2024 Home Sweet Home Automation: A DIY SCADA smart home

A DIY DIN rail mounted rack of PLC components for home automation

Supervisory control and data acquisition, or SCADA, systems sit in the background in industrial settings, performing all kinds of important jobs but in an ad-hoc setup, depending on the precise …read more Continue reading 2024 Home Sweet Home Automation: A DIY SCADA smart home

Web-based PLC malware: A new potential threat to critical infrastructure

A group of researchers from Georgia Tech’s College of Engineering have developed web-based programmable logic controller (PLC) malware able to target most PLCs produced by major manufacturers. “Our Web-Based (WB) PLC malware resides in PLC … Continue reading Web-based PLC malware: A new potential threat to critical infrastructure

Remote Stuxnet-Style Attack Possible With Web-Based PLC Malware: Researchers

Researchers demonstrate that remote Stuxnet-style attacks are possible against many modern PLCs using web-based malware.
The post Remote Stuxnet-Style Attack Possible With Web-Based PLC Malware: Researchers appeared first on SecurityWeek.
Continue reading Remote Stuxnet-Style Attack Possible With Web-Based PLC Malware: Researchers

CyberAv3ngers hit Unitronics PLCs at multiple US-based water facilities

Iran-affiliated attackers CyberAv3ngers continue to exploit vulnerable Unitronics programmable logic controllers (PLCs), US and Israeli authorities have said in a joint cybersecurity advisory. CyberAv3ngers targeting Unitronics PLCs CISA has recently c… Continue reading CyberAv3ngers hit Unitronics PLCs at multiple US-based water facilities

CISA urges water facilities to secure their Unitronics PLCs

News that Iran-affiliated attackers have taken over a programmable logic controller (PLC) at a water system facility in Pennsylvania has been followed by a public alert urging other water authorities to immediately secure their own PLCs. “The cyb… Continue reading CISA urges water facilities to secure their Unitronics PLCs

New Project Analyzes and Catalogs Vendor Support for Secure PLC Coding

A new project aims to make it easier for PLC programmers to implement secure coding practices by cataloging useful files and functions from each vendor.
The post New Project Analyzes and Catalogs Vendor Support for Secure PLC Coding appeared first on S… Continue reading New Project Analyzes and Catalogs Vendor Support for Secure PLC Coding

Critical Infrastructure Stakeholders Gather for Day 2 of SecurityWeek’s 2023 ICS Cybersecurity Conference

SecurityWeek’s 2023 ICS Cybersecurity Conference continues in Atlanta, as hundreds of industrial cybersecurity stakeholders gather for Day 2 of the annual industrial cybersecurity conference.
The post Critical Infrastructure Stakeholders Gather for Day… Continue reading Critical Infrastructure Stakeholders Gather for Day 2 of SecurityWeek’s 2023 ICS Cybersecurity Conference

Unnamed APT eyes vulnerabilities in Rockwell Automation industrial contollers (CVE-2023-3595 CVE-2023-3596)

Rockwell Automation has fixed two vulnerabilities (CVE-2023-3595, CVE-2023-3596) in the communication modules of its ControlLogix industrial programmable logic controllers (PLCs), ahead of expected (and likely) in-the-wild exploitation. “An unrel… Continue reading Unnamed APT eyes vulnerabilities in Rockwell Automation industrial contollers (CVE-2023-3595 CVE-2023-3596)