PLCs Archives - Cyber Security Minute

Pro-Iran Attackers Access Multiple Water Facility Controllers

Issued by: Dark Reading

Critical infrastructure in multiple US states may have been compromised by Iran-affiliated attackers targeting programmable logic controllers (PLCs). A warning from the FBI, Cybersecurity and Infrastructure Security Agency (CISA), National Security Agency (NSA), the Environmental Protection Agency (EPA), and the Israel National Cyber Directorate comes after an attack was detected on a Pennsylvania water authority…

Vulnerabilities

Weaponized PLCs Can Hack Engineering Workstations in Attacks on Industrial Orgs

Issued by: Security Week

PLCs can be a tempting target for threat actors as they can be abused to cause damage and disruption, and to make changes to the processes they control. This is why they are often seen as the ultimate goal of an attacker. However, researchers at industrial cybersecurity firm Claroty wanted to show that PLCs can…

Vulnerabilities

Newly Disclosed Vulnerability Allows Remote Hacking of Siemens PLCs

Issued by: Security Week

The vulnerability is tracked as CVE-2020-15782 and it has been described as a high-severity memory protection bypass issue that allows an attacker with network access to TCP port 102 to write or read data in protected memory areas. Siemens PLCs can be hacked remotely via new vulnerabilitySiemens says the security hole impacts its SIMATIC S7-1200…

Malware & Threats

Simulation Shows Threat of Ransomware Attacks on ICS

Issued by: Security Week

Researchers at the Georgia Institute of Technology have demonstrated the potential impact of ransomware on industrial control systems (ICS) by simulating an attack aimed at a water treatment plant. David Formby, a Ph.D. student in the Georgia Tech School of Electrical and Computer Engineering, and his faculty advisor, Raheem Beyah, identified several commonly used programmable…