Stuxnet was a piece of malicious software that spread across the globe through Microsoft machines, causing unexpected system crashes and restarts. In 2010, cybersecurity companies managed to obtain and began examining the worm. The name Stuxnet came from combining two random lines within its programming, and it included digital certificates—something that typically requires biometric data and passcodes for verification. Remarkably, Stuxnet bypassed these security measures, incorporating several previously unknown vulnerabilities. Researchers at Symantec usually encounter one of these exploits annually while reviewing thousands of code lines; Stuxnet contained four. As the documentary reveals, it also possessed stolen product identification codes from Siemens programmable logic controllers. These PLCs were installed on centrifuges located at a nuclear facility in Natanz, Iran. The mystery then deepens: who created this program, and what was its intended goal? Charles Gibney does a commendable job of preparing viewers for the complex technology, using Eric Chien and Liam O’Murchu (of Symantec) as knowledgeable guides to explain state-sponsored cyber espionage—a world that former CIA and NSA director General Michael Hayden describes as "hideously classified" and involving cyber weaponry. We are introduced to reporters, secondary characters, and government officials who were either uninvolved in or unaware of Stuxnet’s existence. The documentary functions as a measured, engaging, yet serious prompt to initiate discussions about cyber weapons and their deployment. A key question arises: how can nations begin establishing agreements concerning the use of potentially lethal code? The film is technically proficient; the visual effects used to protect the identity of an unnamed source are particularly effective. The individuals appearing on camera are well-selected, engaging, and provide as much information as they can. There’s a sufficient amount of technical jargon to hold my attention, alongside explanations of how dangerous coding designed to disrupt, damage, or destroy can be for those who rely on vital infrastructure systems.

Source on TMDB