Cyber Risks · Cisco Talos

What you can learn from Cisco Talos’ new oil pumpjack workshop

Summary: Cisco Talos released a 3-D printed oil pumpjack model connected to a simulated programmable logic controller that supports two industrial protocols, Modbus over TCP and EtherNet/IP, with blueprints, Arduino source code, and a Python/Flask human-machine interface published on GitHub. Talos will bring the model to workshops through the year, and the write-up notes both protocols are unauthenticated and used in production, with the same protocol able to program a real PLC, replace its original code, or patch it.

Why it matters: The protocols Talos simulated are unauthenticated and run in production, and the same commands that change a register value can reprogram a real PLC - so the workshop's offensive scenarios describe a live path into industrial equipment, not a lab curiosity.

Read the original at Cisco Talos ↗

Topics
OT / ICS & Critical Infrastructure
Related
Siemens RUGGEDCOM APE1808 Cyber Risks · Nov 12, 2026