Big hacks like the 2015 Ukraine power outage and the 2017 shutdown of a Saudi petrochemical plant still inspire red teams today.

At least 150 vendors are affected, but Forescout said it's hard to know for sure how many more.

The findings point to “a wider culture that favors shortcuts over security in the manufacturing process," one researcher said.

An estimated 1 billion devices are affected.

Commissioners voted 5-0 to approve the settlement.

Patches are available for both vulnerabilities, and hackers would need physical access in both cases to carry out an attack.