Dark Reading is part of the Informa Tech Division of Informa PLC

This site is operated by a business or businesses owned by Informa PLC and all copyright resides with them.Informa PLC's registered office is 5 Howick Place, London SW1P 1WG. Registered in England and Wales. Number 8860726.


02:02 PM
Connect Directly

U.S. Electrical Grid Breached By Cyber Spies

The intrusions were detected by U.S. intelligence agencies. In November, a congressional advisory committee warned that Chinese cyberattacks were increasing.

Cyberspies from China, Russia, and elsewhere around the globe have breached the U.S. electrical grid and installed backdoor software that could lead to future damage, The Wall Street Journal reported Wednesday.

"The Chinese have attempted to map our infrastructure, such as the electrical grid," an unidentified senior intelligence official told the Journal. "So have the Russians."

The report is uncharacteristic in its specificity: Incidents of cyberespionage can often be traced to a specific country, but definitively stating that those involved are acting on behalf of a foreign government is rare because cyberattacks usually come through proxies or compromised systems.

The Journal states that many of the intrusions were not detected by the companies operating the compromised infrastructure, but by U.S. intelligence agencies, which presumably have tools at their disposal to more accurately identify those conducting attacks.

Chinese and Russian officials denied any wrongdoing.

The idea that cyberspies are running rampant on U.S. networks and critical infrastructure is not new. In November, a congressional advisory committee warned that Chinese cyberattacks on civilian, government, and military networks were increasing.

"China is targeting U.S. government and commercial computers for espionage," said the U.S.-China Economic and Security Review Commission's (USCC) 2008 Annual Report to Congress.

The USCC report stated that Alan Paller, research director at the SANS Institute, believes that in 2007 the unclassified networks of the 10 most prominent U.S. defense contractors, including Raytheon, Lockheed Martin, Boeing, and Northrop Grumman, were penetrated by cyberspies.

The 2007 USCC report summary offered a similar warning: "Chinese espionage activities in the United States are so extensive that they comprise the single greatest risk to the security of American technologies."

In early 2008, CIA senior analyst Tom Donahue confirmed that online attackers had caused at least one blackout in a city outside the United States.

1 of 2
Comment  | 
Print  | 
More Insights
Newest First  |  Oldest First  |  Threaded View
Navigating Security in the Cloud
Diya Jolly, Chief Product Officer, Okta,  12/4/2019
Register for Dark Reading Newsletters
White Papers
Cartoon Contest
Current Issue
Navigating the Deluge of Security Data
In this Tech Digest, Dark Reading shares the experiences of some top security practitioners as they navigate volumes of security data. We examine some examples of how enterprises can cull this data to find the clues they need.
Flash Poll
Rethinking Enterprise Data Defense
Rethinking Enterprise Data Defense
Frustrated with recurring intrusions and breaches, cybersecurity professionals are questioning some of the industrys conventional wisdom. Heres a look at what theyre thinking about.
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
PUBLISHED: 2019-12-06
domain/section/markdown/markdown.go in Documize before 3.5.1 mishandles untrusted Markdown content. This was addressed by adding the bluemonday HTML sanitizer to defend against XSS.
PUBLISHED: 2019-12-06
An Insecure Direct Object Reference (IDOR) vulnerability in the Xtivia Web Time and Expense (WebTE) interface used for Microsoft Dynamics NAV before 2017 allows an attacker to download arbitrary files by specifying arbitrary values for the recId and filename parameters of the /Home/GetAttachment fun...
PUBLISHED: 2019-12-06
phpMyAdmin before 4.9.2 does not escape certain Git information, related to libraries/classes/Display/GitRevision.php and libraries/classes/Footer.php.
PUBLISHED: 2019-12-05
A Cross-Site Scripting (XSS) vulnerability exists in LDAP Account Manager (LAM) Pro 3.6 in the filter parameter to cmd.php in an export and exporter_id action. and the filteruid parameter to list.php.
PUBLISHED: 2019-12-05
A Cross-Site Scripting (XSS) vulnerability exists in LDAP Account Manager (LAM) Pro 3.6 in the export, add_value_form, and dn parameters to cmd.php.