March 2013

SCADA Security: Phishing Season is Open

Submitted by Eric Byres on Thu, 2013-03-07 15:25

Last week I received am email (shown further down on this page) purporting to be from the US Internal Revenue Service (IRS).

SCADA Security: Welcome to the Patching Treadmill

Submitted by Eric Byres on Thu, 2013-03-14 16:40

As regular readers of this blog know, after Stuxnet, security researchers and hackers on the prowl for new targets to exploit shifted their efforts to critical industrial infrastructure.

Unfortunately, the Supervisory Control and Data Acquisition (SCADA) and Industrial Control Systems (ICS) applications they are now focusing on are sitting ducks.

Patching for SCADA and ICS Security: The Good, the Bad and the Ugly

Submitted by Eric Byres on Tue, 2013-03-26 12:11

In my last blog, I discussed the reasons why critical industrial infrastructure control systems are so vulnerable to attacks from security researchers and hackers, and explained why patching for such systems is not a workable solution.