Production systems, machine controls, and IoT devices are often considered “secure enough” - until someone opens the enclosure. Using real-world OT and hardware penetration tests, this presentation demonstrates how quickly physical access can lead to the complete compromise of a system. Typical attack vectors will be demonstrated live: reading firmware, intercepting bus signals, manipulating control logic - all the way to escalation across the entire system. In addition, selected zero-day vulnerabilities discovered during routine testing will be discussed, along with their impact on availability, integrity, and security. Concrete case studies will illustrate why traditional IT security approaches consistently fall short in OT - and which vulnerabilities appear with alarming frequency in ...