Chennai Metrowater’s Pump Controls Must Stay Separate
Chennai Metrowater’s ₹22.32-crore command centre should keep pump controls separate. We think the test is whether that separation lasts for years.
Read More
Cyber Security
Articles on cyber security for smart cities, smart buildings, utilities and MSMEs, including CERT-In guidelines, ransomware and security-by-design for OT.
Brotli Vulnerability Shows Why BMS Owners Need a Parts List
A Brotli vulnerability on CISA’s exploited list reached Siemens Desigo CC and GE Vernova kit. Why BMS owners need software parts lists from vendors now.
Read More
SSHole OpenSSH Flaw: Check Edge Boxes, Not the Banner
An OpenSSH flaw lets one long password into some musl Linux boxes. Owners of BMS and ICCC gateways can turn off password logins now, before new firmware.
Read More
Korea’s Apartment Data Breach Puts Society Apps on Notice
A hack of GS E&C’s Xi booking system exposed who lives where. Indian gate apps hold similar data, and RWAs should settle who answers for a breach.
Read More
Non-Compliant CCTV Can’t Be Sold in India Since 1 April
Since 1 April 2026 India bars sale of CCTV cameras that miss MeitY’s security requirements. Tenders should ask for STQC test evidence and treat it as a floor.
Read More
Three Advisories, One Gap: Who Patches Cameras and BMS?
Three 2026 advisories hit IP cameras and building software. Each fix fails differently, so someone must own the inventory, the update and the proof it worked.
Read More
CERT-In OEM Guidelines: Turn ‘Should’ Into Contract Clauses
CERT-In’s June 2026 OEM guidelines list indicative patch days but no start or end event, and say ‘should’. How buyers can turn them into tender clauses.
Read More
GoAhead Web Server Flaws Put Smart City Devices at Risk
GoAhead, a web server built into cameras, switches, gateways and building controllers, has new flaws. Most smart city control rooms cannot tell which devices carry it until vendors answer.
Read More
eMudhra Certificate Revoked, Still Live on Smart City Sites
Nine days after eMudhra revoked them, Pune, Patna and Moradabad smart city sites still served the certificates. ICCC feeds and field devices may not notice.
Read More
Cyber Security OEMs for Smart Cities, Matched to the Layer
Trisim’s view of twelve cyber security OEMs, from CrowdStrike, Fortinet and Claroty to Seqrite, Cisco and Tenable, sorted by the smart city layer each one protects: IT, OT or BMS.
Read More
CERT-In’s AI Agent Alert and Smart Buildings
CERT-In says AI agents reached live Indian systems through exposed credentials and open admin panels, the same weaknesses common in smart buildings and ICCCs.
Read More
Control Room BMS Design: Plan for Failure, Not the Demo
How to design a BMS for a control room or ICCC: HVAC and cooling redundancy, environmental sensors, integration, cyber security and commissioning.
Read More
Smart Buildings: Navigating the Threat of Cyber Risks
Smart buildings in India face growing cyber risks. Learn why even fire alarm networks need protection and five security measures every building should follow.
Read More
Importance of Cyber Security in Power Distribution Sector
Why SCADA networks in India’s power distribution sector need strong cyber security: past attacks, OEM vulnerabilities, guidelines and resilience measures.
Read More
Cyber Security and Smart Buildings
Smart buildings expose HVAC, lighting and access systems to cyber attacks. Learn the main vulnerabilities, protective measures and key compliance standards.
Read More
MSMEs cannot be lax about Cyber Security
MSMEs in India are frequent ransomware targets. Practical cyber security steps, NGAV and EDR, sector-specific risks and why CERT-In guidelines matter.
Read More
As Water utilities in India modernize, Security-by-design is vital
As Indian water utilities adopt IoT and SCADA automation, cyber risks rise. Why security-by-design, network visibility and budgeting for security are vital.
Read More
Cyber Security Take-aways from Guwahati ITMS Project in Cyber Security Awareness Month
Cyber security lessons from the Guwahati ITMS project: network visibility, cloud, endpoint security, integrated alert management and regular audits.
Read More
With Cyber Attacks on rise, Government organizations move fast to comply with CERT-In Guidelines
CERT-In now requires government and private organisations in India to report cyber incidents. What the directions cover and how organisations are responding.
Read More
Emerging threat of Cyber Attacks on Utilities
As utilities digitise operations with IoT and remote access, OT networks face rising cyber attacks. Why utilities must treat cyber security as a priority.
Read More