Aug 26, 2026 · 38 min
Exposed building systems turn data centers into cyber targets
The feds flip the script.
The episode shows how internet-facing facilities technology can create a dangerous attack surface beyond an organization's directly managed systems.
- 1Exposed building automation can let attackers manipulate data-center HVAC, sensors, power-related systems, and fire suppression.
- 2Cyber defenses must inventory systems affecting an organization, including infrastructure controlled by building owners and other third parties.
- 3The broader briefing links operational technology risks with Chinese hacking activity, water-system attacks, insurance losses, and AI security failures.
Don't miss
Stephen Hilt describes how exposed building systems could let attackers alter data-center temperature, sensor readings, power-related systems, or fire suppression.
The brief
The briefing moves from disrupted Chinese hacking activity and attacks on water systems to software vulnerabilities, rising cyber insurance losses, AI agent escapes, and a Boston Scientific incident.
Stephen Hilt of Trend AI explains how public information and online footprints can expose data centers and reveal building-control systems such as BACnet and Niagara Fox.
The central risk is operational: attackers who reach exposed building automation may manipulate HVAC, sensors, power-related systems, or fire suppression, disrupting facilities whose tenants rely on owners' infrastructure.
Hilt's defensive prescription is broader asset inventory, including systems an organization does not own, followed by collaboration with building owners to remove controls from the public internet.
The standout warning is that basic security fundamentals must apply to every asset, because a facility's cyber exposure can extend well beyond its corporate network.