Cybersecurity researcher Gjoko Krstic from Zero Science Labs has uncovered a critical flaw in Honeywell’s Trend IQ4xx building management system (BMS) controllers. These devices control HVAC, lighting, and other building functions in schools, offices, and commercial sites. In their default setup, they expose a full web-based human-machine interface (HMI) without any authentication. This allows anyone […] The post Honeywell Controllers Exposed Online Without Authentication, Thousands at Risk appeared first on Cyber Security News.