruption to key U.S. infrastructure. This case demonstrates how hacks on individual technology modules can cause larger effects on a variety of different demographics.

Sociotechnical Factors

Common Themes Across Incidents

Across these incidents, vulnerabilities emerge not from technical flaws alone, but from the interaction between technology, human behavior, and organizational practices. Shared passwords, insufficient staff training, poor monitoring, and internet-exposed systems with weak security configurations are recurring factors that create openings for attackers. This happens regardless of the specific target or method used. These human and procedural failures often prove just as consequential as any software vulnerability.

At the organizational level, constraints such as limited funding, legacy infrastructure, and competing priorities directly shape security outcomes. Many water and industrial facilities rely on outdated systems never designed for modern network connectivity, and decisions around cost, efficiency, and maintenance have downstream consequences for how secure these systems ultimately are.

The broader geopolitical context also plays a significant role. Some attacks are isolated and locally motivated, while others are linked to state-aligned actors, reflecting a growing trend of cyber operations being embedded within international political conflicts. Critical infrastructure systems are increasingly becoming deliberate targets in geopolitical disputes, making international cooperation on cybersecurity standards more important than ever.

Finally, these cases collectively emphasize the societal dimension of cyber-physical systems. Because these systems support essential public services such as water supply and energy, even minor disruptions carry the potential to breakdown public trust and generate widespread concern. This reinforces why securing them demands urgent and sustained attention.

Future of Cyber-Attacks

As cyber-physical systems become more integrated, cyber attacks are likely to become more sophisticated with larger impacts. Part of this is due to the advancement of AI and edge devices, which allows attackers to operate with more automation in large-scale breaches [35]. The increasing interconnectedness of these technologies also amplify hacker impacts, as disruptions to small units of technology can cascade into various sectors, such as health, finance, and transportation. Repeated attacks can also worsen public confidence in technology, which makes its widespread acceptance difficult.

However, cyber safety will also improve to counteract these new trends. For one, future safety efforts will cover entire systems, rather than isolated modules, for in depth defense. Additionally, AI and automation can reduce human error, which is currently one of the leading causes of cyber attacks. However, even as systems become more secure, risk compensation may lead individuals or organizations to be more careless with their work, introducing new vulnerabilities into advanced systems.

Conclusion

As seen with hacks on drones and transportation systems, CPS security breaches could result in loss of secret information, physical property, and human lives.

According to Tony Tyler, CEO of the International Air Transport Association (CTA), drones are one of the biggest threat to the passenger airlines by interfering the route of the commercial airplanes.[36] To minimize the risk, FAA started to enforce drone regulations and prohibited flying drones near airports. Army officers have developed a cyber rifle using raspberry pi to power off commercial drones.

The National Transportation Safety Board (NTSB), established in 1967, is a government agency that investigates accidents in the aviation, highway, marine, pipeline, and railroad modes.[37] The NTSB must implement policies to meet the requirements placed by the National Institute of Standards and Technology (NIST).[38] The NIST develops actionable recommendations for strengthening cybersecurity in the public and private sectors to better secure the growing digital economy.[39]

There are many initiatives to prevent CPS breaches. The Department of Energy has a Cybersecurity for Energy Delivery Systems (CEDS) program designed to improve the United States' energy infrastructure. A main goal of the program is to better assess risk on a large scale, and identify vulnerabilities in our current system.[40] Trustworthy Cyber Infrastructure for the Power Grid (TCIPG) is an example of a program funded by the Department of Energy. TCIPG has developed commercial software packages that can be integrated by utility providers. Examples include sensors like Amilyzer that identify system threats in real time, and middleware frameworks like GridStat that decrease data delivery latencies in the power grid.[41]

The National Science Foundation has founded a Team for Research in Ubiquitous Secure Technology (TRUST) that is currently looking into financial, healthcare, and physical infrastructure solutions.[42] Carnegie Mellon's CyLab is also committed to building more of these public-private partnerships in developing new technology for secure computing.[43]

The internet of things is now a reality. The connection of various cyber-physical systems is intended to improve our way of life, but is also being exploited with criminal intent. Security issues are now more complex and larger scale than ever before. Research into cyber-physical security will help us better understand the cyber interface between physical systems, and the growth in consumer adoption of new technology.

