Ubuthathaka benkqubo yolawulo lwamashishini (ICS) buyanda, njengoko ukuthembela ekufikeleleni kude kuthungelwano lwemizi-mveliso kunyuka ngexesha le-COVID-19, ingxelo entsha yophando evela kuClaroty ifunyenwe.
Ngaphezulu kwe-70% yobuthathaka benkqubo yolawulo lwemizi-mveliso (ICS) ebhengezwe kwisiqingatha sokuqala (1H) sika-2020 inokuxhatshazwa ukude, iqaqambisa ukubaluleka kokukhusela izixhobo ze-ICS ezijongene ne-intanethi kunye nonxibelelwano lokufikelela kude, ngokutsho kokusungulwa.Ingxelo yeBiannual ye-ICS yoMngcipheko kunye nokuba sesichengeni, ekhutshwe kule veki nguClaroty, ingcali yehlabathi kwiiteknoloji yokusebenza (OT) ukhuseleko.
Ingxelo iquka uhlolo lweqela lophando lweClaroty lwe-365 ye-ICS yobuthathaka epapashwe yi-National Vulnerability Database (NVD) kunye neengcebiso ze-ICS ezili-139 ezikhutshwe yi-Industrial Control Systems Cyber Emergency Response Team (ICS-CERT) ngo-1H 2020, echaphazela abathengisi abangama-53.Iqela lophando lweClaroty lifumene i-26 yobuthathaka obubandakanyiweyo kule datha yedatha.
Ngokwengxelo entsha, xa kuthelekiswa no-1H 2019, ubuthathaka be-ICS obupapashwe yi-NVD bonyuke nge-10.3% ukusuka kwi-331, ngelixa iingcebiso ze-ICS-CERT zonyuke nge-32.4% ukusuka kwi-105. Amanqaku eNkqubo (CVSS).
"Kukho ulwazi oluphezulu lwemingcipheko ebangelwa bubuthathaka be-ICS kunye nokugxila okubukhali phakathi kwabaphandi kunye nabathengisi ukuchonga kunye nokulungisa obu buthathaka ngokufanelekileyo nangempumelelo," utshilo u-Amir Preminger, i-VP yophando eClaroty.
Wongeze wathi, "Siyibonile imfuneko ebalulekileyo yokuqonda, ukuvavanya, kunye nokunika ingxelo malunga nomngcipheko obanzi we-ICS kunye nomngcipheko wokuba sesichengeni ukuze kuxhamle uluntu lonke lokhuseleko lwe-OT.Iziphumo zethu zibonisa ukuba kubaluleke kangakanani ukuba imibutho ikhusele uqhagamshelo olukude kunye nezixhobo ze-ICS ezijongana ne-intanethi, kunye nokukhusela ngokuchasene nenkohliso, i-spam, kunye ne-ransomware, ukuze kuncitshiswe kwaye kuncitshiswe iimpembelelo ezinokuthi zibe kho zezi zoyikiso.
Ngokwengxelo, ngaphezulu kwe-70% yobuthathaka obupapashwe yi-NVD inokuxhatshazwa ukude, ukuqinisa inyani yokuba iinethiwekhi ze-ICS ezigcwele umoya ngokupheleleyo.Ikwahlukanisiwe kwizoyikiso ze-cyberziye zaqheleka kakhulu.
Ukongezelela, impembelelo enokuthi ixhaphake kakhulu yayiyi-remote code execution (RCE), enokwenzeka nge-49% yobuthathaka - ebonisa ukugqwesa kwayo njengendawo ehamba phambili ekugxilwe kuyo ngaphakathi koluntu lophando lwezokhuseleko lwe-OT - lulandelwa ukukwazi ukufunda idatha yesicelo (41%). , kubangele ukukhanyela kwenkonzo (DoS) (39%), kunye neendlela zokukhusela i-bypass (37%).
Uphando lufumanisa ukubalasela kokuxhatshazwa kude kuye kwandiswa lutshintsho olukhawulezayo lwehlabathi kubasebenzi abakude kunye nokwenyuka kokuthembela ekufikeleleni kude kuthungelwano lwe-ICS.ukuphendula ubhubhani we-COVID-19.
Ngokwengxelo, amandla, ukuvelisa okubalulekileyo, kunye namanzi kunye neziseko ezingundoqo zamanzi amdaka ngawona achaphazeleka kakhulu bubuthathaka obupapashiweyo kwiingcebiso ze-ICS-CERT ngo-1H 2020. Kuma-385 awodwa obuMngcipheko obuQhelekileyo kunye nokuVezwa (CVEs) okubandakanyiweyo kwiingcebiso. , amandla ayenayo i-236, imveliso ebalulekileyo yayine-197, kwaye amanzi kunye namanzi amdaka ane-171. Xa kuthelekiswa ne-1H 2019, amanzi kunye namanzi amdaka afumana ukwanda okukhulu kwe-CVEs (122.1%), ngelixa ukuveliswa okubalulekileyo kunyuke nge-87.3% kunye namandla ngama-58.9%.
Uphando lweClaroty tham lufumene ubuthathaka be-ICS be-26 obuvezwe ngexesha le-1H 2020, ukubeka phambili ubuthathaka obubalulekileyo okanye obuphezulu obunokuchaphazela ukufumaneka, ukuthembeka, kunye nokhuseleko lwemisebenzi yoshishino.Iqela ligxile kubathengisi be-ICS kunye neemveliso ezineziseko ezinkulu zokufakela, indima ebalulekileyo kwimisebenzi yemizi-mveliso, kunye nezo zisebenzisa iiprothokholi apho abaphandi beClaroty banobugcisa obukhulu.Umphandi uthi obu buthathaka be-26 bunokuba neempembelelo ezinzulu kwiinethiwekhi ze-OT ezichaphazelekayo, kuba ngaphezu kwe-60% yenza uhlobo oluthile lwe-RCE.
Kubathengisi abaninzi abachatshazelwe kukufunyanwa nguClaroty, oku ibikukuba semngciphekweni kwabo kokuqala okuxeliweyo.Ngenxa yoko, baqhubela phambili ngokudala amaqela okhuseleko azinikeleyo kunye neenkqubo zokujongana nokunyuka kokufunyanwa kobuthathaka ngenxa yokudibanisa kwe-IT kunye ne-OT.
Ukufikelela kwiseti epheleleyo yeziphumo kunye nohlalutyo olunzulu,Khuphela iI-Claroty Biannual ICS yoMngcipheko kunye neNgxelo yokuba sesichengeni: 1H 2020Apha.
Ixesha lokuposa: Sep-07-2020
