article thumbnail

Data Encryption Shields the Energy Sector Against Emerging Threats

Thales Cloud Protection & Licensing

Data Encryption Shields the Energy Sector Against Emerging Threats. The energy sector is part of the critical national infrastructure (CNI), and delivers services that are essential for modern life. Energy services companies are a lucrative target for adversaries. Wed, 01/13/2021 - 09:42. Cybersecurity challenges. A recent U.S.

article thumbnail

EPA Issues Urgent Alert for Water Utilities to Enhance Cyber Defenses

SecureWorld News

In a new Enforcement Alert , the agency is calling on water utilities to immediately enhance their digital defenses to protect public health and safety. Allocating funds for specific assets, such as those that are internet facing, would be an excellent way to start mitigating risks in these environments," Aiello added.

Insiders

Sign Up for our Newsletter

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

article thumbnail

DoS attack the caused disruption at US power utility exploited a known flaw

Security Affairs

A DoS attack that caused disruptions at a power utility in the United States exploited a flaw in a firewall used in the facility. The incident took place earlier this year, threat actors exploited a known vulnerability in a firewall used by the affected facility to cause disruption. and 7 p.m., and 7 p.m.,

article thumbnail

Iranian Hackers Target U.S. Water Facility

SecureWorld News

The utility's general manager, Robert J. The attack has been linked to CyberAv3ngers, an Iranian-backed group known for its focus on targeting Israeli water and energy sites. Disconnect the PLC from the open internet. If possible, utilize a TCP port that is different than the default port TCP 20256.

article thumbnail

Microsoft Targets Critical Outlook Zero-Day Flaw

eSecurity Planet

Block TCP 445/SMB outbound from your network by using a perimeter firewall, a local firewall, and via your VPN settings. The first, CVE-2023-23415 , is a remote code execution vulnerability in the Internet Control Message Protocol (ICMP) with a CVSS score of 9.8.

article thumbnail

Advisory: Malicious North Korean Cyber Activity

SecureWorld News

Here's what Blindingcan has accomplished so far: "A threat group with a nexus to North Korea targeted government contractors early this year to gather intelligence surrounding key military and energy technologies. Enable a personal firewall on agency workstations, configured to deny unsolicited connection requests.

article thumbnail

Industrial Switches from different Vendors Impaired by Similar Exposures

Hacker Combat

Energy and power. Thomas Weber, the researcher at SEC Consult who identified these exposures, says that the switches are utilized in various significant positions across the network. According to Weber, he only identified a few affected gadgets as being vulnerable across the internet. Heavy machinery. Automation. Surveillance.