US pipeline hacking signals growing cyber-security risk for energy system

76
8
Favorite

US pipeline hacking signals growing cyber-security risk for energy system

The Straits Times2021-05-18

WASHINGTON (NYTIMES) - The audacious ransomware attack that shut down a major fuel pipeline and sent Americans scrambling for petrol in the south-east last week was not the first time that hackers ...

Source Link

Disclaimer: Investing carries risk. This is not financial advice. The above content should not be regarded as an offer, recommendation, or solicitation on acquiring or disposing of any financial products, any associated discussions, comments, or posts by author or other users should not be considered as such either. It is solely for general information purpose only, which does not consider your own investment objectives, financial situations or needs. TTM assumes no responsibility or warranty for the accuracy and completeness of the information, investors should do their own research and may seek professional advice before investing.

Report

Comment（8）

Money Sprout
·2021-05-18
Raising some serious issues
Reply
Like
Report
Fold Replies
- Money Sprout:
  Lol
  2021-05-18
  Reply
  Report
WildFoE
·2021-05-18
Like n share [Cool]
Reply
Like
Report
LEEQF
·2021-05-18
Reply n like pls
Reply
Like
Report
Derrick0359
·2021-05-18
[Cool] [Cool]
Reply
Like
Report
Spear88
·2021-05-18
Good
Reply
Like
Report
Marcus1993
·2021-05-18
Wow
Reply
Like
Report
KingKong88
·2021-05-18
It affects every sector, not just energy
Reply
2
Report
skyel
·2021-05-18
Humans always like to wait for things to happen before act on them or sometimes ignore it. I hope it is an expensive lesson learned.
Reply
6
Report
Fold Replies
- Darylzhuo:
  Good
  2021-05-18
  Reply
  Report
- EeC:
  Very wisewords
  2021-05-18
  Reply
  Report
- jw321:
  its like delaying to buy the dip
  2021-05-18
  Reply
  Report
View more 1 comments

Most Discussed

7x24

All

Terms and Conditions·Privacy Policy

Company: TTMF Limited. Tech supported by Xiangshang Yixin.

