Risky Business · Tuesday, September 29, 2026
HD Moore highlighted that building management systems, HVAC controls, and access systems, often managed by real estate firms rather than IT departments, represent significant security blind spots. He cited the Target data breach a decade ago as an example of how an HVAC system compromise led to a major breach.
“It turns to be building management systems, your HVAC controls, uh, everything's like your building access systems, the things that you don't think of as IT products.”
“So places where you typically have your real estate firm managing IT are where a lot of corporates get hacked because it's like, okay, well, I don't manage that. The building people manage that device, that controller, even though it's on your network.”
“That hack back. I mean, uh, Target got, that's how Target got owned, like a decade ago, whatever it was, actually the HVAC thing.”