Black Hat 2015: 32 SCADA, mobile zero-day vulns will drop Gird your loins, admins; researchers are set to drop 32 zero-day vulnerabilities at the Black Hat hacking fest in Las Vegas in August. The vulnerabilities have not been disclosed but they will affect mobile devices and Supervisory Control and Data Acquisition (SCADA) systems among other platforms. "We have 32 different zero- …
... the industry will throw their spanner in the works. Essentially you will get industrial systems which can only be controlled by OPC (OLE for Process Control) or if you are lucky OPC-UA, it's cousin which drops DCOM for SOAP.
Seriously, there is no way any of those companies is ever going to correctly implement those systems. There is no way you can run those systems without them having huge attack surfaces.
What we'd need would be regulations limiting the maximum complexity of those systems. The simpler they are the easier they are to understand and that gives people a chance at securing them.
The Register 
Biting the hand that feeds IT
Copyright. All rights reserved © 1998–2024
