Someone hacked a crane from a parking lot

From the PrOTect IT All Weekly Security Brief, sent to the list on October 1, 2026.

If your plant has wireless, you have an airspace. A wireless engineer sat in a parking lot, connected to a crane anti-collision network, and was in position to stop every crane in that facility inside 20 minutes. Nobody inside the fence knew he was there.

This week's episode

"Own Your Industrial Airspace: Wireless, Vendors, and the Parking Lot Crane Hack with Scott McNeil"

Scott McNeil has spent over 20 years in networking and wireless, the last ten entirely in OT. He works as an integrator, so he has no product to push - just hard-earned experience across real plant floors. This conversation will change how you think about the part of your network you probably cannot see. You will walk away knowing what questions to ask about your own airspace and where most plants fall short before they ever get to the hard stuff.

Listen: https://protectitallpod.com/ep125/

This week in cyber

MikroTik RouterOS has a critical vulnerability - CVSS 9.8 - that allows remote code execution or denial of service. MikroTik gear shows up in a lot of OT environments as cheap, capable routing hardware. If you have it anywhere on your network, check your version against the advisory and patch to 7.24 or later.
https://www.cisa.gov/news-events/ics-advisories/icsa-26-272-06

Toptech TMS7 and TopHAT got a CISA advisory this week covering multiple CVEs that could let an attacker access critical data or execute arbitrary code. If you run terminal management systems at a fuel or chemical facility, this one is worth reading today.
https://www.cisa.gov/news-events/ics-advisories/icsa-26-272-02

Baicells Nova 430H eNodeB gear has a flaw that lets an attacker inject malformed messages and trigger a denial of service. Private LTE and cellular base stations are increasingly common in industrial sites, and most people treat them like set-and-forget infrastructure. They are not.
https://www.cisa.gov/news-events/ics-advisories/icsa-26-272-04

Do this this week

Pull up a list of every networking device on your OT network - routers, switches, wireless access points, cellular gear - and write down the firmware version running on each one. That is it. Just the list. You cannot patch what you cannot see, and most plants do not have this list current. It takes less than an hour to start and it will tell you immediately where your gaps are.

Short of the week

This one is a little different - I share what my first Amazon royalty check actually looked like. Honest numbers, no spin.
https://www.youtube.com/shorts/YV_z8oSnACo

If the podcast has been useful to you, a YouTube subscribe helps more people find it. We are working toward 500 subscribers at https://www.youtube.com/@PrOTectITAll and every one counts.

Aaron