“Cyberattacks have always been, well, cyber. Their immediate effects were on our data, our digital information, and our devices…until they weren’t. The interconnected nature of the world and the way it’s built in 2018 has brought us exciting and revolutionary innovations, but it has also been leveraged by hackers to extend the impact of a cyberattack beyond the digital sphere into the physical.” – Steve Povolny, McAfee Labs, 09 Oct 2018
Our team continues to encourage security leaders to conduct preparedness, security, and operations based on a threat-informed and risk-based understanding of our current and emerging operational environment. As we at Gate 15 conduct our day-to-day analytical and preparedness activities, we continue to promote the importance of considering blended threats, which are an increasing reality in our interwoven operational environments.
When others identify threats, incidents or otherwise raise awareness of blended threats, we’re happy to share their thoughtful work. On 09 Oct, Steve Povolny, @spovolny authored a post on the McAfee Labs blog titled, “When the Digital Impacts the Physical.” In the post, Steve addresses recent cybersecurity issues that have had physical security impacts. Excerpts of his post follow, and we encourage readers to link and read the complete post from the McAfee website.
Steve writes: Cyberattacks have always been, well, cyber. Their immediate effects were on our data, our digital information, and our devices…until they weren’t. The interconnected nature of the world and the way it’s built in 2018 has brought us exciting and revolutionary innovations, but it has also been leveraged by hackers to extend the impact of a cyberattack beyond the digital sphere into the physical. Pacemakers can be hacked, shocks can be sent to patients remotely. Critical infrastructure can be taken down, rendering cities powerless…
Hospitals, health care, and medical tools and devices have evolved to become members of an interconnected ecosystem. Many health care systems connect to the internet to operate, the same holds true with numerous medical devices such as pacemakers. But that makes the latter part of the ‘Internet of Things,’ a growing collection of connected devices which are potentially vulnerable to cyberattack. In fact, there have already been reports of threats to these medical devices. Just last year, the FBI recalled half a million pacemakers, as a crucial flaw was discovered that could expose users to an attack. Additionally, security researchers recently revealed a chain of vulnerabilities in a particular pacemaker brand that an attacker could exploit to control implanted pacemakers remotely and cause physical harm to patients.
Gate 15 is privileged to have the opportunity to support the Health ISAC and the 2018 Blended Threats exercise series. For more on that effort, see our January blog, “Taking a Proactive Approach to Blended Threats,” and more at Health ISAC.
…cybercriminals have recently begun hitting critical infrastructure hard and fast, with dramatic results emerging from their efforts. They’ve infamously put an entire city in the Ukraine out of power for about an hour. Then there was the Schneider Electric hack, in which cybercriminals leveraged a zero-day vulnerability within an industrial plant’s safety system for a cyberattack…
We at McAfee are working together with our entire industry to stop these types of attacks. We’re sharing threat intelligence, resources, and research findings to ensure we put up a united front against these threats. By learning from these attacks, we’re better preparing for those to come. We believe that together is power. And though these attacks are advanced, we know that acting together to stop them will be even more powerful.
Our team applauds Steve and the team at McAfee Labs for their efforts to raise awareness on blended threats and to proactively engage with trusted partners to share, collaborate, and mitigate the risks that blended threats present to organizations and individuals. Our team routinely reviews McAfee’s open source content and we include appropriate information and reports in our free daily paper, the Gate 15 SUN. We encourage readers to consider the evolving blended threat environment and to take that into consideration as you plan and conduct preparedness, security and operations. Read more from Steve’s post here and see some of our previous posts on blended threats in the links below.
- Blended Threats: Mining Takes a Toll!
- Blended Threats (update 1.1): Understanding an Evolving Threat Environment
- Blended Threats: The Oracle Has Spoken!
- More on blended threats, some of our associated preparedness activities, and other content that may be of interest can be accessed from our blog.
Understand the Threats. Assess the Risks. Take Action.
What are blended threats? A blended threat is a natural, accidental, or purposeful physical or cyber danger that has or indicates the potential to have crossover impacts and harm life, information, operations, the environment, and/or property.
Maintain security and threat awareness via Gate 15’s free daily paper, the Gate 15 SUN and learn more about Hostile Events Preparedness and our HEPS Program here. Gate 15 provides intelligence and threat information to inform
routine situational awareness, preparedness planning, and to penetrate the decision-making cycle to help inform time-sensitive decisions effecting operations, security, and resources. We provide clients with routine cyber and physical security products tailored to the individual client’s interests. Such products include relevant analysis, assessments, and mitigation strategies on a variety of topics.