DHS Warns of ‘Hacktivist’ Threat Against Industrial Control Systems
Summary: DHS warned that politically or ideologically motivated hackers are increasingly likely to attack industrial control systems, issuing its alert the same day Digital Bond published details of an undocumented backdoor in ICS components sold by 261 manufacturers that grants remote access to anyone who knows the command syntax. Researcher Reid Wightman said no authentication is needed for the privileged command, and a Shodan search turned up 117 vulnerable devices directly connected to the Internet.
What's compelling: DHS cited researchers who compiled a list of more than a half million Internet-reachable control systems-related devices, and exploitation tools for the backdoor were slated for Metasploit - meaning the population of exposed, unauthenticated industrial devices is both large and about to get easier to attack.
Read the original at Krebs on Security ↗
- Topics
- OT / ICS & Critical Infrastructure
- Related
- Siemens RUGGEDCOM APE1808 Cyber Risks · Nov 12, 2026How to Assess OT Incident Response Preparedness Cyber Risks · Nov 10, 2026Three China-Nexus Espionage Campaigns Linked Through Sparrow Malware Ecosystem Cyber Risks · Nov 10, 2026