“When an organization is struggling to make payroll and to keep systems on a generation of technology created in the last decade, even the basics in cybersecurity often are out of reach.” “Unfortunately, that water treatment facility is the rule rather than the exception,” Krebs wrote in a column for The Hill. “The reality is though for thousands of sites, especially amongst the smaller community members, this same scenario is possible,” he said.Ĭhris Krebs, the former director of the Department of Homeland Security’s Cybersecurity and Infrastructure Security Agency, wrote on Wednesday that the Oldsmar hack highlights how dire the challenge is. Remote access software, like TeamViewer and Chrome in Oldsmar’s case, are extremely common on infrastructure sites, Lee said. You just need to know how to use the system – in this case a human machine interface that operated the plant.” “To impact industrial systems you don’t need exploits. “There was software that allows remote access that was internet exposed, which means anyone could log in,” he said. Vulnerabilities in critical infrastructure systemsĮxp 1220 GPS Donilon on Russia hack_00001021.pngĬoncern mounts over government cyber agency's struggle to respond to hack fallout The incident highlights how some critical infrastructure systems are vulnerable to hacking because they are online and use remote access programs, sometimes with lax security. There are currently no suspicions or indications that’s the case, he said. Gualtieri praised the operator who spotted the attack on Friday and said current and former employees have been interviewed after early consideration of an insider threat. The identity of the hacker, or hackers, isn’t yet known. At no time was there a significant adverse effect to the city’s water supply, and the public was never in danger, he said.
The system’s operator noticed the intrusion and immediately reduced the level back. Once inside the system, the hacker adjusted the level of sodium hydroxide, or lye, to more than 100 times its normal levels, Gualtieri said. “Based on cooperative information sharing, a diligent technical investigation did not find any indication for suspicious connection activity via our platform,” TeamViewer spokesperson Martina Dier told CNN on Wednesday. TeamViewer, which is based in Germany and has more than half a million customers around the world using commercial licenses, said that there was no indication of suspicious activity. Someone tried to poison a Florida city by hacking into the water treatment system, sheriff says
He was joined by Mayor Eric Seidel and City Manager Al Braithwaite. On Monday, February 8, 2021, Sheriff Bob Gualtieri gave a press conference surrounding the unlawful intrusion to the City of Oldsmar's water treatment system.
0 kommentar(er)
