Industrial control systems are experiencing the growing pains of letting go of older technology that was designed prior to security being much of a concern.

ICS networks are often designed to be 'air gapped'. All too often the air gap is broken via a vpn into the network so that someone can RDP to a windows scada machine (that doesn't receive updates because it can't reach the internet itself).