the search for the perfect door - deviant ollam

httpenterthecorenet

Lots of Folk Are Discussing Network Security

Kemuri Water Company was responsible for supplying and

metering water usage over a number of neighboring counties

From the onset KWC was adamant that no evidence of

unauthorized access had been uncovered It became clear

that KWC management was aware of potential unauthorized

access into the OT systems of the water district

httpenterthecorenet

Lots of Folk Are Discussing Network Security

Kemuri Water Company was responsible for supplying and

metering water usage over a number of neighboring counties

From the onset KWC was adamant that no evidence of

unauthorized access had been uncovered It became clear

that KWC management was aware of potential unauthorized

access into the OT systems of the water district

An unexplained pattern of valve and duct movements had occurred

over the previous 60 days These movements consisted of

manipulating the PLCs that managed the amount of chemicals used

to treat the water to make it safe to drink as well as affecting the

water flow rate causing disruptions with water distribution

httpenterthecorenet

Lots of Folk Are Discussing Network Security

Kemuri Water Company was responsible for supplying and

metering water usage over a number of neighboring counties

An unexplained pattern of valve and duct movements had occurred

over the previous 60 days These movements consisted of

manipulating the PLCs that managed the amount of chemicals used

to treat the water to make it safe to drink as well as affecting the

water flow rate causing disruptions with water distribution

Access to customer water usage PII and payment data required only a username and password

No second authentication factor was needed Next we found a direct cable connection between

the application and the AS400 system Making matters worse the AS400 system had open access

to the internet and its internal IP address and administrative credentials were found on the

payment application webserver in clear text within an initialization file

httpenterthecorenet

Lots of Folk Are Discussing Network Security

httpenterthecorenet

Lots of Folk Are Discussing Network Security

httpenterthecorenet

But with a Physical Breachhellip

httpenterthecorenet

All of your firewall ruleshellip

httpenterthecorenet

All of your firewall ruleshellip can be compromised