Badgerboard: A PLC backplane network visibility module
Summary: Cisco Talos released Badgerboard, a proof-of-concept module that taps the Schneider Electric Modicon M580's X80 backplane to expose XBus traffic that standard span ports miss, since those ports only surface Ethernet traffic. The tool reads the backplane's 12 MHz RX clock and active-low RX data lines through an Artix-7 FPGA, after an initial UART-based design proved too slow for real-time detection into Snort.
What you should know: Talos states plainly that Badgerboard is not a fully engineered or supported solution and frames it as a call to arms for customers to demand more complete monitoring from vendors - meaning the proprietary backplane traffic on PLCs like the M580 remains largely invisible to the tools most OT operators run today.
Read the original at Cisco Talos ↗
- Topics
- Malware
- Related
- ARTEX and beyond: AI-enabled penetration testing platforms Cyber Risks · Nov 13, 2026Fake GTA 6 download goes after Steam logins and crypto wallet data Cyber Risks · Nov 13, 2026Operation Endgame Takes Down Gootloader, CastleRAT and StealC Servers, Seizes 6.4M Stolen Logins Cyber Risks · Nov 13, 2026