eSecurity Planet

MARCH 16, 2023

Block TCP 445/SMB outbound from your network by using a perimeter firewall, a local firewall, and via your VPN settings. The first, CVE-2023-23415 , is a remote code execution vulnerability in the Internet Control Message Protocol (ICMP) with a CVSS score of 9.8.

Energy and Utilities 98

Energy and Utilities Authentication Firewall Engineering 98

SecureWorld News

DECEMBER 1, 2023

The utility's general manager, Robert J. The attack has been linked to CyberAv3ngers, an Iranian-backed group known for its focus on targeting Israeli water and energy sites. Disconnect the PLC from the open internet. If possible, utilize a TCP port that is different than the default port TCP 20256.

Energy and Utilities 109

Energy and Utilities VPN Authentication Passwords 109

SecureList

NOVEMBER 23, 2021

Energy, transport and utilities — in an attempt to gain a foothold in the critical infrastructure of a “potential adversary” just in case, and to use it to develop other attacks (see examples above). Known vulnerabilities in internet-facing hardware are also sure to remain a popular penetration vector.

Spyware 116

Spyware Phishing Cybercrime Energy and Utilities 116