Contain internet-exposed industrial VNC access

The October 29, 2026 analysis identifies direct internet-facing VNC sessions as a path to operator-level control of industrial processes.

Because false, missed, or suppressed commands can affect refrigeration, pumps, ventilation, or treatment equipment, discovery of the exposure—not a calendar deadline—is the trigger for immediate local supervision, verification, evidence preservation, and safe containment.

The reported history of physical effects remains unverified in this packet and is not required to justify the response.

This applies to industrial deployments where VNC exposes operator consoles or HMIs directly to the internet, including water, refrigeration, ventilation, pumping, and treatment processes.

Operators face the risk of unauthorized or suppressed commands affecting process control. Personnel supervising refrigeration, pumps, ventilation, and treatment equipment face the consequence of equipment being tripped or an unsafe process continuing.

Network and remote-access administrators must remove the exposure without interrupting control communications and replace it with brokered access. No VNC vendor, product, or version boundary is supplied, so applicability is determined by the direct-exposure configuration rather than a named version.

Support — Sara Kovacs’s October 29, 2026 industrial-control analysis identifies unauthorized operator-level control as the immediate safety risk.

It states that a false command can trip refrigeration, pumps, ventilation, or treatment equipment, while a missed or suppressed command can leave an unsafe process running.

Support — The supporting evidence assessment confirms that the cited analysis directly recommends a safety incident posture, increased local monitoring, evidence preservation, removal of direct VNC exposure without disrupting control communications, and replacement with monitored remote access using strong authentication and named accounts.

Evidence gap — A separate assessment finds that claims about reported physical damage and process disturbances are attributed to government sources but cannot be independently checked from this packet because those publications are not attached.

That gap limits the historical claims, not the independently stated operational response.

The decision scout identified direct internet-facing VNC access to industrial operator consoles as an operational safety question and proposed local supervision, process verification, evidence preservation, careful containment, and brokered remote access.

The record linker found no prior Decision Record to update. One evidence assessment supported that response directly; another found that reported physical damage and process disturbances lacked the underlying authoritative publications.

The boundary review found the operational guidance public-safe because it includes safeguards against disrupting control communications.

The arbiter resolved the evidence limitation by treating the historical impact claims as supplemental rather than necessary and selected a new operational Decision Record.