#industrialcontrolsystems — Public Fediverse posts
Live and recent posts from across the Fediverse tagged #industrialcontrolsystems, aggregated by home.social.
-
Ongoing PLC Exploitation Against Critical U.S. Infrastructure
Multiple federal agencies have updated a joint advisory warning of active exploitation targeting programmable logic controllers (PLCs) in U.S. critical infrastructure. Attackers scan for internet-exposed industrial control systems and connect using legitimate engineering software with valid credentials, appearing as authorized technicians. Once inside, they alter controller logic and manipulate operator displays to hide anomalies. The campaign has expanded beyond Rockwell Automation to include Schneider Electric and Siemens equipment. Unlike a similar 2023 campaign that caused minimal disruption, this ongoing activity has resulted in confirmed operational disruption and financial losses. Targeted sectors include government facilities, water systems, and energy infrastructure. The exploitation leverages architectural weaknesses rather than software vulnerabilities, with attackers accessing systems through ports 22, 102, 502, 2222, and 44818.
Pulse ID: 6a635bdde06bc9c9945e6c19
Pulse Link: https://otx.alienvault.com/pulse/6a635bdde06bc9c9945e6c19
Pulse Author: AlienVault
Created: 2026-07-24 12:34:37Be advised, this data is unverified and should be considered preliminary. Always do further verification.
#CyberSecurity #Government #IndustrialControlSystems #InfoSec #Nim #OTX #OpenThreatExchange #RAT #Troll #bot #AlienVault
-
US Warns of Iranian Hackers Targeting Exposed Industrial Controls
When devices that connect our physical and digital worlds are left exposed to the public internet, they become an open invitation for hackers - and Iranian-linked cybercriminals are now actively targeting Internet-exposed industrial control systems, specifically Rockwell/Allen-Bradley…
https://osintsights.com/us-warns-of-iranian-hackers-targeting-exposed-industrial-controls
#IndustrialControlSystems #ProgrammableLogicControllers #Rockwellallenbradley #Iran #UsCriticalInfrastructure
-
Record ICS vulnerabilities could leave critical infrastructure exposed #CyberSecurity #IndustrialControlSystems
https://betanews.com/article/record-ics-vulnerabilities-could-leave-critical-infrastructure-exposed/
-
ADC Aerospace Hit by Play Ransomware Attack and Data Breach https://dailydarkweb.net/adc-aerospace-hit-by-play-ransomware-attack-and-data-breach/ #IndustrialControlSystems #aerospacemanufacturing #sensitivedataleak #RansomwareNews #PlayRansomware #defensesector #ADCAerospace #UnitedStates #cyberattack #databreach #extortion
-
Riyadh Airports System Breach: Critical Control Panel and Data Accessed https://dailydarkweb.net/riyadh-airports-system-breach-critical-control-panel-and-data-accessed/ #IndustrialControlSystems #CriticalInfrastructure #AviationSecurity #RiyadhAirports #DataBreaches #cyber-attack #QatarAirways #SaudiArabia #databreach #VideoProof #Flynas #scada
-
Could your next software update hide a ticking time bomb? Malicious NuGet packages are now creeping into trusted code—targeting databases and industrial systems with stealthy triggers that only go off on a specific date. How safe is your code, really?
#nugetsecurity
#softwaresupplychain
#malwareanalysis
#industrialcontrolsystems
#csharpextensionmethods -
Hacktivist ICS Attacks Target Canadian Critical Infrastructure https://thecyberexpress.com/hacktivist-ics-attacks-canada/ #IndustrialControlSystems #criticalinfrastructure #energysectorthreats #TheCyberExpressNews #TheCyberExpress #FirewallDaily #CyberThreats #cyberattacks #WaterSystems #Hacktivists #ICSAttacks #CyberNews #Canada #Russia
-
Global Exposure of 180,000 ICS/OT Devices Raises Safety Concerns https://hackread.com/180000-ics-ot-devices-safety-concerns/ #IndustrialControlSystems #OperationalTechnology #Cybersecurity #Vulnerability #CyberAttack #Technology #Security #ICS #IoT #OT
-
Innovator Spotlight: SwissBit – Source: www.cyberdefensemagazine.com https://ciso2ciso.com/innovator-spotlight-swissbit-source-www-cyberdefensemagazine-com/ #CriticalInfrastructureProtection #HardwareLevelCybersecurity #industrialcontrolsystems #rssfeedpostgeneratorecho #CertificateProvisioning #cyberdefensemagazine #MicroStorageSecurity #cyberdefensemagazine #ComplianceSolutions #SecureBootProcesses #cyberresilienceact #CyberSecurityNews #RansomwareDefense #SmartCitySecurity #DataImmutability
-
