Pen Tester Shows Weaknesses at Nuclear Plant

In a recent interview published by Trustwave, a pen tester proved that even a well-protected nuclear power plant could use a cybersecurity tune up. Consultant Charles Hamilton reported that he had encountered a low-security Wifi hot-spot at his client’s facility set up by contractors.  From there, he was able to gain access to the network and some monitoring tools. Within two hours, he and domain-level access. Hamilton also notes that the “corporate network is always going to be one of your most vulnerable points…and [a]lways assume that your network is as vulnerable as your external perimeters.” Managing assets and limiting new devices on the network are important aspects of basic cybersecurity preparedness, as described in WaterISAC’s 15 Cybersecurity Fundamentals for Water and Wastewater Utilities. Read more at Trustwave.