Pen Test Partners says ship rules never test onboard IT, and nine years of shipping ransomware has yet to be confirmed on a vessel's own computers. Fleets moving to a single Windows domain can lose every ship's IT to one intrusion.
Reality
- Evidence45
- Adoption
- Insufficient
- Hype gap+15
- Incentives65
- Confidence40
A consultancy's Red Dwarf tribute runs a local speech-to-speech model on a spare laptop. The capture-the-flag game built on top of it only worked once the secret sat in Python instead of the system prompt.
Reality
- Evidence40
- Adoption10
- Hype gap+10
- Incentives55
- Confidence55
Pen Test Partners demoed a passback attack on an unauthenticated printer interface: change the LDAP host, force a lookup, and the device sends its own bind password in cleartext. Every mitigation listed is configuration.
Reality
- Evidence45
- Adoption
- Insufficient
- Hype gap+10
- Incentives60
- Confidence55
The firm's argument is that ubiquitous TLS moved the risk off the wire and onto patch state, fake login pages and certificate warnings people click through. That is where the training hour should go.
Reality
- Evidence58
- Adoption
- Insufficient
- Hype gap+12
- Incentives38
- Confidence61
Pen Test Partners recovered a family's locked encrypted Excel file in under a minute once relatives recalled the password format. The hygiene was right; the handover did not exist.
Reality
- Evidence46
- Adoption19
- Hype gap+12
- Incentives62
- Confidence54
Pen Test Partners says the battery maker declined to fix exposed older installs and did not act when the UK regulator asked. On 9 April 2026 it entered administration.
Reality
- Evidence44
- Adoption28
- Hype gap+16
- Incentives68
- Confidence52