https://kartiksankhla.com/tags/ics-security/ Recent content in Ics-Security on Kartik Sankhla https://kartiksankhla.com/og-image.png https://kartiksankhla.com/og-image.png Hugo en-us Fri, 10 Jul 2026 20:00:00 +0530 https://kartiksankhla.com/posts/smoke-on-the-water-plant/ Fri, 10 Jul 2026 20:00:00 +0530 https://kartiksankhla.com/posts/smoke-on-the-water-plant/ In March 2016, attackers rated 2 out of 5 in sophistication reached the chemical-dosing controls of a US water utility — through a SQL-injected payment portal, a password left in a plaintext config file, and a physical Ethernet cable that bypassed every logical safeguard standing between them. A case study in why the least-skilled attacker in the building is still dangerous once the architecture has already done the work for them.