A lot of marketing fluff, I did some work with Thales before and they like that style :). That being said, a lot of these end-point/edge/etc. are extremely vuln

A lot of marketing fluff, I did some work with Thales before and they like that style :). That being said, a lot of these end-point/edge/etc. are extremely vulnerable, either it’s a SCADA/DCS systems, robotics and drones (mostly SBCs or NUC) or satellites, as the engineers are mostly focused on ‘make it work’, the software code is mostly hacky, the OS most of the time is outdated since updating it remotely might break things, login are default ones -some I found are still admin/admin-, SSH ports are the default and uses passwords instead of pair keys, I’ve even saw production systems are still using HART protocol, usually the links between the edge and API/backend servers are not encrypted or with a broken encryption, and on top of all, most of these companies don’t invest on any cybersecurity audits or have a team dedicated for that, as they need a working PoC to milk more funding to build another PoC for another funding and so on. For example, you can use shodan (or other similar tools) to search for a specific service in these systems, the process is faster if you know some of these running services too, and take it from there, or attacking specific protocols like profibus etc. Attacking an average VPS is harder and more time consuming than any of these industrial systems.