hacker
One who uses a computer to gain unauthorized access to data stored in, or to carry out malicious attacks on, computer networks or computer systems.
hacker: unauthorized network intruder, malicious or exploratory
In electrical engineering and systems work, a hacker is someone who exploits vulnerabilities in computer networks, control systems, or embedded devices to gain access without authorization. Unlike the popular definition, the term in industrial contexts usually refers to an adversary with technical skill who can penetrate firewalls, bypass authentication, inject malicious code, or exfiltrate data. The distinction matters: a hacker differs from a legitimate penetration tester who operates under contract with explicit permission and defined scope.
Hackers target industrial control systems, SCADA networks, PLCs, and networked instrumentation because these systems often run legacy firmware with known vulnerabilities and minimal encryption. A hacker might gain shell access to a distributed control system, modify sensor readings, alter setpoint logic, or lock out operators. In power generation, water treatment, and manufacturing, such intrusions can have physical consequences: equipment damage, safety hazards, or production loss. The barrier to entry is lower than many assume; publicly disclosed CVEs, credential stuffing, and social engineering provide entry points even for moderately skilled adversaries.
The word hacker originates from 1960s MIT computing culture, where it meant someone clever enough to modify code or hardware in unintended ways. That neutral sense survives in some technical circles, but industrial security and management now use hacker almost exclusively to mean threat actor or attacker. The older usage appears mainly in academic contexts or in retrospective technology history.
Industrial sites defend against hackers through network segmentation, air-gapping critical systems, enforcing strong authentication, patching firmware promptly, and monitoring for anomalous traffic. Many breaches succeed not through sophisticated techniques but through unchanged default passwords, unpatched publicly known exploits, or phishing campaigns that compromise employee credentials. Electrical engineers and system integrators must assume that any networked device is a potential attack surface and design accordingly.