SANS Internet Storm Center, InfoCON: green

"Open" Access to Industrial Systems Interface is Also Far From Zero, (Fri, May 14th)

Jan's last diary about the recent attack against the US pipeline[1] was in perfect timing with the quick research I was preparing for a few weeks. If core components of industrial systems are less exposed in the wild, as said Jan, there is another issue with such infrastructures: remote access tools. Today, buildings, factories, farms must be controlled remotely or sometimes managed by third parties. If Microsoft RDP is common on many networks (and is often the weakest link in a classic attack like ransomware), there is another protocol that is heavily used to remote control industrial systems: VNC ("Virtual Network Computing")[2]. This protocol works with many different operating systems (clients and servers), is simple and efficient. For many companies developing industrial systems, It is a good candidate to offer remote access. 

ISC Stormcast For Friday, May 14th, 2021 https://isc.sans.edu/podcastdetail.html?id=7500, (Fri, May 14th)


ISC Stormcast For Thursday, May 13th, 2021 https://isc.sans.edu/podcastdetail.html?id=7498, (Thu, May 13th)


Number of industrial control systems on the internet is lower then in 2020...but still far from zero, (Wed, May 12th)


ISC Stormcast For Wednesday, May 12th, 2021 https://isc.sans.edu/podcastdetail.html?id=7496, (Wed, May 12th)


Microsoft May 2021 Patch Tuesday, (Tue, May 11th)


ISC Stormcast For Tuesday, May 11th, 2021 https://isc.sans.edu/podcastdetail.html?id=7494, (Tue, May 11th)


Correctly Validating IP Addresses: Why encoding matters for input validation., (Mon, May 10th)


ISC Stormcast For Monday, May 10th, 2021 https://isc.sans.edu/podcastdetail.html?id=7492, (Mon, May 10th)


Who is Probing the Internet for Research Purposes?, (Sat, May 8th)


Distributed by aarss.com.