Email：uservice@ttm.financial

{"i18n":{"language":"en_US"},"data":{"share":"https://ttm.financial/m/news/2136190968?lang=en_US&edition=fundamental","thumbnail":"","is_english":true,"pubTime":"2021-05-18 11:40","share_image_url":"https://static.laohu8.com/e9f99090a1c2ed51c021029395664489","id":"2136190968","market":"us","top_or_hot":-1,"title":"US pipeline hacking signals growing cyber-security risk for energy system","media":"The Straits Times","content":"<div>\n<p>WASHINGTON (NYTIMES) - The audacious ransomware attack that shut down a major fuel pipeline and sent Americans scrambling for petrol in the south-east last week was not the first time that hackers ...</p>\n\n<a href=\"http://www.straitstimes.com/tech/tech-news/us-pipeline-hacking-signals-growing-cyber-security-risk-for-energy-system-0\">Source Link</a>\n\n</div>\n","source":"straits_highlight","html":"<!DOCTYPE html>\n<html>\n<head>\n<meta http-equiv=\"Content-Type\" content=\"text/html; charset=utf-8\" />\n<meta name=\"viewport\" content=\"width=device-width,initial-scale=1.0,minimum-scale=1.0,maximum-scale=1.0,user-scalable=no\"/>\n<meta name=\"format-detection\" content=\"telephone=no,email=no,address=no\" />\n<title>US pipeline hacking signals growing cyber-security risk for energy system</title>\n<style type=\"text/css\">\na,abbr,acronym,address,applet,article,aside,audio,b,big,blockquote,body,canvas,caption,center,cite,code,dd,del,details,dfn,div,dl,dt,\nem,embed,fieldset,figcaption,figure,footer,form,h1,h2,h3,h4,h5,h6,header,hgroup,html,i,iframe,img,ins,kbd,label,legend,li,mark,menu,nav,\nobject,ol,output,p,pre,q,ruby,s,samp,section,small,span,strike,strong,sub,summary,sup,table,tbody,td,tfoot,th,thead,time,tr,tt,u,ul,var,video{ font:inherit;margin:0;padding:0;vertical-align:baseline;border:0 }\nbody{ font-size:16px; line-height:1.5; color:#999; background:transparent; }\n.wrapper{ overflow:hidden;word-break:break-all;padding:10px; }\nh1,h2{ font-weight:normal; line-height:1.35; margin-bottom:.6em; }\nh3,h4,h5,h6{ line-height:1.35; margin-bottom:1em; }\nh1{ font-size:24px; }\nh2{ font-size:20px; }\nh3{ font-size:18px; }\nh4{ font-size:16px; }\nh5{ font-size:14px; }\nh6{ font-size:12px; }\np,ul,ol,blockquote,dl,table{ margin:1.2em 0; }\nul,ol{ margin-left:2em; }\nul{ list-style:disc; }\nol{ list-style:decimal; }\nli,li p{ margin:10px 0;}\nimg{ max-width:100%;display:block;margin:0 auto 1em; }\nblockquote{ color:#B5B2B1; border-left:3px solid #aaa; padding:1em; }\nstrong,b{font-weight:bold;}\nem,i{font-style:italic;}\ntable{ width:100%;border-collapse:collapse;border-spacing:1px;margin:1em 0;font-size:.9em; }\nth,td{ padding:5px;text-align:left;border:1px solid #aaa; }\nth{ font-weight:bold;background:#5d5d5d; }\n.symbol-link{font-weight:bold;}\n/* header{ border-bottom:1px solid #494756; } */\n.title{ margin:0 0 8px;line-height:1.3;color:#ddd; }\n.meta {color:#5e5c6d;font-size:13px;margin:0 0 .5em; }\na{text-decoration:none; color:#2a4b87;}\n.meta .head { display: inline-block; overflow: hidden}\n.head .h-thumb { width: 30px; height: 30px; margin: 0; padding: 0; border-radius: 50%; float: left;}\n.head .h-content { margin: 0; padding: 0 0 0 9px; float: left;}\n.head .h-name {font-size: 13px; color: #eee; margin: 0;}\n.head .h-time {font-size: 11px; color: #7E829C; margin: 0;line-height: 11px;}\n.small {font-size: 12.5px; display: inline-block; transform: scale(0.9); -webkit-transform: scale(0.9); transform-origin: left; -webkit-transform-origin: left;}\n.smaller {font-size: 12.5px; display: inline-block; transform: scale(0.8); -webkit-transform: scale(0.8); transform-origin: left; -webkit-transform-origin: left;}\n.bt-text {font-size: 12px;margin: 1.5em 0 0 0}\n.bt-text p {margin: 0}\n</style>\n</head>\n<body>\n<div class=\"wrapper\">\n<header>\n<h2 class=\"title\">\nUS pipeline hacking signals growing cyber-security risk for energy system\n</h2>\n\n<h4 class=\"meta\">\n\n\n2021-05-18 11:40 GMT+8&nbsp;&nbsp;&nbsp;<a href=http://www.straitstimes.com/tech/tech-news/us-pipeline-hacking-signals-growing-cyber-security-risk-for-energy-system-0><strong>The Straits Times</strong></a>\n\n\n</h4>\n\n</header>\n<article>\n<div>\n<p>WASHINGTON (NYTIMES) - The audacious ransomware attack that shut down a major fuel pipeline and sent Americans scrambling for petrol in the south-east last week was not the first time that hackers ...</p>\n\n<a href=\"http://www.straitstimes.com/tech/tech-news/us-pipeline-hacking-signals-growing-cyber-security-risk-for-energy-system-0\">Source Link</a>\n\n</div>\n\n\n</article>\n</div>\n</body>\n</html>\n","isBrief":false,"type":0,"news_type":1,"symbol":null,"symbol_name":null,"start_time":0,"source_url":"http://www.straitstimes.com/tech/tech-news/us-pipeline-hacking-signals-growing-cyber-security-risk-for-energy-system-0","article_id":"2136190968","we_media_id":null,"thumbnails":[],"rights":{"source":"straits_highlight","url":"http://www.straitstimes.com/tech/tech-news/us-pipeline-hacking-signals-growing-cyber-security-risk-for-energy-system-0","rn_cache_url":null,"customStyle":"","selectors":"body","filters":"","directOrigin":true},"url":"https://stock-news.laohu8.com/highlight/detail?id=2136190968","pubTimestamp":1621309200,"sourceInfo":{"source_id":"straits_highlight","name":"Straits Times"},"weMediaInfo":null,"summary":"WASHINGTON (NYTIMES) - The audacious ransomware attack that shut down a major fuel pipeline and sent","collect":0,"end_time":0,"defaultTopTitle":"straitstimes.com","property":[],"viewcount":null,"language":"en","relate_stocks":{},"translate_title":"美国管道黑客攻击预示能源系统网络安全风险加大","themeId":null,"isJumpTheme":false,"ttsUrl":null,"symbols_score_info":{},"content_text":"WASHINGTON (NYTIMES) - The audacious ransomware attack that shut down a major fuel pipeline and sent Americans scrambling for petrol in the south-east last week was not the first time that hackers have disrupted the United States' ageing, vulnerable energy infrastructure. And it is unlikely to be the last.Across the globe, cyber attackers are increasingly taking aim at the energy systems that underpin modern society.A February report from IBM found that the energy industry was the third-most targeted sector for such attacks last year, behind only finance and manufacturing. That was up from ninth place in 2019.\"This should be a wake-up call,\" said Mr Jonathon Monken, a principal at energy consulting firm Converge Strategies.\"When you look at what's most likely to cause disruptions to energy companies today, I think you have to put cyber-security risks at the top.\"Despite years of warnings, America's vast network of pipelines, electric grids and power plants remains acutely vulnerable to cyber attacks with the potential to disrupt energy supplies for millions of people.Dealing with those risks, analysts said, will pose a major challenge for the Biden administration as it seeks hundreds of billions of dollars to modernise the nation's energy infrastructure and transition to cleaner sources of energy to address climate change.Regulators are increasingly poised to step in.Last week, Mr Richard Glick, the chairman of the Federal Energy Regulatory Commission, said it was time to establish mandatory cyber-security standards for the nation's nearly 4.8 million km of oil and gas pipelines, similar to those currently found in the electricity sector.