How ICS project files can be used to attack businesses [Q&A]

Industrial control systems (ICS) are usually kept separate from internet facing and other business applications. But researchers at Claroty have discovered a way to exploit ICS project files as an attack vector. The attack was demonstrated at the recent DEF CON conference. We asked Nadav Erez, Claroty's research team lead, to explain more about why these files are particularly attractive to attackers. BN: Exactly what are ICS project files? NE: These are files that are generated by ICS engineering software and basically they contain all the information that the software saves, because these options are used by engineers to programme… [Continue Reading]