VPNFilter Attack Hits Chlorine Plant in Ukraine

Ukraine’s internal security agency, the SBU, reports blocking a VPNFilter attack against a plant that produces liquid chlorine used for treating the water supply in the country. The SBU has not provided technical details about the attack, but sa… Continue reading VPNFilter Attack Hits Chlorine Plant in Ukraine

New Document Attack Exploits Design Behavior Rather than Macros

Malicious Microsoft Word documents sent via email are a hacker favorite when it comes to infecting computers, but researchers have recently observed an attack campaign that uses first-stage docs without any active malicious code. Instead of using macr… Continue reading New Document Attack Exploits Design Behavior Rather than Macros

Programs Controlling ICS Robotics Are ‘Wide Open’ to Vulnerabilities

Dewan Chowdhury, founder of MalCrawler, talks at SAS about the risks that companies face when securing their industrial control systems and robotics. Continue reading Programs Controlling ICS Robotics Are ‘Wide Open’ to Vulnerabilities

Adobe Confirms Unpatched Flash Player Vulnerability Used in Attacks

Adobe Systems has confirmed that attackers are in possession of an exploit for a critical zero-day vulnerability in Flash Player that will be patched over the coming days. News of the flaw first came Jan. 31 in an alert from the South Korean Computer E… Continue reading Adobe Confirms Unpatched Flash Player Vulnerability Used in Attacks

Triton Malware Exploited Zero-Day Flaw in Schneider Electric Safety Controllers

Schneider Electric has confirmed that a recently uncovered malware program that was used to attack industrial infrastructure exploited a vulnerability in its Triconex safety controllers. The malware, dubbed Triton, was uncovered in December by research… Continue reading Triton Malware Exploited Zero-Day Flaw in Schneider Electric Safety Controllers

Triton Malware Exploited Zero-Day Flaw in Schneider Electric Safety Controllers

Schneider Electric has confirmed that a recently uncovered malware program that was used to attack industrial infrastructure exploited a vulnerability in its Triconex safety controllers. The malware, dubbed Triton, was uncovered in December by research… Continue reading Triton Malware Exploited Zero-Day Flaw in Schneider Electric Safety Controllers

Dangerous Malware Discovered that Can Take Down Electric Power Grids

Last December, a cyber attack on Ukrainian Electric power grid caused the power outage in the northern part of Kiev — the country’s capital — and surrounding areas, causing a blackout for tens of thousands of citizens for an hour and fifteen minutes around midnight.

Now, security researchers have discovered the culprit behind those cyber attacks on the Ukrainian industrial control systems.

Continue reading Dangerous Malware Discovered that Can Take Down Electric Power Grids