𝗟𝗶𝘃𝗲 𝗦𝗖𝗔𝗗𝗔 𝗘𝘅𝗽𝗹𝗼𝗶𝘁𝗮𝘁𝗶𝗼𝗻 𝗗𝗲𝗺𝗼 𝗮𝘁 𝗦𝗔𝗡𝗦 𝗜𝗖𝗦 𝗦𝗲𝗰𝘂𝗿𝗶𝘁𝘆 𝗦𝘂𝗺𝗺𝗶𝘁 𝟮𝟬𝟮𝟲, 𝗢𝗿𝗹𝗮𝗻𝗱𝗼

Armexa is proud to be presenting at the SANS ICS Security Summit 2026, one of the largest gatherings of ICS/OT security professionals in the world. Eric Forner, PE is CTO at Armexa, where he leads technical strategy across OT cybersecurity assessments, architecture reviews, and industrial risk management engagements spanning oil & gas, chemicals, and critical infrastructure.

Out of Control II: Abusing MQTT and Sparkplug B for Distributed Kinetic Attacks

This presentation pulls back the curtain on how a protocol meant to simplify industrial data can instead become a powerful weapon in the wrong hands.

This talk breaks down how Sparkplug B’s structure, shared namespaces, and centralized broker model can be twisted to inject false data, impersonate devices, and quietly seize influence over IIoT and industrial systems. Attendees will see, live, how manipulating state messages and control paths can ripple all the way to industrial environments, turning a “friendly” protocol into a very real threat to critical infrastructure.

Tuesday June 9th – 09:40AM – 10:15AM EDT

Presented by

Eric Forner – CTO at Armexa

and

Marco Ayala – ABS Consulting, Director at Cybersecurity Center of Excellence