\"Simply encouraging pipelines to voluntarily adopt best practices is an inadequate response to the ever increasing number and sophistication of malevolent cyber actors,\" Mr Glick said in a statement.The risks to the nation's energy systems are widespread and varied. Many oil and gas pipelines, for instance, rely on decades-old control systems that are not well defended against more sophisticated cyber attacks and cannot be easily updated.And it is not just pipelines. As electric grid operators harness a growing array of digital technologies to help manage the flow of power and cut planet-warming emissions - such as smart thermostats, or far-flung yet interconnected networks of solar arrays - hackers may find new entry points to exploit.The shutdown on May 7 of the Colonial Pipeline, which stretches 8,850km from Texas to New Jersey and transports 45 per cent of the East Coast's fuel supplies, illustrates how devastating such attacks can be.On May 8, Colonial acknowledged that its corporate computer systems had been hit by a ransomware attack, in which criminal groups hold data hostage until the victim pays a ransom.A tanker delivering fuel to a Speedway petrol station in Alexandria, Virginia, last Thursday. A ransomware attack had shut down a major fuel pipeline in America and sent people scrambling for petrol in the south-east last week. PHOTO: EPA-EFEThe company said that it had shut down the pipeline as a precaution, apparently for fear that the hackers might have obtained information that would enable them to attack parts of the pipeline itself.Colonial said last Wednesday that it had started to resume pipeline operations, although it would take several days to restore full service. But throughout the south-east, panicked Americans were racing to stock up on petrol, causing thousands of petrol stations to run out of fuel.While Colonial has yet to explain exactly what triggered the pipeline shutdown, experts said there were plenty of vulnerabilities lurking throughout America's energy infrastructure.Last year, the Cybersecurity and Infrastructure Security Agency reported a ransomware attack on a natural gas compression facility that caused a shutdown of the facility for two days.In 2018, several natural gas pipeline operators reported that a system that processes customer transactions had been attacked, leading to service disruptions.But bigger risks lurk: In 2016, hackers knocked out large sections of the power grid in Ukraine, in what was thought to be the first intentional blackout triggered by a cyber attack.At the time, the Obama administration warned that America's electric utilities were not immune to similar attacks.In the past, energy companies typically kept the operational systems that run pipelines or power plants disconnected, or \"air gapped\", from the broader Internet, which meant that hackers could not easily gain access to the most critical infrastructure.But increasingly that is no longer the case, as companies install more sophisticated monitoring and diagnostics software that helps them operate these systems more efficiently. That potentially creates new cyber-security risks.\"Now these systems are all interconnected in ways that the companies themselves do not always fully understand,\" said Mr Marty Edwards, vice-president of operational technology for Tenable, a cyber-security firm.\"That provides an opportunity for attacks in one area to propagate elsewhere.\"Many industrial control systems were installed decades ago and run on outdated software, which means that even finding programmers to upgrade the systems can be a challenge.And the operators of vital energy infrastructure - such as pipelines, refineries or power plants - are often reluctant to shut down the flow of fuel or power for extended periods of time to install frequent security patches.Making things harder still, analysts said, many companies do not always have a good sense of exactly when and where it is worthwhile to spend money on costly new cyber-security defences, in part because of a lack of readily available data on which types of risks they are most likely to face.\"Companies don't always release a lot of information publicly\" about the threats they are seeing, said Mr Padraic O'Reilly, a co-founder of CyberSaint Security, who works with pipelines and critical infrastructure on cyber security.\"That can make it hard as an industry to know where to invest.\"Analysts said that the nation's electric utilities and grid operators were typically further ahead in preparing for cyber attacks than the oil and gas industry, in part because federal regulators have long required cyber-security standards for the backbone of the nation's power grid.Still, vulnerabilities remain.\"Part of it is the sheer complexity of the grid,\" said Mr Reid Sawyer, managing director of the US cyber-consulting practice at Marsh, an insurance firm.Not all levels of the grid face mandatory standards, for instance, and there are more than 3,000 utilities in the country with varying cyber-security practices.Energy companies may never be able to defend themselves against every single potential cyber attack out there, experts said. Instead, businesses and policymakers will need to design broader energy systems that are resilient to attacks and potential shutdowns, by, for instance, building in more redundancies or overrides.\"It's an old saying in cyber security: The people working defence have to be right 100 per cent of the time, while the attackers have to be right only once,\" Mr Monken said.\"That means we have to think a lot harder about contingencies when those defences fail.\"","kind":null,"is_publish_news":false,"is_publish_highlight":true,"is_publish_live":null,"is_publish_wemedia":null,"editions":null,"column":"","sentiment":"","news_tag":"","news_rank":0,"symbols":[],"gpt_button":1},"commentList":[{"id":195764555,"gmtCreate":1621317569977,"gmtModify":1704355694781,"author":{"id":"3567511757211423","authorId":"3567511757211423","name":"Money Sprout","avatar":"https://community-static.tradeup.com/news/a90f46b85a1738ed3c9b09de55cb7371","vip":1,"hat":"https://static.tigerbbs.com/b073a07f77dbe6b3bec6b12311fde6bd","crmLevel":7,"crmLevelSwitch":1},"htmlText":"Raising some serious issues","listText":"Raising some serious issues","text":"Raising some serious issues","images":[],"top":1,"highlighted":1,"essential":1,"paper":1,"likeSize":0,"commentSize":1,"repostSize":0,"link":"https://ttm.financial/post/195764555","repostId":2136190968,"repostType":4,"repost":{"id":"2136190968","pubTimestamp":1621309200,"share":"https://www.laohu8.com/m/news/2136190968?lang=&edition=full","pubTime":"2021-05-18 11:40","market":"us","language":"en","title":"US pipeline hacking signals growing cyber-security risk for energy system","url":"https://stock-news.laohu8.com/highlight/detail?id=2136190968","media":"The Straits Times","summary":"WASHINGTON (NYTIMES) - The audacious ransomware attack that shut down a major fuel pipeline and sent","content":"<div>\n<p>WASHINGTON (NYTIMES) - The audacious ransomware attack that shut down a major fuel pipeline and sent Americans scrambling for petrol in the south-east last week was not the first time that hackers ...