‘Stuxnet’ Worm Far More Sophisticated Than Previously Thought
Summary: The Stuxnet worm exploits at least four previously unknown Windows vulnerabilities, including a shortcut-file flaw and a printer-sharing flaw that Microsoft fixed in MS10-061, plus two unpatched privilege-escalation flaws. Siemens said the worm infected SCADA systems in at least 14 plants without impairing production, with the largest number of infections in Iran, and Symantec found it uses default Siemens passwords to upload and hide its own code on programmable logic controllers.
Key Takeaway: Stuxnet is described as the first publicly known rootkit able to hide injected code on a PLC, and the Department of Homeland Security's September 2 advisory said nothing about how to find or remove it at the PLC level - so operators cannot currently tell which controllers are trusted.
Read the original at Krebs on Security ↗
- Topics
- Vulnerabilities & Patching
- Related
- Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026