Plan ahead High Monitor
Report says hackers are targeting European infrastructure systems
CBS News (via Google News)energy, water, transport
What happened. A CBS News headline reports that high-tech hackers are targeting infrastructure systems in Europe. The report gives no further detail on who is behind it, which systems or which organisations.
Who is affected. The source does not say which organisations are affected. Triage suggests energy, water and transport infrastructure in Europe may be involved.
What to do. Check how vendors and engineers reach your control systems remotely, and review who can connect and whether multi-factor authentication is enforced.
Why it matters to your site. Use it to prompt a review of remote access to control systems, though the report gives no technical detail to act on.
When to act. Plan ahead: Infrastructure operators in Europe: early reports of hacking; check remote access and exposed control systems.
Editor's reading
ForOT security leadleadership
- If you cannot fix it yet
- Limit remote access to named users and known source addresses.
- Require multi-factor authentication on every remote-access path into the plant.
- Watch for
- Remote-access logons outside normal hours or from unfamiliar locations.
Inferred from the facts above, not stated by the source. Check it against your own site before acting.