Industrial control systems are still vulnerable to malicious cyberattacks

guest · Jan 28, 2019

Industrial control systems are still vulnerable to malicious cyberattacks
January 28, 2019
https://www.technologyreview.com/s/...e-still-vulnerable-to-malicious-cyberattacks/

Despite high-profile hacking incidents, many systems are still sending unprotected data across the internet, according to a new study.

Anyone can scan internet traffic for these kinds of packets, look at where they are headed, and then send their own commands to take control.
And that is exactly how many of the earliest attacks occurred. Hackers could dial into industrial control systems using a telephone modem and either take control of or disable them.

Instead, the main approach is to package the commands within another layer of software that is protected with conventional encryption, passwords, and so on. This prevents both unauthorized access to industrial control systems and eavesdropping on communication over the internet.
But does everyone use it? [...]
Click to expand...

Ref: arxiv.org/abs/1901.04411 : Uncovering Vulnerable Industrial Control Systems from the Internet Core
Click to expand...

guest · Jan 22, 2020

Design Weaknesses Expose Industrial Systems to Damaging Attacks
Hackers Can Cause Damage to Industrial Systems by Abusing Design Weaknesses
January 21, 2020
https://www.securityweek.com/hackers-can-cause-damage-industrial-systems-abusing-design-weaknesses

An analysis of industrial control systems (ICS) has shown that many products contain features and functions that have been designed with no security in mind, allowing malicious hackers to abuse them and potentially cause serious damage.

PAS, which provides industrial cybersecurity and operations management solutions, has analyzed data collected over the past year from over 10,000 industrial endpoints housed by organizations in the oil and gas, refining and chemicals, power generation, pulp and paper, and mining sectors.
On the 10,000 industrial endpoints it has analyzed, PAS discovered a total of more than 380,000 known vulnerabilities, a majority impacting software made by Microsoft.

PAS has identified two types of issues: ubiquitous weaknesses, which affect a wide range of products, and unique weaknesses, which are specific to one product.
Click to expand...

Log in or Sign up

Industrial control systems are still vulnerable to malicious cyberattacks

guest Guest

guest Guest

Log in or Sign up

Industrial control systems are still vulnerable to malicious cyberattacks

guest Guest

guest Guest

Useful Searches