tldrdailynews.com logo
Tag

Plc

All articles tagged with #plc

Water-Utility Cyberattacks Surge Beyond Early Reports, 100+ Targets Confirmed
technology1 month ago

Water-Utility Cyberattacks Surge Beyond Early Reports, 100+ Targets Confirmed

A month after a cyberattack on U.S. water facilities began, federal authorities say the scope was far larger than first reported: more than 100 water providers across 12 states were targeted, many via PLCs connected to cellular modems. Experts say underfunded, smaller utilities struggle to detect incidents, and investigators attribute the operations to Iranian-state actors. The assault affected systems coast-to-coast, including Wisconsin, Michigan and Minnesota, with Illinois not listed in the official tally.

via NBC Chicago|
#cisa#cyber-security#iranian-state-sponsored
Thousands of Rockwell PLCs Exposed Online Amid Water-Utility Attacks
technology2 months ago

Thousands of Rockwell PLCs Exposed Online Amid Water-Utility Attacks

Forescout counted 4,407 exposed Rockwell/Allen‑Bradley PLCs worldwide (2,844 in the U.S.) as of Aug. 3, with 22 internet-facing in cities affected by recent water-utility cyberattacks. Attackers could disrupt operations by changing IPs or passwords on already-accessible controllers, even without exploiting a vulnerability; 19 of the 22 exposed units ran firmware susceptible to CVE-2017-16740. Many exposed devices are on large mobile carrier networks (about 70% of U.S. exposed controllers). Authorities advise removing public Internet exposure, enforcing strong authentication, and using VPNs/private networks. A separate recovery advisory exists for resetting affected MicroLogix 1400/1100 PLCs to default and restoring known-good projects, but it requires offline backups. No agency has publicly attributed the campaign yet, and researchers caution that similar configurations could enable broader compromises.

via The Hacker News|
#cybersecurity#internet-exposure#plc