How a Port Misconfiguration Exposed Critical Infrastructure Data (helpnetsecurity.com)

Posted by msmash on Wednesday August 9, 2017 @02:45AM from the oops dept.

An anonymous reader writes: Attacks hitting companies' electrical systems are possible, especially when information that provides insight into those systems' weak points is freely accessible online. If you think that such a thing is unlikely, you probably haven't yet heard about the most recent discovery made by UpGuard researchers: an open port used for rsync server synchronization has left the network of Power Quality Engineering (PQE) wide open to malicious attackers. They managed to access and exfiltrate 205 GB of data from PQE's servers, up until the moment when the company secured its systems two days later after being notified of the problem.

1 of 49 comments (clear)

Min score:

Reason:

Sort:

Re:If a single port misconfiguration... by _Sharp'r_ · 2017-08-09 03:11 · Score: 4, Interesting

At the risk of replying to myself, I just went and looked and rsync has had using ssh as the default config for 13 years now...

--
The party of stupid and the party of evil get together and do something both stupid and evil, then call it bipartisan.