{"id":43424,"date":"2021-10-15T15:01:51","date_gmt":"2021-10-15T15:01:51","guid":{"rendered":"https:\/\/packetstormsecurity.com\/news\/view\/32730\/Critical-Infrastruture-Security-Dubbed-Abysmal-By-Researchers.html"},"modified":"2021-10-15T15:01:51","modified_gmt":"2021-10-15T15:01:51","slug":"critical-infrastruture-security-dubbed-abysmal-by-researchers","status":"publish","type":"post","link":"https:\/\/www.threatshub.org\/blog\/critical-infrastruture-security-dubbed-abysmal-by-researchers\/","title":{"rendered":"Critical Infrastruture Security Dubbed Abysmal By Researchers"},"content":{"rendered":"

The “abysmal” state of security for industrial control systems (ICSs) is putting critical services at serious risk, new research finds.  <\/p>\n

You only need to look at the chaos caused by a ransomware attack launched against Colonial Pipeline<\/a> this year — leading to panic buying and fuel shortages across part of the US — to see what real-world disruption cyber incidents can trigger, and their consequences can go far beyond the damage one company has to repair.   <\/p>\n

It was only last month that the Port of Houston<\/a> fended off a cyberattack and there is no reason to believe cyberattacks on operational technology (OT) won’t continue — or, perhaps, become more common.  <\/p>\n

On Friday, CloudSEK<\/a> published a new report exploring ICSs and their security posture in light of recent cyberattacks against industrial, utility, and manufacturing targets. The research focuses on ICSs available through the internet.<\/p>\n

“While nation-state actors have an abundance of tools, time, and resources, other threat actors primarily rely on the internet to select targets and identify their vulnerabilities,” the team notes. “While most ICSs have some level of cybersecurity measures in place, human error is one of the leading reasons due to which threat actors are still able to compromise them time and again.” <\/p>\n

Some of the most common issues allowing initial access cited in the report include weak or default credentials, outdated or unpatched software vulnerable to bug exploitation, credential leaks caused by third parties, shadow IT, and the leak of source code.  <\/p>\n

After conducting web scans for vulnerable ICSs, the team says that “hundreds” of vulnerable endpoints were found.  <\/p>\n

<\/section>\n

CloudSEK highlighted four cases that the company says represents the current issues surrounding industrial and critical service cybersecurity today: <\/p>\n

An Indian water supply management company:<\/strong> Software accessible with default manufacturer credentials allowed the team to access the water supply management platform. Attackers could have tampered with water supply calibration, stop water treatments, and manipulate the chemical composition of water supplies.  <\/p>\n

\"screenshot-2021-10-12-at-16-23-48.png\"<\/span>