</p>\n\n<a href=\"http://www.straitstimes.com/tech/tech-news/us-pipeline-hacking-signals-growing-cyber-security-risk-for-energy-system-0\">Web Link</a>\n\n</div>\n","source":"straits_highlight","collect":0,"html":"<!DOCTYPE html>\n<html>\n<head>\n<meta http-equiv=\"Content-Type\" content=\"text/html; charset=utf-8\" />\n<meta name=\"viewport\" content=\"width=device-width,initial-scale=1.0,minimum-scale=1.0,maximum-scale=1.0,user-scalable=no\"/>\n<meta name=\"format-detection\" content=\"telephone=no,email=no,address=no\" />\n<title>US pipeline hacking signals growing cyber-security risk for energy system</title>\n<style type=\"text/css\">\na,abbr,acronym,address,applet,article,aside,audio,b,big,blockquote,body,canvas,caption,center,cite,code,dd,del,details,dfn,div,dl,dt,\nem,embed,fieldset,figcaption,figure,footer,form,h1,h2,h3,h4,h5,h6,header,hgroup,html,i,iframe,img,ins,kbd,label,legend,li,mark,menu,nav,\nobject,ol,output,p,pre,q,ruby,s,samp,section,small,span,strike,strong,sub,summary,sup,table,tbody,td,tfoot,th,thead,time,tr,tt,u,ul,var,video{ font:inherit;margin:0;padding:0;vertical-align:baseline;border:0 }\nbody{ font-size:16px; line-height:1.5; color:#999; background:transparent; }\n.wrapper{ overflow:hidden;word-break:break-all;padding:10px; }\nh1,h2{ font-weight:normal; line-height:1.35; margin-bottom:.6em; }\nh3,h4,h5,h6{ line-height:1.35; margin-bottom:1em; }\nh1{ font-size:24px; }\nh2{ font-size:20px; }\nh3{ font-size:18px; }\nh4{ font-size:16px; }\nh5{ font-size:14px; }\nh6{ font-size:12px; }\np,ul,ol,blockquote,dl,table{ margin:1.2em 0; }\nul,ol{ margin-left:2em; }\nul{ list-style:disc; }\nol{ list-style:decimal; }\nli,li p{ margin:10px 0;}\nimg{ max-width:100%;display:block;margin:0 auto 1em; }\nblockquote{ color:#B5B2B1; border-left:3px solid #aaa; padding:1em; }\nstrong,b{font-weight:bold;}\nem,i{font-style:italic;}\ntable{ width:100%;border-collapse:collapse;border-spacing:1px;margin:1em 0;font-size:.9em; }\nth,td{ padding:5px;text-align:left;border:1px solid #aaa; }\nth{ font-weight:bold;background:#5d5d5d; }\n.symbol-link{font-weight:bold;}\n/* header{ border-bottom:1px solid #494756; } */\n.title{ margin:0 0 8px;line-height:1.3;color:#ddd; }\n.meta {color:#5e5c6d;font-size:13px;margin:0 0 .5em; }\na{text-decoration:none; color:#2a4b87;}\n.meta .head { display: inline-block; overflow: hidden}\n.head .h-thumb { width: 30px; height: 30px; margin: 0; padding: 0; border-radius: 50%; float: left;}\n.head .h-content { margin: 0; padding: 0 0 0 9px; float: left;}\n.head .h-name {font-size: 13px; color: #eee; margin: 0;}\n.head .h-time {font-size: 11px; color: #7E829C; margin: 0;line-height: 11px;}\n.small {font-size: 12.5px; display: inline-block; transform: scale(0.9); -webkit-transform: scale(0.9); transform-origin: left; -webkit-transform-origin: left;}\n.smaller {font-size: 12.5px; display: inline-block; transform: scale(0.8); -webkit-transform: scale(0.8); transform-origin: left; -webkit-transform-origin: left;}\n.bt-text {font-size: 12px;margin: 1.5em 0 0 0}\n.bt-text p {margin: 0}\n</style>\n</head>\n<body>\n<div class=\"wrapper\">\n<header>\n<h2 class=\"title\">\nUS pipeline hacking signals growing cyber-security risk for energy system\n</h2>\n\n<h4 class=\"meta\">\n\n\n2021-05-18 11:40 GMT+8&nbsp;&nbsp;&nbsp;<a href=http://www.straitstimes.com/tech/tech-news/us-pipeline-hacking-signals-growing-cyber-security-risk-for-energy-system-0><strong>The Straits Times</strong></a>\n\n\n</h4>\n\n</header>\n<article>\n<div>\n<p>WASHINGTON (NYTIMES) - The audacious ransomware attack that shut down a major fuel pipeline and sent Americans scrambling for petrol in the south-east last week was not the first time that hackers ...</p>\n\n<a href=\"http://www.straitstimes.com/tech/tech-news/us-pipeline-hacking-signals-growing-cyber-security-risk-for-energy-system-0\">Web Link</a>\n\n</div>\n\n\n</article>\n</div>\n</body>\n</html>\n","type":0,"thumbnail":"","relate_stocks":{},"source_url":"http://www.straitstimes.com/tech/tech-news/us-pipeline-hacking-signals-growing-cyber-security-risk-for-energy-system-0","is_english":true,"share_image_url":"https://static.laohu8.com/e9f99090a1c2ed51c021029395664489","article_id":"2136190968","content_text":"WASHINGTON (NYTIMES) - The audacious ransomware attack that shut down a major fuel pipeline and sent Americans scrambling for petrol in the south-east last week was not the first time that hackers have disrupted the United States' ageing, vulnerable energy infrastructure. And it is unlikely to be the last.Across the globe, cyber attackers are increasingly taking aim at the energy systems that underpin modern society.A February report from IBM found that the energy industry was the third-most targeted sector for such attacks last year, behind only finance and manufacturing. That was up from ninth place in 2019.\"This should be a wake-up call,\" said Mr Jonathon Monken, a principal at energy consulting firm Converge Strategies.\"When you look at what's most likely to cause disruptions to energy companies today, I think you have to put cyber-security risks at the top.\"Despite years of warnings, America's vast network of pipelines, electric grids and power plants remains acutely vulnerable to cyber attacks with the potential to disrupt energy supplies for millions of people.Dealing with those risks, analysts said, will pose a major challenge for the Biden administration as it seeks hundreds of billions of dollars to modernise the nation's energy infrastructure and transition to cleaner sources of energy to address climate change.Regulators are increasingly poised to step in.Last week, Mr Richard Glick, the chairman of the Federal Energy Regulatory Commission, said it was time to establish mandatory cyber-security standards for the nation's nearly 4.8 million km of oil and gas pipelines, similar to those currently found in the electricity sector.