Smart Grids and the Importance of Smart Security Choices
Summary: A Cisco Talos writer who received an Elster R2SD (REX2) smart meter found that the meters use 128-bit AES encryption over the Energy Axis network but transmit data via the open ZigBee protocol, which sends encryption keys in plaintext during a device's initial network join. The writer notes the exposure window is roughly 30 seconds and contrasts this with closed, poorly documented SCADA protocols that reply to any query without authentication.
Why it matters: The utility's rollout was not optional for the customer, and the same ZigBee key-exchange weakness sits in the path that carries data to and from the meter - so the firewall, IDS, and AV protecting your machines stop mattering if the power behind them is compromised.
Read the original at Cisco Talos ↗
- Topics
- Malware
- Related
- ARTEX and beyond: AI-enabled penetration testing platforms Cyber Risks · Nov 13, 2026Fake GTA 6 download goes after Steam logins and crypto wallet data Cyber Risks · Nov 13, 2026Operation Endgame Takes Down Gootloader, CastleRAT and StealC Servers, Seizes 6.4M Stolen Logins Cyber Risks · Nov 13, 2026