Dark Reading is part of the Informa Tech Division of Informa PLC

This site is operated by a business or businesses owned by Informa PLC and all copyright resides with them.Informa PLC's registered office is 5 Howick Place, London SW1P 1WG. Registered in England and Wales. Number 8860726.

Comments
Anatomy Of A 'Cyber-Physical' Attack
Newest First  |  Oldest First  |  Threaded View
Kaytana22
Kaytana22,
User Rank: Apprentice
1/29/2015 | 1:03:58 PM
Hmmm
     It is only a matter of time really, the 'hacktivists' responsible are only going to get better at this. Sooner or later there is going to be a breach and things are going to get very messy. I was just talking to my husband about what would happen if they actually got into the system where they can cause a total shutdown or even an explosion of some kind. It always seems that no matter how good our system securities are, there is always someone out there that is better. I just hope we have the people to combat this threat and keep up on it, to keep people out of the places that we don't want them to be in.

-M. Cummings
SgS125
SgS125,
User Rank: Ninja
1/15/2015 | 3:45:33 PM
Wrench in the works
Reminds me of engineers talking about how they had to add bullet proof steel to electrical transformers because hill billys kept shooting holes in them with high power rifles.  Where there is a will.......

 

Or when striking workers at the meat packing plant simply cut the conveyor belts and left the plant.

 

Always a risk no matter where the "attack" comes from.
Marilyn Cohodas
Marilyn Cohodas,
User Rank: Strategist
1/15/2015 | 12:10:39 PM
Re: Interesting
The physical barrier is significant. But it does make social engineering a much more serious risk..
Whoopty
Whoopty,
User Rank: Ninja
1/15/2015 | 10:45:52 AM
Interesting
It's very interesting to see that some of the stuff that science-fiction warned us about hackers, is potentially possible as hardware becomes smarter and more connected than ever before.

However, here's hoping that the world catches up to taking security seriously enough that only the most determined - and therefore potentially the most likely culprits - will be able to achieve some of the physical barrier crossings that you described. 


Edge-DRsplash-10-edge-articles
I Smell a RAT! New Cybersecurity Threats for the Crypto Industry
David Trepp, Partner, IT Assurance with accounting and advisory firm BPM LLP,  7/9/2021
News
Attacks on Kaseya Servers Led to Ransomware in Less Than 2 Hours
Robert Lemos, Contributing Writer,  7/7/2021
Commentary
It's in the Game (but It Shouldn't Be)
Tal Memran, Cybersecurity Expert, CYE,  7/9/2021
Register for Dark Reading Newsletters
White Papers
Video
Cartoon
Current Issue
Improving Enterprise Cybersecurity With XDR
Enterprises are looking at eXtended Detection and Response technologies to improve their abilities to detect, and respond to, threats. While endpoint detection and response is not new to enterprise security, organizations have to improve network visibility, expand data collection and expand threat hunting capabilites if they want their XDR deployments to succeed. This issue of Tech Insights also includes: a market overview for XDR from Omdia, questions to ask before deploying XDR, and an XDR primer.
Flash Poll
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2022-2316
PUBLISHED: 2022-07-06
HTML injection vulnerability in secure messages of Devolutions Server before 2022.2 allows attackers to alter the rendering of the page or redirect a user to another site.
CVE-2022-2318
PUBLISHED: 2022-07-06
There are use-after-free vulnerabilities caused by timer handler in net/rose/rose_timer.c of linux that allow attackers to crash linux kernel without any privileges.
CVE-2022-33047
PUBLISHED: 2022-07-06
OTFCC v0.10.4 was discovered to contain a heap buffer overflow after free via otfccbuild.c.
CVE-2022-31111
PUBLISHED: 2022-07-06
Frontier is Substrate's Ethereum compatibility layer. In affected versions the truncation done when converting between EVM balance type and Substrate balance type was incorrectly implemented. This leads to possible discrepancy between appeared EVM transfer value and actual Substrate value transferre...
CVE-2022-31124
PUBLISHED: 2022-07-06
openssh_key_parser is an open source Python package providing utilities to parse and pack OpenSSH private and public key files. In versions prior to 0.0.6 if a field of a key is shorter than it is declared to be, the parser raises an error with a message containing the raw field value. An attacker a...