dont need a network connection to get a virus into the network.
Here is a scenario I have seen. A manufacturing tool often has its critical control implemented by a plc or embedded controller but uses a pc to exchange mfg related data with. Someone ships a tool with a virus on that pc. It is installed on the factory network and eventually brings down some windows servers that run software needed to know how to move from station to station.
The tool itself finishes it process and waits patiently for the next task, which doesnt arrive till the mess is cleaned up.
Deeply disappointed in the lack of comments on this 'Director of Penetration' fellow.
Biting the hand that feeds IT