References

• ↑ Thompson, K. (2014, June 20). Cyber-Physical Systems. https://www.nist.gov/el/cyber-physical-systems
• ↑ Lee, J., Bagheri, B., & Kao, H.-A. (2015). A Cyber-Physical Systems architecture for Industry 4.0-based manufacturing systems. Manufacturing Letters, 3, 18–23. https://doi.org/10.1016/j.mfglet.2014.12.001
• ↑ Yaacoub, Jean-Paul A.; Salman, Ola; Noura, Hassan N.; Kaaniche, Nesrine; Chehab, Ali; Malli, Mohamad (2020-09). "Cyber-physical systems security: Limitations, issues and future trends". Microprocessors and Microsystems. 77: 103201. doi:10.1016/j.micpro.2020.103201. ISSN 0141-9331. PMC 7340599. PMID 32834204. {{cite journal}}: Check date values in: |date= (help)CS1 maint: article number as page number (link)
• ↑ Humayed, A., & Luo, B. (2015). Cyber-physical Security for Smart Cars: Taxonomy of Vulnerabilities, Threats, and Attacks. In Proceedings of the ACM/IEEE Sixth International Conference on Cyber-Physical Systems (pp. 252–253). New York, NY, USA: ACM. https://doi.org/10.1145/2735960.2735992
• ↑ 5 Security Concerns to Consider When Creating Your Smart Home. (n.d.). http://www.makeuseof.com/tag/5-security-concerns-consider-creating-smart-home/
• ↑ Network Security. (2014). Black Hat USA 2014 - Embedded: Smart Nest Thermostat A Smart Spy in Your Home. https://www.youtube.com/watch?v=UFQ9AYMee_Q
• ↑ visceral_dev_admin (2022-08-25). "Smart Homes and Policy: Cybersecurity Risks and Tradeoffs". Bipartisan Policy Center. Retrieved 2026-04-20.
• ↑ Rep. Kelly, Robin L. [D-IL-2 (2020-12-04). "H.R.1668 - 116th Congress (2019-2020): IoT Cybersecurity Improvement Act of 2020". www.congress.gov. Retrieved 2026-04-20.{{cite web}}: CS1 maint: numeric names: authors list (link)
• ↑ Department of Energy. (n.d.-b). What is the Smart Grid? https://www.smartgrid.gov/the_smart_grid/smart_grid.html
• ↑ DHS Is Using Surveillance Drones To Spy On Americans. (2014, October 12). http://www.thesleuthjournal.com/dhs-using-surveillance-drones-spy-americans/
• ↑ Gettinger, D. (2013, November 30). Lawkeepers: Police Drones. http://dronecenter.bard.edu/lawkeepers-police-drones/
• ↑ Schroth, F. (2016, August 4). Drones & Fire - Officials Speak to the Value of UAS in Firefighting. http://dronelife.com/2016/08/04/drones-fire-officials-speak-value-uas-firefighting/
• ↑ Making a Mavlink WiFi bridge using the Raspberry Pi — Dev documentation. (n.d.). http://ardupilot.org/dev/docs/making-a-mavlink-wifi-bridge-using-the-raspberry-pi.html
• ↑ shellntel. (2015). anti-drone device demo. https://www.youtube.com/watch?v=sycgvpIxvPU
• ↑ transportation system - Dictionary Definition. (n.d.). https://www.vocabulary.com/dictionary/transportation%20system
• ↑ Marsh. (2015). Cyber Risk in the Transportation Industry. http://www.oliverwyman.com/content/dam/marsh/Documents/PDF/UK-en/Cyber%20Risk%20in%20the%20Transportation%20Industry-03-2015.pdf
• ↑ Li, Susan; Surineni, Kamalakar; Prabhakaran, Nishant (2025-09-01). "Cyber-Attacks on Hospital Systems: A Narrative Review". The American Journal of Geriatric Psychiatry: Open Science, Education, and Practice. 7: 30–39. doi:10.1016/j.osep.2025.03.002. ISSN 2950-3868.
• ↑ Brinkle, C. (2026, February 26). Precision agriculture: Definition, Key Technologies, and benefits. Precision Agriculture: Definition, Key Technologies, and Benefits. https://www.thomasnet.com/insights/precision-agriculture/
• ↑ Wigmore, I. (2022, October 18). What is Precision Agriculture/precision farming?. WhatIs. https://www.techtarget.com/whatis/definition/precision-agriculture-precision-farming#:~:text=Precision%20agriculture%20(PA)%20is%20a,navigates%20crops%20without%20a%20driver.
• ↑ a b c d Template:Passeri, P. (2016, February 16). January 2016 Cyber Attacks Statistics. http://www.hackmageddon.com/2016/02/16/january-2016-cyber-attacks-statistics/
• ↑ Herberger, C. (2016, April 21). Cybersecurity in the Real World: 4 Examples of the Rise of Public Transportation Systems Threats. https://blog.radware.com/security/2016/04/cybersecurity-4-public-transportation-threats/
