Dark Reading is part of the Informa Tech Division of Informa PLC

This site is operated by a business or businesses owned by Informa PLC and all copyright resides with them.Informa PLC's registered office is 5 Howick Place, London SW1P 1WG. Registered in England and Wales. Number 8860726.

Database Security
Authentication
Mobile
Privacy
Compliance
Careers and People
Identity & Access Management
Security Monitoring
Advanced Threats
Insider Threats
Vulnerability Management
Comments
How Hackers Can Hack The Oil & Gas Industry Via ERP Systems
Newest First  |  Oldest First  |  Threaded View
BarakPerelman
BarakPerelman,
 User Rank: Author
11/13/2015 | 6:37:09 AM
Vulns in ICS networks
Will be interesting to see what the exploits look like, and in any case higher awareness about the risks in ICS networks is always good.

That being said, there's always going to be an exploitable software piece in the network. If not Windows then SAP, is not SAP then OSISoft. The inherent problem in these networks is the total lack of protection and logging in the controllers themselves. This creates a situation where any type of access to the network (malware, employees...) immediately poses a potentially devestating non-tracable threat.

My two cents anyway..
Helpthepeeps724
Helpthepeeps724,
 User Rank: Apprentice
10/30/2015 | 2:57:17 PM
Electronic Speed Traps
Please people work on hacking the legal scamming companies that take the picture of a car and send a ticket in the mail.

https://www.onlinecitationpayment.com/auth/login.do

 

Hack their PII so that the municipalities complicit in this scam get sued along with them....hence no more electronic speeding cams!
MartinL703
MartinL703,
 User Rank: Apprentice
10/30/2015 | 9:48:19 AM
Really?
Well I'll be interested to see this.  BOPs connected to ERP?  There may be some weaknesses in deployment of the integration of PCN and Enterprise Networks that would expose weaknesses but it is a fundamental principle of Process Control that you cannot penetrate the control elements of the system.  Looking forward to being proven wrong!


Edge-DRsplash-10-edge-articles
I Smell a RAT! New Cybersecurity Threats for the Crypto Industry
David Trepp, Partner, IT Assurance with accounting and advisory firm BPM LLP,  7/9/2021
News
Attacks on Kaseya Servers Led to Ransomware in Less Than 2 Hours
Robert Lemos, Contributing Writer,  7/7/2021
Commentary
It's in the Game (but It Shouldn't Be)
Tal Memran, Cybersecurity Expert, CYE,  7/9/2021
Register for Dark Reading Newsletters
White Papers
Video
Cartoon
Current Issue
The Promise and Reality of Cloud Security
Cloud security has been part of the cybersecurity conversation for years but has been on the sidelines for most enterprises. The shift to remote work during the COVID-19 pandemic and digital transformation projects have moved cloud infrastructure front-and-center as enterprises address the associated security risks. This report - a compilation of cutting-edge Black Hat research, in-depth Omdia analysis, and comprehensive Dark Reading reporting - explores how cloud security is rapidly evolving.
Flash Poll
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2022-43762
PUBLISHED: 2023-02-08
Lack of verification in B&R APROL Tbase server versions < R 4.2-07 may lead to memory leaks when receiving messages
CVE-2022-43763
PUBLISHED: 2023-02-08
Insufficient check of preconditions could lead to Denial of Service conditions when calling commands on the Tbase server of B&R APROL versions < R 4.2-07.
CVE-2022-43764
PUBLISHED: 2023-02-08
Insufficient validation of input parameters when changing configuration on Tbase server in B&R APROL versions < R 4.2-07 could result in buffer overflow. This may lead to Denial-of-Service conditions or execution of arbitrary code.
CVE-2022-43765
PUBLISHED: 2023-02-08
B&R APROL versions < R 4.2-07 doesn’t process correctly specially formatted data packages sent to port 55502/tcp, which may allow a network based attacker to cause an application Denial-of-Service.
CVE-2022-2094
PUBLISHED: 2023-02-08
The Yellow Yard Searchbar WordPress plugin before 2.8.2 does not escape some URL parameters before outputting them back to the user, leading to Reflected Cross-Site Scripting