Authors: Xeno Kovah, Corey Kallenberg, John Butterworth amd Sam Cornwell - The MITRE CorporationPresentation Overview: http://conference.hitb.org/hitbsecconf2014kul/sessions/watching-the-watcher-... read more
Featured Slideshow
SCADA
Revealed: new ways to hack critical infrastructure
Submitted by l33tdawg on Fri, 2013-07-26 09:52
Cybersecurity researchers next week will demonstrate how hackers can potentially wreak havoc on critical US infrastructure, even causing explosions by altering the readings on wireless sensors used by the oil and gas industry.
The presentations at the Black Hat conference beginning in Las Vegas on Wednesday will show how key industries remain vulnerable to cyber attacks, in part because companies are reluctant to replace expensive equipment or install new safeguards unless ordered to do so by regulators or offered economic incentives, experts say.
SCADA Honeypots Lure Industrial Hackers Into the Open
Submitted by l33tdawg on Wed, 2013-07-10 01:19
Just 18 hours after security researcher Kyle Wilhoit connected two dummy industrial control systems and one real one to the Internet, someone began attacking one of them, and things soon got worse. Over the course of the experiment, conducted during December 2012, a series of sophisticated attacks were mounted on the “honeypots,” which Wilhoit set up to find out how often malicious hackers target industrial infrastructure.
Vulnerability Lets Hackers Control Building Locks, Electricity, Elevators and More
Submitted by l33tdawg on Wed, 2013-02-06 19:59
A critical vulnerability discovered in an industrial control system used widely by the military, hospitals and others would allow attackers to remotely control electronic door locks, lighting systems, elevators, electricity and boiler systems, video surveillance cameras, alarms and other critical building facilities, say two security researchers.
Researcher finds over 20 vulnerabilities in SCADA software
Submitted by l33tdawg on Mon, 2012-11-26 23:40
A security researcher claims that he found 23 vulnerabilities in industrial control software from several vendors after a different security company last week showcased vulnerabilities in applications from some of the same manufacturers, but chose not to report them.
Cybergeddon now? Industrial control systems targeted
Submitted by l33tdawg on Mon, 2012-10-29 05:01
Security researcher Reid Wightman from the firm ioActive has found an undocumented back door in CoDeSys, the management software used by 261 different manufacturers of ICS devices. The back door gives full access without requiring authentication and has prompted the US Department of Homeland Security's ICS-CERT to issue an alert (PDF).