Threat landscape for industrial automation systems in Q1 2025 – Source: securelist.com https://ciso2ciso.com/threat-landscape-for-industrial-automation-systems-in-q1-2025-source-securelist-com/ #industrialcontrolsystems #rssfeedpostgeneratorecho #CyberSecurityNews #Industrialthreats #MalwareStatistics #securelistcom #Phishing #'Virus' #Malware #Spyware #Miner #worm
-
CISA Issues Urgent Security Alerts: Critical Vulnerabilities in Schneider Electric, Chrome, and Sitecore https://thecyberexpress.com/cisa-known-exploited-vulnerabilities-catalog-4/ #KnownExploitedVulnerabilitiesCatalog #IndustrialControlSystems #TheCyberExpressNews #Vulnerabilities #TheCyberExpress #FirewallDaily #CVE20199874 #CVE20199875 #CVE20249005 #CVE20252783 #ICSA2503701 #CyberNews #ICS
-
Threat landscape for industrial automation systems in Q4 2024 – Source: securelist.com https://ciso2ciso.com/threat-landscape-for-industrial-automation-systems-in-q4-2024-source-securelist-com/ #industrialcontrolsystems #rssfeedpostgeneratorecho #CyberSecurityNews #Industrialthreats #securelistcom #ransomware #backdoor #Phishing #'Virus' #Spyware #Trojan #Miner #worm
-
CISA Issues Nine Critical Industrial Control Systems Advisories, Addressing Vulnerabilities in Key Equipment https://cyble.com/blog/cisa-new-industrial-control-systems-advisories/ #IndustrialControlSystems #Vulnerability #CISA #ICS
-
🌐Securing Critical Infrastructure 🌐
Dive into the world of industrial control systems with @hacks4pancakes from @dragosinc. In this episode of the Breaking Badness Cybersecurity Podcast, discover the unique challenges and essential practices for securing our critical infrastructure. 🚧🔒
#CyberSecurity #IndustrialControlSystems #OTSecurity #Dragos
Listen wherever you get podcasts
Spotify: https://open.spotify.com/episode/5S8UINAbTA1XC4TvMZBBqT
YouTube: https://www.youtube.com/watch?v=S2f4MSQL7gg&ab_channel=DomainTools
-
Threat landscape for industrial automation systems in Q3 2024 – Source: securelist.com https://ciso2ciso.com/threat-landscape-for-industrial-automation-systems-in-q3-2024-source-securelist-com/ #industrialcontrolsystems #rssfeedpostgeneratorecho #CyberSecurityNews #Industrialthreats #MalwareStatistics #securelistcom #ransomware #'Virus' #Malware #Spyware #Miner #worm
-
Critical ICS Vulnerabilities Discovered in Schneider Electric, mySCADA, and Automated Logic Products https://thecyberexpress.com/ics-vulnerabilities-reported-this-week/ #IndustrialControlSystems #TheCyberExpressNews #ICSvulnerability #Vulnerabilities #TheCyberExpress #FirewallDaily #CVE202410575 #CVE202447407 #CVE20248525 #CyberNews #CISA
-
Critical Vulnerabilities Found in Siemens and Schneider Electric Products https://thecyberexpress.com/cyble-ics-vulnerability-report/ #CybersecurityandInfrastructureSecurityAgency #IndustrialControlSystems #ICSvulnerabilityreport #TheCyberExpressNews #Vulnerabilities #TheCyberExpress #FirewallDaily #CVE20243506 #CyberNews #CISA #ICS
-
High-Risk ICS Vulnerability Exposes ICONICS and Mitsubishi Electric Products to Data Breaches https://thecyberexpress.com/iconics-and-mitsubishi-electric-vulnerability/ #ICONICSandMitsubishiElectricVulnerability #IndustrialControlSystems #TheCyberExpressNews #Vulnerabilities #TheCyberExpress #FirewallDaily #Vulnerability #ICONICSSuite #ICSAdvisory #CyberNews #CISA
-
CISA Releases Six New Advisories For Industrial Control Systems https://cybersecuritynews.com/cisa-industrial-control-systems-advisories/ #IndustrialControlSystems(ICS) #VulnerabilityRoundup #CyberSecurityNews #cybersecuritynews #NetworkSecurity #CISAAdvisories #CyberSecurity #cybersecurity
-
Thousands Of Internet-Connected ICS Devices Exposes Critical Infrastructure To Cyber Attacks https://cybersecuritynews.com/internet-connected-ics-cyber-threats/ #IndustrialControlSystems #CriticalInfrastructure #CyberSecurityNews #NetworkSecurity #CyberSecurity #cybersecurity #CyberAttack
-
Russia-Linked FrostyGoop Malware Threatens Industrial Control Systems Worldwide https://thecyberexpress.com/russian-frostygoop-industrial-control-systems/ #IndustrialControlSystems #criticalinfrastructure #TheCyberExpressNews #ThreatIntelligence #CybersecurityNews #TheCyberExpress #FirewallDaily #FrostyGoop #malware #Modbus
-
New ICS Malware 'FrostyGoop' Targeting Critical Infrastructure
Date: July 23, 2024
CVE: N/A
Vulnerability Type: Exploitation of Modbus TCP communication
CWE: [[CWE-668]], [[CWE-20]], [[CWE-74]]
Sources: The Hacker News, Yahoo News, DragosSynopsis
FrostyGoop is a newly identified malware designed to target Industrial Control Systems (ICS) by exploiting Modbus TCP communication protocols. This malware caused significant disruption to critical infrastructure in Lviv, Ukraine, earlier this year.