\"Simply encouraging pipelines to voluntarily adopt best practices is an inadequate response to the ever increasing number and sophistication of malevolent cyber actors,\" Mr Glick said in a statement.The risks to the nation's energy systems are widespread and varied. Many oil and gas pipelines, for instance, rely on decades-old control systems that are not well defended against more sophisticated cyber attacks and cannot be easily updated.And it is not just pipelines. As electric grid operators harness a growing array of digital technologies to help manage the flow of power and cut planet-warming emissions - such as smart thermostats, or far-flung yet interconnected networks of solar arrays - hackers may find new entry points to exploit.The shutdown on May 7 of the Colonial Pipeline, which stretches 8,850km from Texas to New Jersey and transports 45 per cent of the East Coast's fuel supplies, illustrates how devastating such attacks can be.On May 8, Colonial acknowledged that its corporate computer systems had been hit by a ransomware attack, in which criminal groups hold data hostage until the victim pays a ransom.A tanker delivering fuel to a Speedway petrol station in Alexandria, Virginia, last Thursday. A ransomware attack had shut down a major fuel pipeline in America and sent people scrambling for petrol in the south-east last week. PHOTO: EPA-EFEThe company said that it had shut down the pipeline as a precaution, apparently for fear that the hackers might have obtained information that would enable them to attack parts of the pipeline itself.Colonial said last Wednesday that it had started to resume pipeline operations, although it would take several days to restore full service. But throughout the south-east, panicked Americans were racing to stock up on petrol, causing thousands of petrol stations to run out of fuel.While Colonial has yet to explain exactly what triggered the pipeline shutdown, experts said there were plenty of vulnerabilities lurking throughout America's energy infrastructure.Last year, the Cybersecurity and Infrastructure Security Agency reported a ransomware attack on a natural gas compression facility that caused a shutdown of the facility for two days.In 2018, several natural gas pipeline operators reported that a system that processes customer transactions had been attacked, leading to service disruptions.But bigger risks lurk: In 2016, hackers knocked out large sections of the power grid in Ukraine, in what was thought to be the first intentional blackout triggered by a cyber attack.At the time, the Obama administration warned that America's electric utilities were not immune to similar attacks.In the past, energy companies typically kept the operational systems that run pipelines or power plants disconnected, or \"air gapped\", from the broader Internet, which meant that hackers could not easily gain access to the most critical infrastructure.But increasingly that is no longer the case, as companies install more sophisticated monitoring and diagnostics software that helps them operate these systems more efficiently. That potentially creates new cyber-security risks.\"Now these systems are all interconnected in ways that the companies themselves do not always fully understand,\" said Mr Marty Edwards, vice-president of operational technology for Tenable, a cyber-security firm.\"That provides an opportunity for attacks in one area to propagate elsewhere.\"Many industrial control systems were installed decades ago and run on outdated software, which means that even finding programmers to upgrade the systems can be a challenge.And the operators of vital energy infrastructure - such as pipelines, refineries or power plants - are often reluctant to shut down the flow of fuel or power for extended periods of time to install frequent security patches.Making things harder still, analysts said, many companies do not always have a good sense of exactly when and where it is worthwhile to spend money on costly new cyber-security defences, in part because of a lack of readily available data on which types of risks they are most likely to face.\"Companies don't always release a lot of information publicly\" about the threats they are seeing, said Mr Padraic O'Reilly, a co-founder of CyberSaint Security, who works with pipelines and critical infrastructure on cyber security.\"That can make it hard as an industry to know where to invest.\"Analysts said that the nation's electric utilities and grid operators were typically further ahead in preparing for cyber attacks than the oil and gas industry, in part because federal regulators have long required cyber-security standards for the backbone of the nation's power grid.Still, vulnerabilities remain.\"Part of it is the sheer complexity of the grid,\" said Mr Reid Sawyer, managing director of the US cyber-consulting practice at Marsh, an insurance firm.Not all levels of the grid face mandatory standards, for instance, and there are more than 3,000 utilities in the country with varying cyber-security practices.Energy companies may never be able to defend themselves against every single potential cyber attack out there, experts said. Instead, businesses and policymakers will need to design broader energy systems that are resilient to attacks and potential shutdowns, by, for instance, building in more redundancies or overrides.\"It's an old saying in cyber security: The people working defence have to be right 100 per cent of the time, while the attackers have to be right only once,\" Mr Monken said.\"That means we have to think a lot harder about contingencies when those defences fail.\"","news_type":1},"isVote":1,"likeStatus":false,"favoriteStatus":false,"reportStatus":false,"tweetType":1,"comments":[{"id":4364326,"gmtCreate":1621317581105,"gmtModify":1680789440869,"authorId":3567511757211423,"author":{"id":3567511757211423,"authorId":3567511757211423,"name":"Money Sprout","avatar":"https://community-static.tradeup.com/news/a90f46b85a1738ed3c9b09de55cb7371","vip":1,"currentWearingBadge":{"badgeId":"23f878ed27704312ae41c7f17e73b319-5","templateUuid":"23f878ed27704312ae41c7f17e73b319","name":"Annualised return","description":"Top 5%","bigImgUrl":"https://community-static.tradeup.com/news/28b025635697d2f8cba3e94ec9f33231","smallImgUrl":"https://community-static.tradeup.com/news/b9d0f04877ffafa61d3f0d06efb58d87","grayImgUrl":"https://community-static.tradeup.com/news/0b3045db9a2ba37916c82e771c62bd6c","redirectLinkEnabled":1,"redirectLink":"https://www.tigerbrokers.com.sg/activity/market/2023/stock-contest?adcode=StockContest2023","hasAllocated":1,"isWearing":1,"stampPosition":0,"hasStamp":0,"allocationCount":1,"allocatedDate":"2024.06.13","individualDisplayEnabled":0,"individualDisplaySort":0,"categoryType":5300},"crmLevel":7,"crmLevelSwitch":1,"individualDisplayBadges":[]},"repliedAuthorId":0,"objectId":195764555,"type":1,"supId":0,"prevId":0,"content":"Lol","text":"Lol","html":"Lol"}],"langContent":"EN"},{"id":195786338,"gmtCreate":1621316273624,"gmtModify":1704355675700,"author":{"id":"3582681863367126","authorId":"3582681863367126","name":"WildFoE","avatar":"https://static.tigerbbs.com/67af813b31febdb58805e26e317209f2","vip":1,"crmLevel":2,"crmLevelSwitch":0},"htmlText":"Like n share [Cool]&nbsp;","listText":"Like n share [Cool]&nbsp;","text":"Like n share [Cool]","images":[],"top":1,"highlighted":1,"essential":1,"paper":1,"likeSize":0,"commentSize":0,"repostSize":0,"link":"https://ttm.financial/post/195786338","repostId":2136190968,"repostType":4,"repost":{"id":"2136190968","pubTimestamp":1621309200,"share":"https://www.laohu8.com/m/news/2136190968?lang=&edition=full","pubTime":"2021-05-18 11:40","market":"us","language":"en","title":"US pipeline hacking signals growing cyber-security risk for energy system","url":"https://stock-news.laohu8.com/highlight/detail?id=2136190968","media":"The Straits Times","summary":"WASHINGTON (NYTIMES) - The audacious ransomware attack that shut down a major fuel pipeline and sent","content":"<div>\n<p>WASHINGTON (NYTIMES) - The audacious ransomware attack that shut down a major fuel pipeline and sent Americans scrambling for petrol in the south-east last week was not the first time that hackers ...