cybersecurity

GSM Compromised?


The December issue of IEEE Spectrum had a small lead about the following Open Source attempt to hack the GSM phone system. The full article can be found at http://spectrum.ieee.org/telecom/wireless/open-source-effort-to-hack-gsm/0.

From 'The Great Kanduski: Best Practices in Industrial Networking'

Posted Without Comment


This item appeared on Raw Story this afternoon. 

From 'Unfettered Blog'

Worrying About Cybersecurity Nuances


Walt posted this story on Unfettered this morning. Seems like the Solons over at the Wall Street Journal have finally noticed the electrical grid issue. Good for them. Maybe if this story goes mainstream, more pressure to do something will get applied. On the other hand, I'm beginning to think that at least some of the resistance to more cybersecurity measures is not going to come from reluctant utilities or corporate beancounters.

From 'Sound Off! Editors' Blog'

Cyber-Terrorists Identified


Two of the worst cyber terrorists in the world were identified today by Addison, Texas-based security firm Credant Technologies.  Their names? Stupidity and Carelessness.

According to a news release, "In the last year , 9000 USB sticks have been forgotten in people’s pockets as they take their clothes to be washed at the local dry cleaners.

From 'Sound Off! Editors' Blog'

More from the Sausage Factory


Nancy here, sneaking into the blog-posting station again while Walt's not looking.

One of the neat things about my job here at the magazine sausage factory is that I get to see most of the articles for each issue before anybody else. They end up on my desk first. I get the ultimate sneak preview of every issue. So already, long before the issue is ready for printing or posting, I can tell you this: Our November issue is going to be standout.

From 'Sound Off! Editors' Blog'

CERN PLCs fail cyber testing (cross posted from Soundoff!!)


Team Lead Stefan Lueders reports in the current edition of The Industrial Ethernet Book that only 66% of CERN's PLCs passed NESSUS testing, while only 74% passed Netwox testing. These are very high failure rates when you consider that these PLCs are in industrial control systems in a testing laboratory for the nuclear industry.

Read the article 'Unfettered Blog'


Get ready for more chaos!


"FEMA is planning for a voluntary preparedness accreditation and certification program mandated by Title IX of the 9/11 Commission Act of 2007. They intend to establish a common set of criteria for private sector preparedness, including disaster management, emergency management, and business continuity programs. The goal of this voluntary program is to enhance nationwide resilience in an all hazards environment by improving private sector preparedness. Participation in the program will be volunt...

From 'Unfettered Blog'

Is there a SCADA link in the Terry Childs incident in San Francisco?


San Francisco and SCADA

Jake Brodsky brought up the following, "Do management and law enforcement types have any clue as to how one might regain control of a SCADA system after a rogue employee has secured everyone out of it?"

I had planned on saying something at the Conference next week but I will bring up now.

There are two aspects of the Terry Childs’ situation, the San Francisco IT Administrator who locked out his Department from the City WAN, that have interesting implications for SCADA/...

From 'Unfettered Blog'