Tag Archive for: americas

America’s drinking water is surprisingly easy to poison — GCN


Close up pouring purified fresh drink water from the bottle on table (Cozine/Shutterstock.com)

America’s drinking water is surprisingly easy to poison

This article was first posted to ProPublica.

On Feb. 16, less than two weeks after a mysterious attacker made headlines around the world by hacking a water treatment plant in Oldsmar, Florida, and nearly generating a mass poisoning, the city’s mayor declared victory.

“This is a success story,” Mayor Eric Seidel told the City Council in Oldsmar, a Tampa suburb of 15,000, after acknowledging “some deficiencies.” As he put it, “our protocols, monitoring protocols, worked. Our staff executed them to perfection. And as the city manager said, there were other backups. … We were breached, there’s no question. And we’ll make sure that doesn’t happen again. But it’s a success story.” Two council members congratulated the mayor, noting his turn at the press conference where the hack was disclosed. “Even on TV, you were fantastic,” said one.

“Success” is not the word that cybersecurity experts use to describe the Oldsmar episode. They view the breach as a case study in digital ineptitude, a frightening near-miss and an example of how the managers of water systems continue to downplay or ignore years of increasingly dire warnings.

The experts say the sorts of rudimentary vulnerabilities revealed in the breach — including the lack of an internet firewall and the use of shared passwords and outdated software — are common among America’s 151,000 public water systems.

“Frankly, they got very lucky,” said retired Adm. Mark Montgomery, executive director of the federal Cyberspace Solarium Commission, which Congress established in 2018 to upgrade the nation’s defenses against major cyberattacks. Montgomery likened the Oldsmar outcome to a pilot landing a plane after an engine caught fire during a flight. “They shouldn’t celebrate like Tom Brady winning the Super Bowl,” he said. “They didn’t win a game. They averted a disaster through a lot of good fortune.”

The motive and…

Source…

The Untold History of America’s Zero-Day Market


“With the breakup of the Soviet Union, you had a lot of people with skills, without jobs,” Sabien explained. In Europe, hackers, some as young as 15 and 16, were trading their discoveries to zero-day dealers who would turn around and sell them directly to government agencies and their brokers. Some of the most talented hackers, Sabien told me, were in Israel, veterans of Israel’s Unit 8200. One of the best was a 16-year-old Israeli kid.

It was a secretive business and mind-blowingly convoluted. Sabien’s team couldn’t exactly call up hackers, ask them to send their exploit by email, and mail them back a check. Bugs and exploits had to be carefully tested across multiple systems. Sometimes hackers could do this over video. But most deals were done face-to-face, often in hotel rooms at hacker conventions.

Sabien’s team increasingly relied on these murky middlemen. For years, he said, his employer dispatched an Israeli middleman with duffel bags stuffed full of half a million dollars in cash to buy zero-day bugs from hackers in Poland and across Eastern Europe.

Every step in this insanely complex deal-making structure relied on trust and omertà. Governments had to trust contractors to deliver a zero-day that worked. Contractors had to trust middlemen and hackers not to blow the exploit in the course of their own escapades, or resell it to our worst enemies. Hackers had to trust contractors would pay them, not just take their demonstrations and develop their own variation of their bugs. This was before bitcoin. Some payments were doled out via Western Union, but most were done in cash.

You couldn’t dream up a less efficient market if you tried.

Which is why, in 2003, Sabien took note that iDefense was openly paying hackers for their bugs and called Watters.

To a businessman like Watters, who was trying to push the market out into the open, what the contractors were doing was idiotic, dangerous even.

“Nobody wanted to talk openly about what they were doing,” Watters recalled. “There was this whole air of mystery to it. But the darker the market, the less efficient it is. The more open the market, the more it matures, the more buyers are in charge. Instead they chose to…

Source…

Retired Lt. General H. R. McMaster on his new book, America’s biggest threats and cyber warfare – CBS News

Retired Lt. General H. R. McMaster on his new book, America’s biggest threats and cyber warfare  CBS News
“cyber warfare news” – read more

The Citadel launches bachelors degree to train America’s future ‘cyber warriors’ – Charleston Post Courier

The Citadel launches bachelors degree to train America’s future ‘cyber warriors’  Charleston Post Courier
“cyber warfare news” – read more