News for hackers. Stuff that matters.

A comment on Urgent/11 – Zero Day Vulnerabilities Impacting VxWorks. Parent comment

Re:Urgent/11 – Zero Day Vulnerabilities Impacting VxWorks by dreamcompiler on Wednesday August 14, 2019 @12:52AM (#20692796)
Why do you believe this? Connections between industrial control networks and corporate internet-facing business networks are ubiquitous [0]. They happen because somebody needed a link for convenience and forgot to tell management, or somebody put a wifi router on the IC network just to get their job done. This stuff happens because people act like people, policy be damned.

So yeah, this is really, really bad.

[0] This is well-established infosec fact. It's not controversial. Latest case I know of was at JPL a few weeks ago.

https://duckduckgo.com/?q=jpl+infosec

[ Parent | on HN ]
Re:Urgent/11 – Zero Day Vulnerabilities Impacting VxWorks by mc32 on Wednesday August 14, 2019 @08:07AM (#20694616)
Agreed. Some orgs are better than others at practicing good security hygiene.

The better ones have awareness of their network and have systems monitoring their networks, etc. There are afterall the equivalents of Qualys in the IA world.

[ Parent | on HN ]