
Thousand of Honeywell Controllers Exposed Online Without Authentication
Thousands of Honeywell building-management controllers may be accessible online with no login required, exposing web-based controls that can be abused to make unauthorized changes and trigger operator lockouts. Zero Science Lab has published advisory ZSL-2026-5979 (released 02 March 2026) detailing an unauthenticated access issue affecting Honeywell Trend IQ4xx BMS controllers in factory-default configuration. The IQ4 (Trend IQ4) […] The post Thousand of Honeywell Controllers Exposed Online Without Authentication appeared first on Cyber Security News.