• Neeve
  • Posts
  • 🏢 The Future of Smart Buildings is Here

🏢 The Future of Smart Buildings is Here

Fines, leaks, and hacks—key cyber updates

Author

Alison Bridge
February 04, 2025

In this week’s Neeve Newsletter, AI-driven automation is reshaping smart buildings, CISA and the FDA warn of a dangerous backdoor in medical devices, and SonicWall VPNs face active exploitation in critical cyberattacks. Stay ahead with key insights on cybersecurity and emerging tech risks.

Experience Neeve in Action

Your operations deserve better than patchwork solutions. Join us for a personalized demo to see how Neeve creates a secure, scalable foundation for your operational technology future.

This Week’s Cyber Insights

Smart buildings are shifting from cloud-centric to an "edge-with-cloud" model.

  • AI-driven automation improves energy efficiency, security, and maintenance.

  • Interoperability between IoT devices and building automation systems (BAS) is key.

  • The next decade will focus on intelligent, autonomous spaces optimizing real-time data processing.

🤔 The Bigger Picture:

As buildings become more connected, cybersecurity risks grow alongside efficiency gains. Organizations must balance AI-driven automation with strong security measures to protect critical infrastructure from cyber threats.

Contec CMS8000 patient monitors contain a backdoor allowing remote code execution.

  • The devices transmit patient data to an unauthorized third-party IP.

  • No patch is available; healthcare providers must remove these devices from networks.

  • The FDA and CISA stress the risk to patient safety and data security.

🤔 The Bigger Picture:

This vulnerability exposes healthcare networks to cyberattacks while endangering patient privacy and safety. The lack of available patches forces organizations to either replace or disconnect affected devices immediately. Stronger supply chain security measures are necessary to prevent future risks.

Nearly 3,700 SonicWall SMA 1000 VPNs are exposed online, per Censys researchers.

  • A critical RCE vulnerability (CVE-2025-23006) allows attackers to take over devices.

  • Microsoft Threat Intelligence first discovered and reported the flaw.

  • SonicWall confirmed active exploitation but has not disclosed victim details.

  • Prior SonicWall vulnerabilities have been targeted by ransomware groups.

🤔 The Bigger Picture:

Organizations using SonicWall VPNs must immediately restrict internet exposure and apply security patches. Threat actors are actively exploiting this flaw, potentially leading to ransomware attacks or data breaches. Given SonicWall’s history of targeted vulnerabilities, businesses should assume high risk and strengthen monitoring on affected devices.

Further Alerts & Insights

đź“° IIS, Apache, SQL Servers Under Attack

Hackers are exploiting public-facing vulnerable IIS, Apache, and SQL servers to gain initial access to corporate networks. Organizations must patch immediately.

đź“° Ransomware Targets ESXi Systems

A new ransomware campaign exploits vulnerabilities in VMware ESXi systems, posing risks to enterprise virtual environments.

đź“° Tata Technologies Hit by Ransomware

Indian tech giant Tata Technologies suffered a ransomware attack, exposing sensitive internal data and disrupting operations.

đź“° Ransomware Hits NY Blood Provider

A ransomware attack has disrupted New York Blood Center Enterprises (NYBCe), delaying blood donations amid a critical shortage. The nonprofit, which serves 400 hospitals across 15 states, is working to restore systems but has no timeline for full recovery.