Damage comments on 'Unprecedented' Cyberattack cripples supermarket fridges across Europe as hackers activate automatic defrosting — delivery and store prices also impacted by incident

[–] Damage@slrpnk.net 3 points 1 day ago (7 children)

There's nothing as far as I know, even in industrial settings. Some companies are better than others, and some fields are better than others, but at the low level everyone does whatever the fuck they want. Always-connected teleservice routers and similar devices are everywhere, with outdated firmwares just waiting to be hacked. It's improving but very slowly.

permalink

fedilink

source

parent

hideshow 7 child comments

[–] a4ng3l@lemmy.world 4 points 1 day ago (6 children)

Erh we have the NIS2 directive… requirements are skyyyyyy high for critical infrastructure which is surprisingly a lot of industries. Among other things vulnerability management is a topic companies subject to NIS2 must cover. Not saying that it cannot happen to have outdated crap connected somewhere but the exposure is getting fast smaller and smaller.

permalink

fedilink

source

parent

hideshow 6 child comments

[–] squaresinger@lemmy.world 3 points 1 day ago

The problem as that these directives and standards are completely beside the point. They do manage a lot of security-relevant stuff, but in the end what's hacked isn't the documentation the standards require but the actual code running on the machine.

And there's pretty little that the standard can do against actual honest bugs and mistakes in the code.

permalink

fedilink

source

parent

[–] Damage@slrpnk.net 3 points 1 day ago (4 children)

Very limited scope

permalink

fedilink

source

parent

hideshow 4 child comments