Issue Summary
In January 2024, FrostyGoop malware targeted an energy company in Lviv, resulting in a 48-hour loss of heating services to over 600 apartment buildings. This malware interacts directly with ICS devices using Modbus TCP over port 502, making it a serious threat to critical infrastructure.
Technical Key Findings
FrostyGoop, written in Golang, can read and write to ICS device registers and uses JSON-formatted configuration files to target specific IP addresses and Modbus commands. Initial access was likely gained through a vulnerability in Mikrotik routers.
Vulnerable Products
ENCO controllers with TCP port 502 exposed and ICS devices using Modbus TCP are particularly vulnerable to this malware.
Impact Assessment
The malware's ability to manipulate ICS devices can lead to significant operational disruptions, inaccurate system measurements, and potential safety hazards, affecting public safety and industrial operations.
Patches or Workarounds
Currently, there are no specific patches available for FrostyGoop.
#FrostyGoop #ICS #ModbusTCP #CriticalInfrastructure #CyberAttack #EnergySector #Ukraine #Dragos #IndustrialControlSystems #Golang #MikrotikVulnerability
-
CISA Issues 20 Industrial Control Systems Advisories to Secure ICS Management https://thecyberexpress.com/cisa-industrial-control-systems-advisories/ #IndustrialControlSystems #TheCyberExpressNews #CybersecurityNews #TheCyberExpress #CISAadvisories #FirewallDaily #ICSadvisories
-
Hacktivist Groups Attacking Industrial Control Systems To Disrupt Services https://gbhackers.com/acktivist-attacks-on-industrial-control-systems/ #IndustrialControlSystems #CybersecurityThreats #CVE/vulnerability #CyberSecurityNews #CyberAttack #Hacktivism
-
Threat landscape for industrial automation systems, Q1 2024 – Source: securelist.com https://ciso2ciso.com/threat-landscape-for-industrial-automation-systems-q1-2024-source-securelist-com/ #industrialcontrolsystems #rssfeedpostgeneratorecho #CyberSecurityNews #Industrialthreats #MalwareStatistics #securelistcom #ransomware #Phishing #Spyware #Miner
-
Promising tool
https://github.com/cisagov/parsnipParsnip is a program developed to assist in the parsing of protocols using the open source network security monitoring tool Zeek. Parsnip is specifically designed to be applied towards developing Industrial Control Systems (ICS) protocol parsers but can be applied to any protocol.
#Parsnip #ProtocolParser #Zeek #ICS #IndustrialControlSystems #OT #OperationalTechnology #SCADA -
Ransomhub’s Latest Attack Raises Alarms for Industrial Control Systems (ICS) Security https://thecyberexpress.com/ransomhub-group-strikes-ics/ #IndustrialControlSystems #TheCyberExpressNews #CybersecurityNews #ransomwareattack #TheCyberExpress #Ransomhubgroup #FirewallDaily #SCADAsystems #DarkWebNews
-
Rockwell Automation Urges Customers to Disconnect Industrial Control Systems from the Internet https://thecyberexpress.com/rockwell-automation-industrial-control-systems/ #CybersecurityandInfrastructureSecurityAgency #IndustrialControlSystems #TheCyberExpressNews #RockwellAutomation #CybersecurityNews #TheCyberExpress #FirewallDaily #CISA #ICSs
-
CISA Warns of High-Risk Flaws in Honeywell Products https://thecyberexpress.com/honeywell-product-vulnerabilities/ #Honeywellproductvulnerability #IndustrialControlSystems #TheCyberExpressNews #CybersecurityNews #TheCyberExpress #FirewallDaily #Advisory #CISA #ICS