Over 40,000 Internet-Exposed ICS Devices Found in US: Censys

August 7, 2024 at 03:06PM An analysis by Censys revealed over 40,000 internet-exposed industrial control systems (ICS) in the US, with challenges in notifying owners. The majority are linked to building control and automation, and low-level automation protocols are mainly in wireless and consumer networks. Risks include unauthenticated manipulation and targeting by threat actors. Notifying … Read more

Russian Hackers Target Industrial Systems in North America, Europe

May 2, 2024 at 08:09AM US, Canada, and UK government agencies issue recommendations to safeguard critical infrastructure from pro-Russia hacktivists’ attacks on industrial control and operational technology systems. The attacks targeted sectors like water systems, dams, energy, and agriculture primarily through vulnerable human-machine interfaces. Hackers with ties to Russian government’s Sandworm group pose physical threats, … Read more

2023: A ‘Good’ Year for OT Cyberattacks

April 24, 2024 at 10:26AM Waterfall Security Solutions and ICS Strive’s “2024 Threat Report” notes a 19% increase in cyberattacks causing physical consequences, with 68 attacks recorded in 2023. Despite the increase, ransomware attacks with physical impact decreased slightly, while hacktivist attacks remained constant. The report’s cautious approach, focusing on public disclosures, likely underestimates the … Read more

A New Age of Hacktivism

February 22, 2024 at 05:51AM In the past 2 years, hacktivism activity has surged due to wars and geopolitical conflicts. Non-state and state-backed actors are forming new groups or joining existing hacker collectives to further political or social activism through computer hacking. This has blurred the lines between hacktivism and cyberterrorism, causing fear, uncertainty, and … Read more

Hackers Hijack Industrial Control System at US Water Utility 

November 27, 2023 at 07:06AM Hackers took control of a booster station associated with the Municipal Water Authority of Aliquippa in Pennsylvania, but the water supply was not at risk. The compromised system was disabled after an alarm alerted the utility. An Iran-linked hacktivist group called Cyber Av3ngers claimed responsibility for the attack on an … Read more