2023年7月26日

分享這篇文章提供的新聞分享這篇文章獲獎安全研究小組揭示獨特的OPC UA利用框架和NAS漏洞在今年最大的黑客會議紐約,7月26日,2023 / Claroty從cyber-physical係統保護公司,今天宣布,Team82,其獲獎的研究團隊,下個月將來到拉斯維加斯舉行會談在美國黑帽和DEF CON,兩個最大的網絡安全會議。主任Team82的沙龍Brizinov脆弱性研究,和諾姆·摩西,脆弱性研究人員,將在每個顯示兩個交易日。課程包括:在過去的兩年裏,Team82一直在研究許多OPC-UA協議棧實現用於成千上萬的工業產品。摩西和Brizinov關注兩個主要攻擊向量:攻擊OPC-UA服務器和協議網關和攻擊OPC-UA客戶。研究產生了獨特的攻擊技術,目標是特定OPC-UA協議實現的缺陷,使Team82創建一個廣泛的vulns從拒絕服務到遠程代碼執行。例如,研究人員探索OPC-UA特性,比如方法調用處理,分割機製、認證處理,複雜的變異結構,監控項目,競爭條件,和許多更多。對於每一個規範的一部分,研究人員試圖了解其警告和利用他們為了實現遠端控製設備,信息泄漏,或拒絕服務攻擊。在這個演講,摩西和Brizinov將分享過程和方法,並釋放一個開源框架的所有技術和漏洞利用現代OPC-UA協議棧。NAS的痛苦:利用雲連接PWN你的NAS Pwn2Own全球2022年多倫多,Team82鏈接多個漏洞利用Synology和西方濫用漏洞數字NAS設備的設備,雲以及它們之間的相互信任。在回顧NAS設備的配對機製與西方數字(WD)和Synology雲平台,令人驚訝的是,研究人員發現,設備驗證雲使用的硬件標識符後由用戶遠程訪問他們的設備使用。 Using this, Team82 was able to impersonate any given NAS device and perform phishing attacks that yielded admin rights on any targeted WD or Synology device. Moshe and Brizinov will explain the pairing process of WD and Synology NAS. They will elaborate on the overall architecture of the cloud offering and focus on the vulnerabilities found, including ways to enumerate and impersonate all edge devices using certificate transparency log (CTL), and steal cloud proxy auth tokens. This enabled researchers to download every file saved on the NAS devices, alter or encrypt them, and bypass NAT/Firewall protection to achieve full remote code execution on all cloud-connected NAS (and to gain $$$ from Pwn2Own). Additionally, David Guffrey, principal biomed customer success manager at Claroty and former medical device cybersecurity program manager for Mass General Brigham, will keynote at the DEF CON BioHacking Village, along with Thermo Fisher senior strategist Nina Alli and CareFirst BlueCross BlueShield CISO Rob Suárez, in a session titled, " Securing the Whole System: Corpal to Corporate ." The keynote will take place on Friday, August 11 at 10:00 am PST. Visit Claroty's booth #1960 at Black Hat and learn more about where you can find Claroty in Las Vegas next month here . About Claroty Claroty empowers organizations to secure cyber-physical systems across industrial, healthcare, and commercial environments: the Extended Internet of Things (XIoT). The company's unified platform integrates with customers' existing infrastructure to provide a full range of controls for visibility, risk and vulnerability management, threat detection, and secure remote access. Backed by the world's largest investment firms and industrial automation vendors, Claroty is deployed by hundreds of organizations at thousands of sites globally. The company is headquartered in New York City and has a presence in Europe, Asia-Pacific, and Latin America. To learn more, visit claroty.com . SOURCE Claroty