Скачать или смотреть Experts downplay GhostSec's RTU breach w/ Katy Craig - It’s 5 05, Thursday, January 19, 2023

Listen to the entire episode: https://bit.ly/listen-on-all-podcast-..., view the transcription, and find links to resources mentioned in this episode.

I reported on Tuesday that Anonymous Hacker Collective GhostSec had announced it successfully breached an RTU and encrypted it using ransomware. Well, yesterday, SecurityWeek reported that experts are casting doubt on GhostSec’s claims. 

This is Katy Craig in San Diego, California. 

SecurityWeek cited industrial security firms SynSaber and Claroty in its attempt to downplay the seriousness of the attacks by stating the vulnerability in vectors were not new. Focusing on whether the vulnerability was new or not distracts from the seriousness of the attack considering the units were successfully accessed and encrypted.

Claroty identified nearly 200 internet exposed Teleofis RTU968 routers in Russia, Kazakhstan, and Belarus, and 117 of them had a vulnerable SSH service enabled. Cyber risk is calculated in part by the intent and capability of the actor. GhostSec’s intent is clear and its capability is improving. 

This is Katy Craig. Stay safe out there.

#its505 #cybersecurity #opensource