More than 100 smart-irrigation systems were installed without changing the factory s default, passwordless setting, according to recent findings from Israeli security research firm Security Joes. The researchers immediately alerted CERT Israel, the affected companies and the irrigation system vendor, Mottech Water Management. Access to the network could result in an attacker being able to flood fields or over-deliver fertilizer, for instance. The firm’s co-founder Ido Naor said only about 20 percent of the identified vulnerable irrigation devices have had mitigation efforts taken to protect them so far.
Source: https://threatpost.com/lax-security-smart-irrigation-attack/160625/