News

Positive Technologies experts analyzed over 10,000 hack-for-hire and malware-related postings on darkweb markets. Among the key findings:

Demand for malware creation is three times greater than the supply
The most expensive ready-to-use "package" was malware targeting ATMs
The trend of multiple threat actors using the same malware is likely to complicate attribution of future attacks.

Positive Technologies specialists Leonid Krolle and Georgy Zaytsev have uncovered vulnerabilities in Dongguan Diqee 360 robotic vacuum cleaners. The security issues, found on Dongguan Diqee-branded vacuums, likely affect those made by the company and sold under other brands as well.

During penetration testing performed as an internal attacker, Positive Technologies researchers were able to obtain full control of infrastructure on all corporate networks they attempted to compromise. On only seven percent of systems could the difficulty of accessing critical resources be considered "moderate". Penetrating the network perimeter has also become easier over time; the difficulty of accessing the internal network was assessed as "trivial" in 56 percent of tests in 2017, compared to 27 percent in 2016.

Siemens and Positive Technologies have jointly tested PT Industrial Security Incident Manager (PT ISIM) from Positive Technologies for compatibility with Simatic NET, which is used for communication between Siemens industrial control system (ICS) components, servers, workstations, and PCs. The results of PT ISIM testing showed flawless connection and functioning, with no impact on ICS performance.