ESET Threat Blog

SCADA, a network-enabled setup for controlling infrastructure, is hitting the headlines in force for falling victim to cyber scammers. There have been several incidents of unauthorized access to Supervisory Control and Data Acquisition (SCADA) systems recently, from guessing simple passwords, to full-on spear phishing attacks against a hardware vendor, which were then used to access … Read More…

Yes, I know very well that it should be the Hippocratic Oath, but there may be those who think that someone who spends as much time talking to the media as I do should be careful not to cast the first stone from inside a glass house. (Bear with me: this really is going somewhere…)
Still, … Read More…

When diabetic security researcher Jay Radcliffe demonstrated at BlackHat how he could take control of the pump that controls insulin levels in his own body, it seemed quite reasonable that he didn't name the manufacturer because "If I name the vendor, then any bad guy or evil hacker…can start exploit code on it right away."
Having … Read More…

The North American Electric Reliability Corporation’s (NERC) newly formed Cyber Attack Task Force will “consider the impacts of a coordinated cyber attack on the reliability of the bulk power system”, in a proactive effort to increase providers’ readiness for new waves of potential nastiness. Recently, there has been a flurry of activity surrounding efforts to … Read More…

If you could use texting to break networks, what could you do? Well, Don Bailey, with ISEC Partners, in his talk today at Blackhat, muses that you could break a lot, driving around and dropping in on various networks as you saw fit. Well, really his proof-of-concept collection of tools is aimed at educating mobile … Read More…

No, I'm not talking about the risks to dangly bits from reckless re-trousering.
At Blackhat Europe in Barcelona today, Mario Vuksan, Tomislav Pericin and Brian Karney have been talking, apparently to a packed house, about vulnerabilities they've found in various compression formats (ZIP, RAR, 7ZIP, CAB and GZIP), as well as their potential for steganographical use or misuse. … Read More…