Censys researchers follow some clues and find hundreds of control-room dashboards for US water utilities on the public internet. A stray artifact in a TLS certificate led security researchers to an unnerving discovery: hundreds of control-room dashboards for US water utilities were sitting a click away from the public internet, and dozens of them offered full, no-password control over pumps, valves and chemical feeds.