</p>\n\n<a href=\"http://www.straitstimes.com/tech/tech-news/us-pipeline-hacking-signals-growing-cyber-security-risk-for-energy-system-0\">Web Link</a>\n\n</div>\n","source":"straits_highlight","collect":0,"html":"<!DOCTYPE html>\n<html>\n<head>\n<meta http-equiv=\"Content-Type\" content=\"text/html; charset=utf-8\" />\n<meta name=\"viewport\" content=\"width=device-width,initial-scale=1.0,minimum-scale=1.0,maximum-scale=1.0,user-scalable=no\"/>\n<meta name=\"format-detection\" content=\"telephone=no,email=no,address=no\" />\n<title>US pipeline hacking signals growing cyber-security risk for energy system</title>\n<style type=\"text/css\">\na,abbr,acronym,address,applet,article,aside,audio,b,big,blockquote,body,canvas,caption,center,cite,code,dd,del,details,dfn,div,dl,dt,\nem,embed,fieldset,figcaption,figure,footer,form,h1,h2,h3,h4,h5,h6,header,hgroup,html,i,iframe,img,ins,kbd,label,legend,li,mark,menu,nav,\nobject,ol,output,p,pre,q,ruby,s,samp,section,small,span,strike,strong,sub,summary,sup,table,tbody,td,tfoot,th,thead,time,tr,tt,u,ul,var,video{ font:inherit;margin:0;padding:0;vertical-align:baseline;border:0 }\nbody{ font-size:16px; line-height:1.5; color:#999; background:transparent; }\n.wrapper{ overflow:hidden;word-break:break-all;padding:10px; }\nh1,h2{ font-weight:normal; line-height:1.35; margin-bottom:.6em; }\nh3,h4,h5,h6{ line-height:1.35; margin-bottom:1em; }\nh1{ font-size:24px; }\nh2{ font-size:20px; }\nh3{ font-size:18px; }\nh4{ font-size:16px; }\nh5{ font-size:14px; }\nh6{ font-size:12px; }\np,ul,ol,blockquote,dl,table{ margin:1.2em 0; }\nul,ol{ margin-left:2em; }\nul{ list-style:disc; }\nol{ list-style:decimal; }\nli,li p{ margin:10px 0;}\nimg{ max-width:100%;display:block;margin:0 auto 1em; }\nblockquote{ color:#B5B2B1; border-left:3px solid #aaa; padding:1em; }\nstrong,b{font-weight:bold;}\nem,i{font-style:italic;}\ntable{ width:100%;border-collapse:collapse;border-spacing:1px;margin:1em 0;font-size:.9em; }\nth,td{ padding:5px;text-align:left;border:1px solid #aaa; }\nth{ font-weight:bold;background:#5d5d5d; }\n.symbol-link{font-weight:bold;}\n/* header{ border-bottom:1px solid #494756; } */\n.title{ margin:0 0 8px;line-height:1.3;color:#ddd; }\n.meta {color:#5e5c6d;font-size:13px;margin:0 0 .5em; }\na{text-decoration:none; color:#2a4b87;}\n.meta .head { display: inline-block; overflow: hidden}\n.head .h-thumb { width: 30px; height: 30px; margin: 0; padding: 0; border-radius: 50%; float: left;}\n.head .h-content { margin: 0; padding: 0 0 0 9px; float: left;}\n.head .h-name {font-size: 13px; color: #eee; margin: 0;}\n.head .h-time {font-size: 11px; color: #7E829C; margin: 0;line-height: 11px;}\n.small {font-size: 12.5px; display: inline-block; transform: scale(0.9); -webkit-transform: scale(0.9); transform-origin: left; -webkit-transform-origin: left;}\n.smaller {font-size: 12.5px; display: inline-block; transform: scale(0.8); -webkit-transform: scale(0.8); transform-origin: left; -webkit-transform-origin: left;}\n.bt-text {font-size: 12px;margin: 1.5em 0 0 0}\n.bt-text p {margin: 0}\n</style>\n</head>\n<body>\n<div class=\"wrapper\">\n<header>\n<h2 class=\"title\">\nUS pipeline hacking signals growing cyber-security risk for energy system\n</h2>\n\n<h4 class=\"meta\">\n\n\n2021-05-18 11:40 GMT+8&nbsp;&nbsp;&nbsp;<a href=http://www.straitstimes.com/tech/tech-news/us-pipeline-hacking-signals-growing-cyber-security-risk-for-energy-system-0><strong>The Straits Times</strong></a>\n\n\n</h4>\n\n</header>\n<article>\n<div>\n<p>WASHINGTON (NYTIMES) - The audacious ransomware attack that shut down a major fuel pipeline and sent Americans scrambling for petrol in the south-east last week was not the first time that hackers ...</p>\n\n<a href=\"http://www.straitstimes.com/tech/tech-news/us-pipeline-hacking-signals-growing-cyber-security-risk-for-energy-system-0\">Web Link</a>\n\n</div>\n\n\n</article>\n</div>\n</body>\n</html>\n","type":0,"thumbnail":"","relate_stocks":{},"source_url":"http://www.straitstimes.com/tech/tech-news/us-pipeline-hacking-signals-growing-cyber-security-risk-for-energy-system-0","is_english":true,"share_image_url":"https://static.laohu8.com/e9f99090a1c2ed51c021029395664489","article_id":"2136190968","content_text":"WASHINGTON (NYTIMES) - The audacious ransomware attack that shut down a major fuel pipeline and sent Americans scrambling for petrol in the south-east last week was not the first time that hackers have disrupted the United States' ageing, vulnerable energy infrastructure. And it is unlikely to be the last.Across the globe, cyber attackers are increasingly taking aim at the energy systems that underpin modern society.A February report from IBM found that the energy industry was the third-most targeted sector for such attacks last year, behind only finance and manufacturing. That was up from ninth place in 2019.\"This should be a wake-up call,\" said Mr Jonathon Monken, a principal at energy consulting firm Converge Strategies.\"When you look at what's most likely to cause disruptions to energy companies today, I think you have to put cyber-security risks at the top.\"Despite years of warnings, America's vast network of pipelines, electric grids and power plants remains acutely vulnerable to cyber attacks with the potential to disrupt energy supplies for millions of people.Dealing with those risks, analysts said, will pose a major challenge for the Biden administration as it seeks hundreds of billions of dollars to modernise the nation's energy infrastructure and transition to cleaner sources of energy to address climate change.Regulators are increasingly poised to step in.Last week, Mr Richard Glick, the chairman of the Federal Energy Regulatory Commission, said it was time to establish mandatory cyber-security standards for the nation's nearly 4.8 million km of oil and gas pipelines, similar to those currently found in the electricity sector.\"Simply encouraging pipelines to voluntarily adopt best practices is an inadequate response to the ever increasing number and sophistication of malevolent cyber actors,\" Mr Glick said in a statement.The risks to the nation's energy systems are widespread and varied. Many oil and gas pipelines, for instance, rely on decades-old control systems that are not well defended against more sophisticated cyber attacks and cannot be easily updated.And it is not just pipelines. As electric grid operators harness a growing array of digital technologies to help manage the flow of power and cut planet-warming emissions - such as smart thermostats, or far-flung yet interconnected networks of solar arrays - hackers may find new entry points to exploit.The shutdown on May 7 of the Colonial Pipeline, which stretches 8,850km from Texas to New Jersey and transports 45 per cent of the East Coast's fuel supplies, illustrates how devastating such attacks can be.On May 8, Colonial acknowledged that its corporate computer systems had been hit by a ransomware attack, in which criminal groups hold data hostage until the victim pays a ransom.A tanker delivering fuel to a Speedway petrol station in Alexandria, Virginia, last Thursday. A