Security News Industrial Cobots Might Be The Next Big IoT Security Mess

[frogboy]

Researchers at IOActive have found nearly 50 vulnerabilities in industrial collaborative robots, machines that work side-by-side with people in manufacturing and other settings, that can be abused to possibly cause physical harm to workers, or even configured to spy on their surroundings.

The machines can be remotely tampered with to alter safety configurations that prevent them from operating outside a designated safety boundary, for example. Others that have built-in cameras and microphones can also be accessed and used for commercial espionage.

The researchers, Cesar Cerrudo and Lucas Apa, published a paper today that complements their initial research published in February with technical details on the vulnerabilities and proof-of-concept exploits, along with demonstrations. The researchers are also scheduled to do a talk on their findings Thursday at Hack In The Box Singapore.

Full Article. Industrial Cobots Might Be The Next Big IoT Security Mess

 

[NikolayfromRussia]

Era of terminators is coming

 

[frogboy]

Era of terminators is coming

It is a bit scary for sure.

 

[NikolayfromRussia]

It is a bit scary for sure.

John Connor will come to rescue us (if you watched a ,,Terminator,, movie you may know him)

 

[frogboy]

John Connor will come to rescue us (if you watched a ,,Terminator,, movie you may know him)

Yes there is hope afterall. Maybe.

 

[Winter Soldier]

Thanks Froggy for this interesting topic ( talking about my work is not a problem ... indeed my holidays are over )

Yes the possibility of that attacks are concrete. Also because many of these robots are often configured incorrectly, leaving that they are exposed on the Internet and thus vulnerable to the possibility of a remote attack, in my job we are facing similar problems.

This is something very similar to what we've seen in the last few months with routers, surveillance cameras and other IoT stuff detectable through simple online searches, such as those that allows you to make Shodan.

In the case of industrial robots, however, the danger is not tied to the possibility that someone can take control of the devices to exploit them for DDoS attacks. The risk is that the robot vulnerability can lead forms of sabotage.
The cyber-criminals could in fact change the operating parameters of the robot to insert defects in the products, or even become a danger to people who work in the same environments.

 

[In2an3_PpG]

Era of terminators is coming

At least they can not walk for now.

 

[NikolayfromRussia]

At least they can not walk for now.

Yes, at least we are safe for now but if they come we' ll run away or fight against them

 

[In2an3_PpG]

You can bet ill be

 

[NikolayfromRussia]

But seriously we don't know what can happen in near or far future. If hackers take control of these robots may bring troubles. Hope everything will be fine and robot will serve us, not we will serve robots

 

[In2an3_PpG]

But seriously we don't know what can happen in near or far future. If hackers take control of these robots may bring troubles. Hope everything will be fine and robot will serve us, not we will serve robots

Build the robots but do not include AI. Make it so humans control what robots do at all times. Do not get to the point where their thinking for themselves. That could be more troubling then hackers controlling them remotely.

 

[Winter Soldier]

But seriously we don't know what can happen in near or far future. If hackers take control of these robots may bring troubles. Hope everything will be fine and robot will serve us, not we will serve robots

Well, the best thing would be to avoid the online data transmission of the programming interface.
An industrial robot does not have to be always connected to the Internet, usually it is not necessary, just during remote management.
But one important thing, usually robots use proprietary management software ... not exactly easy to use and manipulate, that it is not Windows.
A criminal should well know the machine, by attacking it via a highly targeted attack.
Realistically it is a unlikely scenario, even if possible of course.