+- Red Security (https://redsecurity.info/cc)
+-- Forum: General (https://redsecurity.info/cc/forumdisplay.php?fid=1)
+--- Forum: News (https://redsecurity.info/cc/forumdisplay.php?fid=4)
+--- Thread: News Engery Industry Concerned Over Cyber-Crisis (/showthread.php?tid=516)
Engery Industry Concerned Over Cyber-Crisis - Mad-Architect - 04-20-2018
Energy, gas, and oil, three major components in society that churn and trust to keep man afloat amidst an unforeseen future. But what if these three components just suddenly ceased to stop working? That is the focal point of concern, and this concern stemmed from over 150 IT and OT professionals from the energy, gas, and oil industry. Their points vary, from stating that its good that industrial sector has raised its cyber-defense bar some, to the sector seemingly not considering raising any kind of solid defense until a catastrophic event actually happens.
Any type of targeted attack on the ICS (Industrial Control System) would have dangerous implications. There have already been attacks on sectors of industry, and these attacks proved capable of succeeding. A power plant going down would leave a city dark, but this would happen slowly, and would have dire consequences.
[See below some articles, they go over this point very well.]
https://www.computerworld.com/article/2472552/security0/nyc-goes-dark--secret-demo-for-senators-simulated-cyberattack-on-power-grid.html
https://www.washingtonpost.com/blogs/checkpoint-washington/post/officials-use-nyc-blackout-scenario-to-sell-senators-on-cyber-attack-legislation/2012/03/09/gIQA9Z530R_blog.html?utm_term=.7b1446a0bb5a
http://nymag.com/daily/intelligencer/2016/06/the-hack-that-could-take-down-nyc.html
The loss of oil and Gas would put a damper on getting around, and keeping houses warm during cold winter nights, and a cyber-attack like this one during a bad winter in say...New York City, would quite literally be a black winter. And sadly enough, no matter how many walls we put up, there is always someone somewhere who has the spine of a rat, and finds their way in. A certain gas and/or oil company could have a disgruntled former employee who wants to get back at them. Here is where a major hole is; with the employees of a target company. They could be exploited for any number of reasons (Some of these reasons are quite obvious, while others are more subtle.) This is right here is pure, unrefined lack of foresight on the part of the company and it is completely unavoidable. There is one bad apple in every batch, and there always will be.
Just pour over a country's current political and societal quirks and intricacies and you have a mess of exploits that could cripple a city, or even a state. [Remember, a single seedling can start a whole garden] . Back to companies not having the best cyber-security etiquette, if large [and very important] industrial sectors don't practice maximum etiquette then smaller more public sectors might have either the same if not worse etiquette. Again, these holes are scarily unavoidable.
These and more, are at the forefront of a lot of expert's minds. and could very be the targets of hacking groups, both criminal and state affiliated. With that said, amidst the tensions with Russia possible planning a large scale cyber offensive, will we learn our lesson beforehand... or after?
--Sh7nk-Z0id
RE: Engery Industry Concerned Over Cyber-Crisis - rex04 - 04-21-2018
its awesome and superbly written up @"Sh7ank-Z0id" , wish it could reach a major audience dude
RE: Engery Industry Concerned Over Cyber-Crisis - Mad-Architect - 04-21-2018
(04-21-2018, 02:43 AM)rex04 Wrote: its awesome and superbly written up @"Sh7ank-Z0id" , wish it could reach a major audience dude
Thank you, "rex04", not sure about a larger audience, but maybe. It could use some work. Honestly, I just scour actual news articles and try to paraphrase as best as possible while adding information and opinions of my own. the last section where I talking about how people are good exploits, is my very own.
