Don't panic, but attackers are trying to phish their way into machines in various US power facilities, including nuclear power station operators.
It seems so far whoever behind the campaign has tried phishing and watering-hole attacks, but haven't got beyond corporate networks (which in critical infrastructure should be on separate networks from the operational systems).
The New York Times got wind of the intrusion attempts, getting a look at a joint Department of Homeland Security/FBI report.
The money quote from the story appears to be this:
There is no indication that hackers were able to jump from their victims’ computers into the control systems of the facilities, nor is it clear how many facilities were breached.
Spokespeople for one of the targets, the Wolf Creek Nuclear Operating Corporation (in charge of a facility near Burlington in Kansas) said it maintained separate networks for corporate and operations systems, so there was no risk to its power stations.
Bookmarks