Prison authorities are concerned about new security research demonstrating how attackers can hack into the industrial control systems used in the nation’s penitentiaries.
Research into the issue was presented last month at the Hacker Halted conference in Miami, where the Washington Times reported Tiffany Rad and John Strauchs were able to demonstrate how attackers could use vulnerabilities in programmable logic controllers (PLCs) to remotely open cell doors and prison gates.
“Personally, I think the greatest danger is assassination,” Strauchs told the newspaper. “You create chaos as a way to [implement a plan to] kill someone.”
He explained that a malicious attacker could destroy doors by overloading the electrical system that controls them, or even shut down secure communications through the prison intercom system and crash the facility’s closed-circuit television system.
Strauchs and Rad reportedly worked with authorities to alert them of the risk before disclosing details publicly.
The Federal Bureau of Prisons is “aware of this research and taking it very seriously,” spokesman Chris Burke told The Washington Times. The story can be found here.
More from Brian Prince
- U.S. Healthcare Companies Hardest Hit by ‘Stegoloader’ Malware
- CryptoWall Ransomware Cost Victims More Than $18 Million Since April 2014: FBI
- New Adobe Flash Player Flaw Shares Similarities With Previous Vulnerability: Trend Micro
- Visibility Challenges Industrial Control System Security: Survey
- Adobe Flash Player Zero-Day Exploited in Attack Campaign
- Researchers Demonstrate Stealing Encryption Keys Via Radio
- Researchers Uncover Critical RubyGems Vulnerabilities
- NSA, GCHQ Linked to Efforts to Compromise Antivirus Vendors: Report
Latest News
- Google Shells Out $600,000 for OSS-Fuzz Project Integrations
- F5 BIG-IP Vulnerability Can Lead to DoS, Code Execution
- Flaw in Cisco Industrial Appliances Allows Malicious Code to Persist Across Reboots
- UK Car Retailer Arnold Clark Hit by Ransomware
- Dealing With the Carcinization of Security
- HeadCrab Botnet Ensnares 1,200 Redis Servers for Cryptomining
- Cyber Insights 2023 | Supply Chain Security
- Cyber Insights 2023 | Regulations