• ↑ Burgess, M. (2025, October 31). Marriott Data Breach: What happened, impact, and lessons. Huntress. https://www.huntress.com/threat-library/data-breach/marriott-data-breach
• ↑ Smith, S. (2008, February 12). Teen Hacker in Poland Plays Trains and Derails City Tram System. http://inhomelandsecurity.com/teen_hacker_in_poland_plays_tr/
• ↑ What is hacktivism? - Definition from WhatIs.com. (n.d.). Retrieved December 11, 2016, from http://searchsecurity.techtarget.com/definition/hacktivism
• ↑ Adams, B. (1997, July 24). Web site a victim of `ecoterrorism’? http://www.deseretnews.com/article/573959/Web-site-a-victim-of-ecoterrorism.html?pg=all
• ↑ "Pro-Russia Hacktivists Conduct Opportunistic Attacks Against US and Global Critical Infrastructure | CISA". www.cisa.gov. 2025-12-18. Retrieved 2026-04-20.
• ↑ Eugenie, de S. (2015). National Security and Counterintelligence in the Era of Cyber Espionage. IGI Global.
• ↑ Mick, J. (2011, December 15). Iran: Yes, We Hacked the U.S.’s Drone, and Here’s How We Did It. http://www.dailytech.com/Iran+Yes+We+Hacked+the+USs+Drone+and+Heres+How+We+Did+It/article23533.htm
• ↑ Cyber Warfare. (n.d.). http://www.rand.org/topics/cyber-warfare.html
• ↑ Kelly, H. (2016, June 24). How to catch drones smuggling drugs into prison. http://money.cnn.com/2016/06/24/technology/dedrone-drone-prisons/index.html
• ↑ Lenaerts-Bergmans, B. (2023, July 18). What is credential harvesting?. CrowdStrike. https://www.crowdstrike.com/en-us/cybersecurity-101/cyberattacks/credential-harvesting/#:~:text=Credential%20Harvesting%20Definition,for%20years%20at%20a%20time.
• ↑ "Iranian-Affiliated Cyber Actors Exploit Programmable Logic Controllers Across US Critical Infrastructure | CISA". www.cisa.gov. 2026-04-07. Retrieved 2026-05-01.
• ↑ "Iranian-Affiliated Cyber Actors Exploit Programmable Logic Controllers Across US Critical Infrastructure" (PDF). IC3.gov. 2026-04-07. Retrieved 2026-04-11.
• ↑ a b Lakshmanan, Ravie (2026-04-08). "Iran-Linked Hackers Disrupt U.S. Critical Infrastructure by Targeting Internet-Exposed PLCs". The Hacker News. Retrieved 2026-04-10.
• ↑ Team, The Claroty (2025-11-25). "3 Emerging Threats to Cyber-Physical Systems". Claroty. Retrieved 2026-05-04.
• ↑ Crowe, S. (n.d.). Drones a “Real Threat” to Passenger Planes: IATA - Robotics Trends. http://www.roboticstrends.com/article/drones_a_real_threat_to_passenger_planes_iata/
• ↑ National Transportation Safety Board. (n.d.). History of The National Transportation Safety Board. http://www.ntsb.gov/about/history/pages/default.aspx
• ↑ U.S. Department of Transportation. (2006, October 13) Audit of NTSB’s Information Security Program. https://www.oig.dot.gov/sites/default/files/NTSB_FISMA_FINAL.pdf
• ↑ Commission on Enhancing National Cybersecurity. (2016, December 1). Report on Securing and Growing the Digital Economy. https://www.nist.gov/sites/default/files/documents/2016/12/02/cybersecurity-commission-report-final-post.pdf
• ↑ Department of Energy. (n.d.-a). Cybersecurity for Energy Delivery Systems | Department of Energy. http://energy.gov/oe/services/technology-development/cybersecurity-for-energy-delivery-systems
• ↑ Trustworthy Cyber Infrastructure for the Power Grid. (2014). http://tcipg.org/about-us
• ↑ The Team for Research in Ubiquitous Secure Technology (TRUST). (n.d.). https://www.truststc.org/research/index.html
• ↑ Technology Transfer. (n.d.). https://www.cylab.cmu.edu/partners/tech_transfer.html

Where this page came from

This page was imported from Wikibooks. From “Lentis” on Wikibooks, by its contributors, under CC BY-SA 4.0. Changed here: set as a page; navigation and edit links left out; each image under its own licence, credited in its caption.

Nobody has written it yet — it is the source material at a new address, which is why search engines are asked to skip it and why no one earns from it. It is up for grabs: take it on, and it is yours to rewrite and to earn from.