Contractor cellular modems left inside chillers and UPS cabinets bypass plant firewalls and leave sites blind when an urgent controller flaw hits.
Nick Lynch traces one blind spot across European supermarket fridge hacks, CISA water-utility PLC alerts and data centers: cellular modems and remote links installed under HVAC, chiller and UPS service contracts that bypass the owner's firewall. After France's cyber agency warned operators in October, Censys counted internet-reachable Danfoss StoreView panels in France dropping from 1,825 to 537 in three days and 220 by Nov 2 simply because owners pulled them offline. Unlike grid assets under NERC CIP-003-9, most plants still have nobody assigned to update the vendor-link list after each service visit.