68
Russian group hacked Quebec water treatment plant, gained access to control pumps and chlorine dosing: CSE (ca.news.yahoo.com)
submitted 4 months ago by to c/world
9 comments fedilink hide all child comments
you are viewing a single comment's thread
view the rest of the comments
[–] 3 points 4 months ago (5 children)

Most new systems are IP based and require multi site communication for basically everything, so don't blame Quebec they use the same systems the rest of the country uses. Ie OPG has a job posting mentioning NERC CIP

https://jobs.opg.com/job/Oshawa-Cyber-Security-Specialist-ON-L1H-8W8/603890717/

https://www.hydroquebec.com/reliability-coordinator/standards.html

"Blame Quebec" is lazy. Russia using a target that won't reasonably retaliate as a test is likely. Québec might have been the first instance this penetration was detected as well, this should trigger audits in the rest of the country.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 5 child comments
    •
  • [–] 2 points 4 months ago (4 children)

    systems are IP based

    …

    Russia using a target

    Russian group hacked

    should trigger audits

    I’m glad there are folks with positive outlooks still alive.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 4 child comments
    •
  • [–] 2 points 4 months ago* (2 children)

    not sure your point. just about every OT system you can think of is connected so it can be managed. feel like OP was just pointing that out?

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 2 child comments
    •
  • [–] 2 points 4 months ago

    My org tried to avoid this by not having devices connect to USB or any other wifi except your corporate phone which is locked down. Our system won't connect outside of the LAN so you would need to compromise the corporate phone or steal one or something, or otherwise compromise the VPN somehow I guess? I'm not in security so idk too many of the details.

  • permalink
  • fedilink
  • source
  • parent