Dark Reading is part of the Informa Tech Division of Informa PLC

This site is operated by a business or businesses owned by Informa PLC and all copyright resides with them.Informa PLC's registered office is 5 Howick Place, London SW1P 1WG. Registered in England and Wales. Number 8860726.

Comments
The Industrial Cyber Myth: Its No Fantasy
Newest First  |  Oldest First  |  Threaded View
Page 1 / 2   >   >>
hojtfredrik
50%
50%
hojtfredrik,
User Rank: Apprentice
1/12/2016 | 6:06:41 AM
Ransomware
One thing is the actual incidents, another thing is the unknown extortion demands that don't reach the media. Even if an attacker "just" show that they can enter and read data doesn't mean that the financial harm can't be substantial. Today, everyone is (or should be) aware of the damage leaked emails can do, for instance highlighted by the Sony Entertainment hack. How much will anyone willingly pay to avoid that? And how much would someone pay to avoid a factory break down like the German incident?
PaulFerrillo
50%
50%
PaulFerrillo,
User Rank: Apprentice
1/3/2016 | 7:04:36 PM
Re: Best Practices
Like IoT device, cannot ICS and SCADA systems be red-teamed to death in order to discover critical vulnerabilities that might exist? Before someone takes advantage of them.  ICS devices are here to stay.  Its what we do with them and how we monitor and assess their cybersecurity and vulnerability that matters.
RyanSepe
50%
50%
RyanSepe,
User Rank: Ninja
12/30/2015 | 10:43:10 AM
Re: Best Practices
I agree with deep monitoring and defense in depth but new malware has evolved to the point where there are layers and layers of obfuscation. Making malware very transparent in most cases. IE: GlassRAT
Dr.T
50%
50%
Dr.T,
User Rank: Ninja
12/30/2015 | 10:37:32 AM
Re: Source and motive
"... a government source/backer, then the information wouldn't surface on the black market ..."

I hear you. You never know, the governments may expose it into black market if it targets specific countries. :--)))
RyanSepe
50%
50%
RyanSepe,
User Rank: Ninja
12/30/2015 | 10:36:44 AM
Re: England Rugby Team 2016
Seems to be the case.
Dr.T
50%
50%
Dr.T,
User Rank: Ninja
12/30/2015 | 10:34:54 AM
Re: England Rugby Team 2016
What is the point. Another advertisement? 
Dr.T
50%
50%
Dr.T,
User Rank: Ninja
12/30/2015 | 10:32:45 AM
Re: Best Practices
"... specific security safeguards and best practices..."

I think it starts with a deep monitoring of your environment and doing analytics on the logs. I doubt that there would be a specific safeguard that can help, it should be levels of countermeasures.
Dr.T
50%
50%
Dr.T,
User Rank: Ninja
12/30/2015 | 10:29:23 AM
Pharmaceuticals?
It makes sense that being the target. Any piece of information could be used in many different ways as long as it relates to pharmaceuticals. Clinical trials and other things have high rate of ROI.
Joe Stanganelli
50%
50%
Joe Stanganelli,
User Rank: Ninja
12/28/2015 | 12:49:02 PM
Source and motive
It really depends upon who is behind the attacks.  If Dragonfly, for instance, had a government source/backer, then the information wouldn't surface on the black market because it's not being used for immediate monetary gain -- and one can speculate as to whether or not that makes one feel better or worse about the breach of their information.
MuhammadA222
50%
50%
MuhammadA222,
User Rank: Apprentice
12/22/2015 | 2:21:28 PM
England Rugby Team 2016
Getting back to Dragonfly, it seemed harmless enough: it only scanned the control system, collecting data about the process including assets and parameters. 

 


<a href="https://www.youtube.com/watch?v=4wZAoybB1_Q">England Rugby Team 2016</a>
Page 1 / 2   >   >>


COVID-19: Latest Security News & Commentary
Dark Reading Staff 8/14/2020
Lock-Pickers Face an Uncertain Future Online
Seth Rosenblatt, Contributing Writer,  8/10/2020
Hacking It as a CISO: Advice for Security Leadership
Kelly Sheridan, Staff Editor, Dark Reading,  8/10/2020
Register for Dark Reading Newsletters
White Papers
Video
Cartoon
Current Issue
7 New Cybersecurity Vulnerabilities That Could Put Your Enterprise at Risk
In this Dark Reading Tech Digest, we look at the ways security researchers and ethical hackers find critical vulnerabilities and offer insights into how you can fix them before attackers can exploit them.
Flash Poll
The Changing Face of Threat Intelligence
The Changing Face of Threat Intelligence
This special report takes a look at how enterprises are using threat intelligence, as well as emerging best practices for integrating threat intel into security operations and incident response. Download it today!
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2020-17475
PUBLISHED: 2020-08-14
Lack of authentication in the network relays used in MEGVII Koala 2.9.1-c3s allows attackers to grant physical access to anyone by sending packet data to UDP port 5000.
CVE-2020-0255
PUBLISHED: 2020-08-14
** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2020-10751. Reason: This candidate is a duplicate of CVE-2020-10751. Notes: All CVE users should reference CVE-2020-10751 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidenta...
CVE-2020-14353
PUBLISHED: 2020-08-14
** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2017-18270. Reason: This candidate is a duplicate of CVE-2017-18270. Notes: All CVE users should reference CVE-2017-18270 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidenta...
CVE-2020-17464
PUBLISHED: 2020-08-14
** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none.
CVE-2020-17473
PUBLISHED: 2020-08-14
Lack of mutual authentication in ZKTeco FaceDepot 7B 1.0.213 and ZKBiosecurity Server 1.0.0_20190723 allows an attacker to obtain a long-lasting token by impersonating the server.