Stories
Slash Boxes
Comments

SoylentNews is people

SoylentNews is powered by your submissions, so send in your scoop. Only 17 submissions in the queue.
posted by chromas on Wednesday October 30 2019, @04:59PM   Printer-friendly
from the prizes-prizes-prizes! dept.

Pwn2Own Expands Into Industrial Control Systems Hacking

Industrial control systems (ICS) used to manage critical infrastructure and manufacturing will be the main target in next year’s popular Pwn2Own’s annual hacking competition.

Over the past few years, Pwn2Own – a hacking contest that draws in white-hat hackers looking for fame and fortune through finding bugs in various products – has diversified its threat-hunting surfaces from merely focusing on browsers and operating systems to include new areas, including mobile and IoT devices targets.

Now, the contest is offering more than $250,000 in collective prizes for sniffing out flaws in ICS and associated protocols. The event will take place next year (Jan. 21 to Jan. 23) during the S4 Conference in Miami, according to the Zero Day Initiative, which organizes Pwn2Own.

[...] The new focus on ICS may come as no surprise given the continual disclosure of security bugs in the manufacturing, power and water plants, the oil and gas industries – such as recent flaws found in the Delta enteliBUS Manager and the Rockwell Automation industrial drive.

In fact, a recent Kaspersky report found that a full 41.2 percent of industrial control systems were attacked by malicious software at least once in the first half of 2018.


Original Submission

 
This discussion has been archived. No new comments can be posted.
Display Options Threshold/Breakthrough Mark All as Read Mark All as Unread
The Fine Print: The following comments are owned by whoever posted them. We are not responsible for them in any way.
  • (Score: 2) by Bot on Wednesday October 30 2019, @08:01PM

    by Bot (3902) on Wednesday October 30 2019, @08:01PM (#913847) Journal

    my gopro cam clone bought 3 years ago has a wifi mode, with a hardwired dumb password. In case you forget it, you can read it on the OSD all the time wifi is on.
    POSSIBLY the smartphone app can change these defaults, but there is no way I am running a cam control app that wants not only storage and network but also contact and phone data. cam also features stuff on port 80, a file upload mask. Not password protected (but one has to know what to upload, I guess...)

    --
    Account abandoned.
    Starting Score:    1  point
    Karma-Bonus Modifier   +1  

    Total Score:   2