▲ 68 ▼ Russian group hacked Quebec water treatment plant, gained access to control pumps and chlorine dosing: CSE (ca.news.yahoo.com) submitted 4 months ago by DamnianWayne@lemmy.world to c/world 9 comments fedilink hide all child comments
[–] alapakala 7 points 4 months ago (6 children) permalink fedilink source parent hideshow 6 child comments replies: [–] Bane_Killgrind@lemmy.dbzer0.com 3 points 4 months ago (5 children) Most new systems are IP based and require multi site communication for basically everything, so don't blame Quebec they use the same systems the rest of the country uses. Ie OPG has a job posting mentioning NERC CIP https://jobs.opg.com/job/Oshawa-Cyber-Security-Specialist-ON-L1H-8W8/603890717/ https://www.hydroquebec.com/reliability-coordinator/standards.html "Blame Quebec" is lazy. Russia using a target that won't reasonably retaliate as a test is likely. Québec might have been the first instance this penetration was detected as well, this should trigger audits in the rest of the country. permalink fedilink source parent hideshow 5 child comments replies: [–] alapakala 2 points 4 months ago (4 children) systems are IP based … Russia using a target Russian group hacked should trigger audits I’m glad there are folks with positive outlooks still alive. permalink fedilink source parent hideshow 4 child comments replies: [–] lightsblinken@lemmy.world 2 points 4 months ago* (2 children) not sure your point. just about every OT system you can think of is connected so it can be managed. feel like OP was just pointing that out? permalink fedilink source parent hideshow 2 child comments replies: [–] iocase@lemmy.zip 2 points 4 months ago My org tried to avoid this by not having devices connect to USB or any other wifi except your corporate phone which is locked down. Our system won't connect outside of the LAN so you would need to compromise the corporate phone or steal one or something, or otherwise compromise the VPN somehow I guess? I'm not in security so idk too many of the details. permalink fedilink source parent [–] Bane_Killgrind@lemmy.dbzer0.com 1 point 4 months ago Buddy thinks government spying agencies don't manipulate organised crime groups or something, which is weird since he posted an article about a group that is backed by a government, as stated in that same article. permalink fedilink source parent [–] Bane_Killgrind@lemmy.dbzer0.com 1 point 4 months ago NoName is a cybercriminal group financially backed by the Russian government permalink fedilink source parent
[–] Bane_Killgrind@lemmy.dbzer0.com 3 points 4 months ago (5 children) Most new systems are IP based and require multi site communication for basically everything, so don't blame Quebec they use the same systems the rest of the country uses. Ie OPG has a job posting mentioning NERC CIP https://jobs.opg.com/job/Oshawa-Cyber-Security-Specialist-ON-L1H-8W8/603890717/ https://www.hydroquebec.com/reliability-coordinator/standards.html "Blame Quebec" is lazy. Russia using a target that won't reasonably retaliate as a test is likely. Québec might have been the first instance this penetration was detected as well, this should trigger audits in the rest of the country. permalink fedilink source parent hideshow 5 child comments replies: [–] alapakala 2 points 4 months ago (4 children) systems are IP based … Russia using a target Russian group hacked should trigger audits I’m glad there are folks with positive outlooks still alive. permalink fedilink source parent hideshow 4 child comments replies: [–] lightsblinken@lemmy.world 2 points 4 months ago* (2 children) not sure your point. just about every OT system you can think of is connected so it can be managed. feel like OP was just pointing that out? permalink fedilink source parent hideshow 2 child comments replies: [–] iocase@lemmy.zip 2 points 4 months ago My org tried to avoid this by not having devices connect to USB or any other wifi except your corporate phone which is locked down. Our system won't connect outside of the LAN so you would need to compromise the corporate phone or steal one or something, or otherwise compromise the VPN somehow I guess? I'm not in security so idk too many of the details. permalink fedilink source parent [–] Bane_Killgrind@lemmy.dbzer0.com 1 point 4 months ago Buddy thinks government spying agencies don't manipulate organised crime groups or something, which is weird since he posted an article about a group that is backed by a government, as stated in that same article. permalink fedilink source parent [–] Bane_Killgrind@lemmy.dbzer0.com 1 point 4 months ago NoName is a cybercriminal group financially backed by the Russian government permalink fedilink source parent
[–] alapakala 2 points 4 months ago (4 children) systems are IP based … Russia using a target Russian group hacked should trigger audits I’m glad there are folks with positive outlooks still alive. permalink fedilink source parent hideshow 4 child comments replies: [–] lightsblinken@lemmy.world 2 points 4 months ago* (2 children) not sure your point. just about every OT system you can think of is connected so it can be managed. feel like OP was just pointing that out? permalink fedilink source parent hideshow 2 child comments replies: [–] iocase@lemmy.zip 2 points 4 months ago My org tried to avoid this by not having devices connect to USB or any other wifi except your corporate phone which is locked down. Our system won't connect outside of the LAN so you would need to compromise the corporate phone or steal one or something, or otherwise compromise the VPN somehow I guess? I'm not in security so idk too many of the details. permalink fedilink source parent [–] Bane_Killgrind@lemmy.dbzer0.com 1 point 4 months ago Buddy thinks government spying agencies don't manipulate organised crime groups or something, which is weird since he posted an article about a group that is backed by a government, as stated in that same article. permalink fedilink source parent [–] Bane_Killgrind@lemmy.dbzer0.com 1 point 4 months ago NoName is a cybercriminal group financially backed by the Russian government permalink fedilink source parent
[–] lightsblinken@lemmy.world 2 points 4 months ago* (2 children) not sure your point. just about every OT system you can think of is connected so it can be managed. feel like OP was just pointing that out? permalink fedilink source parent hideshow 2 child comments replies: [–] iocase@lemmy.zip 2 points 4 months ago My org tried to avoid this by not having devices connect to USB or any other wifi except your corporate phone which is locked down. Our system won't connect outside of the LAN so you would need to compromise the corporate phone or steal one or something, or otherwise compromise the VPN somehow I guess? I'm not in security so idk too many of the details. permalink fedilink source parent [–] Bane_Killgrind@lemmy.dbzer0.com 1 point 4 months ago Buddy thinks government spying agencies don't manipulate organised crime groups or something, which is weird since he posted an article about a group that is backed by a government, as stated in that same article. permalink fedilink source parent
[–] iocase@lemmy.zip 2 points 4 months ago My org tried to avoid this by not having devices connect to USB or any other wifi except your corporate phone which is locked down. Our system won't connect outside of the LAN so you would need to compromise the corporate phone or steal one or something, or otherwise compromise the VPN somehow I guess? I'm not in security so idk too many of the details. permalink fedilink source parent
[–] Bane_Killgrind@lemmy.dbzer0.com 1 point 4 months ago Buddy thinks government spying agencies don't manipulate organised crime groups or something, which is weird since he posted an article about a group that is backed by a government, as stated in that same article. permalink fedilink source parent
[–] Bane_Killgrind@lemmy.dbzer0.com 1 point 4 months ago NoName is a cybercriminal group financially backed by the Russian government permalink fedilink source parent
