ICS vulnerabilities on the rise as attacks increase

guest · Aug 19, 2021

ICS vulnerabilities on the rise as attacks increase
August 18, 2021
https://betanews.com/2021/08/18/ics-vulnerabilities-rise-attacks-increase/

Industrial control system (ICS) vulnerability disclosures are increasing as recent high-profile cyberattacks on critical infrastructure and industrial enterprises have made ICS security a mainstream issue.

The latest biannual ICS Risk & Vulnerability Report released today by Claroty shows a 41 percent increase in ICS vulnerabilities disclosed in the first half of 2021 compared to the previous six months, which is particularly significant given that in all of 2020 they increased by 25 percent from 2019 and 33 percent from 2018.

"As more enterprises are modernizing their industrial processes by connecting them to the cloud, they are also giving threat actors more ways to compromise industrial operations through ransomware and extortion attacks," says Amir Preminger, vice president of research at Claroty.
Click to expand...

The report also shows 71 percent of the vulnerabilities are classified as high or critical, reflecting their potential impact and risk to operations. 90 percent have low attack complexity, meaning they don't require special conditions and an attacker can expect repeatable success every time.
Click to expand...

Claroty: Claroty Biannual ICS Risk & Vulnerability Report: 1H 2021

Claroty’s third Biannual ICS Risk & Vulnerability Report offers an in-depth look at all ICS flaws disclosed in the first half of 2021, shedding light on emerging trends affecting how decision makers will tactically and strategically manage risk.
Click to expand...

guest · Jul 21, 2022

Hundreds of ICS Vulnerabilities Disclosed in First Half of 2022
July 21, 2022

SynSaber has counted 681 vulnerabilities disclosed by CISA, slightly more than in the first half of 2021. It’s worth noting that CISA does not publish advisories for all publicly disclosed ICS flaws, which means that the actual number of issues disclosed between January and June could be higher.

Approximately 13% of the 681 CVEs don’t have a patch and may never get fixed — these are called “forever day vulnerabilities.”
More than 22% of the vulnerabilities made public by CISA in H1 2022 have been assigned a “critical” severity rating and 42% have been rated “high severity” based on their CVSS score.
Click to expand...

An assessment by SynSaber shows that roughly 40% of vulnerabilities should be addressed immediately, and 8% cannot be easily addressed and likely require compensating controls to prevent exploitation.

“Merely looking at the sheer volume of reported CVEs may cause asset owners to feel overwhelmed, but the figures seem less daunting when we understand what percentage of CVEs are pertinent and actionable, vs. which will remain ‘forever-day vulnerabilities,’ at least for the time being,” SynSaber said in its report.
Click to expand...

SynSaber: ICS Vulnerabilities - SynSaber Analysis, First Half of 2022
(PDF): https://14520070.fs1.hubspotusercontent-na1.net/hubfs/14520070/Collateral/ICS-Vulnerabilities-CVEs_SynSaber-2022-H1-Report.pdf

With increased discussion around industrial control system (ICS) vulnerabilities, we at SynSaber wondered: What if we looked at reported Common Vulnerabilities and Exposures (CVEs) from a different perspective. What questions could be answered from the 681 CVEs reported via the Cybersecurity and Infrastructure Security Agency (CISA) ICS Advisories in the first half of 2022?
Click to expand...

Log in or Sign up

ICS vulnerabilities on the rise as attacks increase

guest Guest

guest Guest

Log in or Sign up

ICS vulnerabilities on the rise as attacks increase

guest Guest

guest Guest

Useful Searches