Risky Business #850 -- Widespread AI-enabled attacks target Siemens PLCs
Runs 1:02:53. Streams from dts.podtrac.com only when you press play.
On this week’s show Patrick Gray and James Wilson are joined by guest co-host Ollie Whitehouse, the CTO of the UK’s NCSC, to talk through the week’s news, including: Iranian hackers take down a small-scale power generator in the UK Siemens PLCs in critical US sectors are also being targeted… We’re stumped on who could be behind that one, too. Microsoft fixed a CVSS 10 deserialisation bug in Entra before someone else found it and owned the planet Prompt injection isn’t going away LLMs are deceiving us meat sacks and it’s a worry Much, much more… This week’s show is brought to you by Okta.
Show notes from Risky Business.
Explained
The technology and terms in this story. Learn more
- TechnologyOT / ICS · Operational technology / industrial control systemsThe computers that run physical processes: factories, power grids, water plants, building systems.
- ConceptCVSS · Common Vulnerability Scoring SystemA 0–10 score for how severe a vulnerability is in theory.
- WeaknessInsecure deserializationTurning untrusted data back into program objects in a way that lets it run code.
- AttackPrompt injectionHiding instructions in content an AI reads, so it follows the attacker instead of its user.