Inside the North American Water Utility Hacking Crisis

Inside the North American Water Utility Hacking Crisis: Iran Links, PLC Tactics, Insurance Fallout, and Volunteer Fixes This special Cybersecurity Today episode examines the expanding wave of water utility intrusions across North America, including a WIRED-obtained memo linking attacks on Minnesota systems to Iran and a joint FBI/EPA alert reporting activity in at least seven U.S. states targeting internet-exposed Rockwell MicroLogix PLCs by rewriting configurations, altering passwords, and manipulating project files, with effects like loss of pressure, flooding, and tampered operator displays. It also covers a separate Quebec incident in Saint-Noël shared by "Z Pen Test Alliance," where attackers adjusted chlorine settings and the plant entered safe mode without contamination. The show reviews competing attributions (Cyber Avengers vs. Hondala), procurement and triage challenges for small utilities, an insurance war game simulating a mass water-sector crisis, concerns about uninsurability and act-of-war exclusions, and the DEF CON Franklin volunteer program helping rural utilities implement basics like password resets, MFA, and incident response plans.

00:00 Sponsor NordLayer 00:37 Deep Dive Setup 01:25 Iran Linked Water Hacks 02:27 Attack Mechanics Impact 03:38 Who Did It 04:13 Canadian Utility Breach 04:54 BSides Lessons Learned 05:51 Insurance War Game 07:59 Uninsurable Risk Fixes 09:00 DEF CON Franklin Volunteers 10:11 Franklin Findings Challenges 11:24 Local Sharing Next Steps 11:55 Wrap Up Listener Notes 12:46 Sponsor NordLayer Again

Denne episoden er hentet fra en åpen RSS-feed og er ikke publisert av Podme. Den kan derfor inneholde annonser.

Episoder(100)

Largest-ever food destruction cyber-attack, Microsoft patches 1,411 flaws, Drones knock out Russia's Yandex

French Supermarket Freezers Turned to Ovens, Ahold Delhaize Outage, Microsoft's 1,411-Fix Patch Tuesday, AI Worm Debate, and Drones Hit Yandex Cloud Cybersecurity Today host David Shipley reports on a...

14 Okt 15min

FBI Arrests Canadian Ransomware Negotiator; MonsterCloud CEO Charged; Qilin Leader Extradited

FBI Arrests Canadian Ransomware Negotiator; MonsterCloud CEO Charged; Qilin Leader Extradited David Shipley covers major cybercrime and safety headlines: the FBI arrests Canadian ransomware negotiato...

11 Okt 12min

AI Agents, Security Debt, and Governance: Dave Lewis on the Real Risks of AI

AI Agents, Security Debt, and Governance: Dave Lewis on the Real Risks of AI in Cybersecurity Host David Shipley interviews Dave Lewis of 1Password about why AI's biggest cybersecurity risk is less ab...

9 Okt 40min

Open AI Fires Safety Researchers

OpenAI Fires Safety Researchers, FTC Probes AI Labs, ChatGPT Linked to Violence, and Connected Cars Share Your Data Host David Shipley covers multiple cybersecurity and AI accountability stories: Open...

7 Okt 14min

Another ShinyHunters Leader Busted

ShinyHunters Leader Detained in Jordan, KillSec Takedown, Vicksburg Ransomware, and OpenAI Agent Lawsuit Host David Shipley reports that Jordan detained an alleged ShinyHunters member known as Rey (Sa...

5 Okt 11min

Keep Calm and Secure AI: A Chat with Field Effect's CEO Matt Holland

Host David Shipley interviews Field Effect CEO Matt Holland about how AI coding agents can behave like malware and why visibility into their actions is essential. Holland recounts his 27-year career f...

2 Okt 38min

ShinyHunters Leader Busted

FBI Warns Staff Assume ShinyHunters Stole Everyone's Data; Clop Dismisses Rival Hack; Kiteworks Restores Service Cybersecurity Today host David Shipley reports the FBI has told employees to assume Shi...

30 Sep 14min

Two new NetScaler zero-days exploited, ShinyHunters steals FBI medical files, OpenAI Australia hack disputed

Citrix NetScaler Zero-Days Exploited, Kiteworks Shutdown Warning, ShinyHunters WAF Bypass, FBI Medical Files Leak, OpenAI Medicare "Hack" Reframed Citrix confirms two actively exploited NetScaler zero...

28 Sep 16min