Why all these fridges and other machinery control systems are online

Industrial control systems became networked through a long shift from bespoke, serial-based equipment to cheaper Windows computers, commercial Ethernet, and standardized vendor architectures. This reduced the cost of buying, replacing, and supporting equipment, but also made industrial networks more familiar to attackers and enabled attacks to scale across similar deployments. Connectivity then spread beyond factories: central SCADA systems coordinate geographically dispersed infrastructure, while real-time telemetry and automated control support power grids, renewable energy, production planning, and just-in-time supply chains. Even supermarket refrigeration is monitored remotely because regulations and staffing limits make continuous human checks impractical.

Remote access is also driven by the cost of staffing technicians at every site; since the pandemic, many operators and equipment suppliers have embraced centralized support, sometimes making remote connections a condition of timely service. In incident investigations, the expected firewall-and-jump-host arrangement often coexists with several less visible routes, such as vendor tools, modems, VPNs, and wireless links. Removing them can be costly or disrupt operations, so defenders must inventory and assess access, segment systems where possible, and otherwise improve monitoring. Distributed equipment is especially exposed because individual units often use inexpensive wireless links without dedicated firewalls, while water utilities and low-margin manufacturers lack funds for stronger protection. The central argument is that connectivity reflects economic and operational realities, not simply poor judgment; cybersecurity must address those constraints rather than assume critical systems can simply be disconnected.