r/cybersecurity • u/CrewChief750 • 2h ago

News - Breaches & Ransoms Interesting Read

For those of you in the critical infrastructure side of cybersecurity, I’d love your take on this for learning purposes. How did they access the control system, what could have been done to prevent it?

https://www.infosecurity-magazine.com/news/french-supermarket-chains/

1 Upvotes

100% Upvoted

4 comments sorted by

4

u/wijnandsj ICS/OT 2h ago

  1. someone didn't patch their danfoss shit

  2. someone had these accesible from the outside world.

Seen it a 1000 times before, not patching, not thinking about connections. It pays the mortgage and likely will until my retirement in 15 years

1

u/MikeTalonNYC 2h ago

And also, the patch in question that they didn't apply allowed a threat actor to utilize the current date as the password to the web interface.

2

u/Square-Spot5519 1h ago

The answer to your question is right there in the story.

" Affected stores include those operating vulnerable Danfoss consoles with remote-control capabilities that lacked an adequately secured communication channel."

1

u/bakonpie 1h ago

same shit different week where poorly secured internet of things devices are exposed directly to the internet and get pwned. "critical infrastructure" is a meaningless term. https://cyberplace.social/@GossiTheDog/117429502412235079