8 http://krebsonsecurity.com/2014/02/target-hackers-broke-in-via-hvac-company/
Case in Point: Lateral Movement
Target's credit-card data breach in the fall of 2013 was traced back to its
HVAC system
8
— hardly on the security architect's short list of hot-button
areas to tackle. This episode exposed the new kinds of dependencies
introduced by expanding ecosystems of "things" like HVAC, printers,
cameras and anything else with an IP address. Unfortunately, many are
vulnerable and so have appealing entry points from which attackers can
launch attacks. Don't let your API be one of them.
