U.S. warns Siemens devices can be hacked amid fears Iran is breaching water plants

Comments

• A_Union_of_Kobolds@lemmy.world ⁨2⁩ ⁨hours⁩ ago

  Maybe im just a simple residential/commercial electrician but how do you hack a PLC?? Are newer ones connected to the actual internet for some ungodly reason?

  Genuine question as I have quite little experience in industrial. They’ve always seemed fairly straightforward to me, just a bunch of relays I thought.

  source

  • RiderExMachina@lemmy.ml ⁨25⁩ ⁨minutes⁩ ago

    I’m an assembler at a Siemens Competitor; our devices aren’t PLCs and it wouldn’t surprise me if theirs weren’t either.

    Most of our devices are full-on embedded computers that monitor and relay the information of gestures vaguely whatever devices our protective equipment are connected to.

    The most recent version of one of our products is basically a webserver that allows customers to view realtime data of the connected devices and make adjustments where needed. Of course we try to make it as secure as possible, but software is insecure.

    Also, my company tends to lag behind on “cutting edge” things like that, historically preferring to make products that have a solid historical backing, rather than chasing the new. If we’re looking into that side of the business, it’s highly likely that other companies have been doing it for a while.

    source
  • panda_abyss@lemmy.ca ⁨1⁩ ⁨hour⁩ ago

    Stuxnet was specifically wired to jack these devices IIRC

    source
  • witheyeandclaw@lemmy.world ⁨1⁩ ⁨hour⁩ ago

    There’s a documentary called Zero Days that goes into great detail about how we hacked the centrifuges at one of their plants. There are components that DO check in with the network even within in air gapped installations.

    source

    • A_Union_of_Kobolds@lemmy.world ⁨1⁩ ⁨hour⁩ ago

      Ill check that out, thanks!

      source