ransomware attack had shut down a major fuel pipeline in America and sent people scrambling for petrol in the south-east last week. PHOTO: EPA-EFEThe company said that it had shut down the pipeline as a precaution, apparently for fear that the hackers might have obtained information that would enable them to attack parts of the pipeline itself.Colonial said last Wednesday that it had started to resume pipeline operations, although it would take several days to restore full service. But throughout the south-east, panicked Americans were racing to stock up on petrol, causing thousands of petrol stations to run out of fuel.While Colonial has yet to explain exactly what triggered the pipeline shutdown, experts said there were plenty of vulnerabilities lurking throughout America's energy infrastructure.Last year, the Cybersecurity and Infrastructure Security Agency reported a ransomware attack on a natural gas compression facility that caused a shutdown of the facility for two days.In 2018, several natural gas pipeline operators reported that a system that processes customer transactions had been attacked, leading to service disruptions.But bigger risks lurk: In 2016, hackers knocked out large sections of the power grid in Ukraine, in what was thought to be the first intentional blackout triggered by a cyber attack.At the time, the Obama administration warned that America's electric utilities were not immune to similar attacks.In the past, energy companies typically kept the operational systems that run pipelines or power plants disconnected, or \"air gapped\", from the broader Internet, which meant that hackers could not easily gain access to the most critical infrastructure.But increasingly that is no longer the case, as companies install more sophisticated monitoring and diagnostics software that helps them operate these systems more efficiently. That potentially creates new cyber-security risks.\"Now these systems are all interconnected in ways that the companies themselves do not always fully understand,\" said Mr Marty Edwards, vice-president of operational technology for Tenable, a cyber-security firm.\"That provides an opportunity for attacks in one area to propagate elsewhere.\"Many industrial control systems were installed decades ago and run on outdated software, which means that even finding programmers to upgrade the systems can be a challenge.And the operators of vital energy infrastructure - such as pipelines, refineries or power plants - are often reluctant to shut down the flow of fuel or power for extended periods of time to install frequent security patches.Making things harder still, analysts said, many companies do not always have a good sense of exactly when and where it is worthwhile to spend money on costly new cyber-security defences, in part because of a lack of readily available data on which types of risks they are most likely to face.\"Companies don't always release a lot of information publicly\" about the threats they are seeing, said Mr Padraic O'Reilly, a co-founder of CyberSaint Security, who works with pipelines and critical infrastructure on cyber security.\"That can make it hard as an industry to know where to invest.\"Analysts said that the nation's electric utilities and grid operators were typically further ahead in preparing for cyber attacks than the oil and gas industry, in part because federal regulators have long required cyber-security standards for the backbone of the nation's power grid.Still, vulnerabilities remain.\"Part of it is the sheer complexity of the grid,\" said Mr Reid Sawyer, managing director of the US cyber-consulting practice at Marsh, an insurance firm.Not all levels of the grid face mandatory standards, for instance, and there are more than 3,000 utilities in the country with varying cyber-security practices.Energy companies may never be able to defend themselves against every single potential cyber attack out there, experts said. Instead, businesses and policymakers will need to design broader energy systems that are resilient to attacks and potential shutdowns, by, for instance, building in more redundancies or overrides.\"It's an old saying in cyber security: The people working defence have to be right 100 per cent of the time, while the attackers have to be right only once,\" Mr Monken said.\"That means we have to think a lot harder about contingencies when those defences fail.\"","news_type":1},"isVote":1,"likeStatus":false,"favoriteStatus":false,"reportStatus":false,"tweetType":1,"langContent":"EN"},{"id":195715456,"gmtCreate":1621315341175,"gmtModify":1704355664925,"author":{"id":"3572235673675008","authorId":"3572235673675008","name":"LEEQF","avatar":"https://static.tigerbbs.com/ead66a2c538631d15658309f808c7d40","vip":1,"hat":"https://static.tigerbbs.com/b0a2963eb37c60c5d6d4a8dbcd266952","crmLevel":3,"crmLevelSwitch":0},"htmlText":"Reply n like pls","listText":"Reply n like pls","text":"Reply n like pls","images":[],"top":1,"highlighted":1,"essential":1,"paper":1,"likeSize":0,"commentSize":0,"repostSize":0,"link":"https://ttm.financial/post/195715456","repostId":2136190968,"repostType":4,"repost":{"id":"2136190968","pubTimestamp":1621309200,"share":"https://www.laohu8.com/m/news/2136190968?lang=&edition=full","pubTime":"2021-05-18 11:40","market":"us","language":"en","title":"US pipeline hacking signals growing cyber-security risk for energy system","url":"https://stock-news.laohu8.com/highlight/detail?id=2136190968","media":"The Straits Times","summary":"WASHINGTON (NYTIMES) - The audacious ransomware attack that shut down a major fuel pipeline and sent","content":"<div>\n<p>WASHINGTON (NYTIMES) - The audacious ransomware attack that shut down a major fuel pipeline and sent Americans scrambling for petrol in the south-east last week was not the first time that hackers ...</p>\n\n<a href=\"http://www.straitstimes.com/tech/tech-news/us-pipeline-hacking-signals-growing-cyber-security-risk-for-energy-system-0\">Web Link</a>\n\n</div>\n","source":"straits_highlight","collect":0,"html":"<!DOCTYPE html>\n<html>\n<head>\n<meta http-equiv=\"Content-Type\" content=\"text/html; charset=utf-8\" />\n<meta name=\"viewport\" content=\"width=device-width,initial-scale=1.0,minimum-scale=1.0,maximum-scale=1.0,user-scalable=no\"/>\n<meta name=\"format-detection\" content=\"telephone=no,email=no,address=no\" />\n<title>US pipeline hacking signals growing cyber-security risk for energy system</title>\n<style type=\"text/css\">\na,abbr,acronym,address,applet,article,aside,audio,b,big,blockquote,body,canvas,caption,center,cite,code,dd,del,details,dfn,div,dl,dt,\nem,embed,fieldset,figcaption,figure,footer,form,h1,h2,h3,h4,h5,h6,header,hgroup,html,i,iframe,img,ins,kbd,label,legend,li,mark,menu,nav,\nobject,ol,output,p,pre,q,ruby,s,samp,section,small,span,strike,strong,sub,summary,sup,table,tbody,td,tfoot,th,thead,time,tr,tt,u,ul,var,video{ font:inherit;margin:0;padding:0;vertical-align:baseline;border:0 }\nbody{ font-size:16px; line-height:1.5; color:#999; background:transparent; }\n.wrapper{ overflow:hidden;word-break:break-all;padding:10px; }\nh1,h2{ font-weight:normal; line-height:1.35; margin-bottom:.6em; }\nh3,h4,h5,h6{ line-height:1.35; margin-bottom:1em; }\nh1{ font-size:24px; }\nh2{ font-size:20px; }\nh3{ font-size:18px; }\nh4{ font-size:16px; }\nh5{ font-size:14px; }\nh6{ font-size:12px; }\np,ul,ol,blockquote,dl,table{ margin:1.2em 0; }\nul,ol{ margin-left:2em; }\nul{ list-style:disc; }\nol{ list-style:decimal; }\nli,li p{ margin:10px 0;}\nimg{ max-width:100%;display:block;margin:0 auto 1em; }\nblockquote{ color:#B5B2B1; border-left:3px solid #aaa; padding:1em; }\nstrong,b{font-weight:bold;}\nem,i{font-style:italic;}\ntable{ width:100%;border-collapse:collapse;border-spacing:1px;margin:1em 0;font-size:.9em; }\nth,td{ padding:5px;text-align:left;border:1px solid #aaa; }\nth{ font-weight:bold;background:#5d5d5d; }\n.symbol-link{font-weight:bold;}\n/* header{ border-bottom:1px solid #494756; } */\n.title{ margin:0 0 8px;line-height:1.3;color:#ddd; }\n.meta {color:#5e5c6d;font-size:13px;margin:0 0 .5em; }\na{text-decoration:none; color:#2a4b87;}\n.meta .head { display: inline-block; overflow: hidden}\n.head .h-thumb { width: 30px; height: 30px; margin: 0; padding: 0; border-radius: 50%; float: left;}\n.head .h-content { margin: 0; padding: 0 0 0 9px; float: left;}\n.head .h-name {font-size: 13px; color: #eee; margin: 0;}\n.head .h-time {font-size: 11px; color: #7E829C; margin: 0;line-height: 11px;}\n.small {font-size: 12.5px; display: inline-block; transform: scale(0.9); -webkit-transform: scale(0.9); transform-origin: left; -webkit-transform-origin: left;}\n.smaller {font-size: 12.5px; display: inline-block; transform: scale(0.8); -webkit-transform: scale(0.8); transform-origin: left; -webkit-transform-origin: left;}\n.bt-text {font-size: 12px;margin: 1.5em 0 0 0}\n.bt-text p {margin: 0}\n</style>\n</head>\n<body>\n<div class=\"wrapper\">\n<header>\n<h2 class=\"title\">\nUS pipeline hacking signals growing cyber-security risk for energy system\n</h2>\n\n<h4 class=\"meta\">\n\n\n2021-05-18 11:40 GMT+8&nbsp;&nbsp;&nbsp;<a href=http://www.straitstimes.com/tech/tech-news/us-pipeline-hacking-signals-growing-cyber-security-risk-for-energy-system-0><strong>The Straits Times</strong></a>\n\n\n</h4>\n\n</header>\n<article>\n<div>\n<p>WASHINGTON (NYTIMES) - The audacious ransomware attack that shut down a major fuel pipeline and sent Americans scrambling for petrol in the south-east last week was not the first time that hackers ...</p>\n\n<a href=\"http://www.straitstimes.com/tech/tech-news/us-pipeline-hacking-signals-growing-cyber-security-risk-for-energy-system-0\">Web Link</a>\n\n</div>\n\n\n</article>\n</div>\n</body>\n</html>\n","type":0,"thumbnail":"","relate_stocks":{},"source_url":"http://www.straitstimes.com/tech/tech-news/us-pipeline-hacking-signals-growing-cyber-security-risk-for-energy-system-0","is_english":true,"share_image_url":"https://static.laohu8.com/e9f99090a1c2ed51c021029395664489","article_id":"2136190968","content_text":"WASHINGTON (NYTIMES) - The audacious ransomware attack that shut down a major fuel pipeline and sent Americans scrambling for petrol in the south-east last week was not the first time that hackers have disrupted the United States' ageing, vulnerable energy infrastructure. And it is unlikely to be the last.Across the globe, cyber attackers are increasingly taking aim at the energy systems that underpin modern society.A February report from IBM found that the energy industry was the third-most targeted sector for such attacks last year, behind only finance and manufacturing. That was up from ninth place in 2019.\"This should be a wake-up call,\" said Mr Jonathon Monken, a principal at energy consulting firm Converge Strategies.\"When you look at what's most likely to cause disruptions to energy companies today, I think you have to put cyber-security risks at the top.\"Despite years of warnings, America's vast network of pipelines, electric grids and power plants remains acutely vulnerable to cyber attacks with the potential to disrupt energy supplies for millions of people.Dealing with those risks, analysts said, will pose a major challenge for the Biden administration as it seeks hundreds of billions of dollars to modernise the nation's energy infrastructure and transition to cleaner sources of energy to address climate change.Regulators are increasingly poised to step in.Last week, Mr Richard Glick, the chairman of the Federal Energy Regulatory Commission, said it was time to establish mandatory cyber-security standards for the nation's nearly 4.8 million km of oil and gas pipelines, similar to those currently found in the electricity sector.\"Simply encouraging pipelines to voluntarily adopt best practices is an inadequate response to the ever increasing number and sophistication of malevolent cyber actors,\" Mr Glick said in a statement.The risks to the nation's energy systems are widespread and varied. Many oil and gas pipelines, for instance, rely on decades-old control systems that are not well defended against more sophisticated cyber attacks and cannot be easily updated.And it is not just pipelines. As electric grid operators harness a growing array of digital technologies to help manage the flow of power and cut planet-warming emissions - such as smart thermostats, or far-flung yet interconnected networks of solar arrays - hackers may find new entry points to exploit.The shutdown on May 7 of the Colonial Pipeline, which stretches 8,850km from Texas to New Jersey and transports 45 per cent of the East Coast's fuel supplies, illustrates how devastating such attacks can be.On May 8, Colonial acknowledged that its corporate computer systems had been hit by a ransomware attack, in which criminal groups hold data hostage until the victim pays a ransom.A tanker delivering fuel to a Speedway petrol station in Alexandria, Virginia, last Thursday. A ransomware attack had shut down a major fuel pipeline in America and sent people scrambling for petrol in the south-east last week. PHOTO: EPA-EFEThe company said that it had shut down the pipeline as a precaution, apparently for fear that the hackers might have obtained information that would enable them to attack parts of the pipeline itself.Colonial said last Wednesday that it had started to resume pipeline operations, although it would take several days to restore full service. But throughout the south-east, panicked Americans were racing to stock up on petrol, causing thousands of petrol stations to run out of fuel.While Colonial has yet to explain exactly what triggered the pipeline shutdown, experts said there were plenty of vulnerabilities lurking throughout America's energy infrastructure.Last year, the Cybersecurity and Infrastructure Security Agency reported a ransomware attack on a natural gas compression facility that caused a shutdown of the facility for two days.In 2018, several natural gas pipeline operators reported that a system that processes customer transactions had been attacked, leading to service disruptions.But bigger risks lurk: In 2016, hackers knocked out large sections of the power grid in Ukraine, in what was thought to be the first intentional blackout triggered by a cyber attack.At the time, the Obama administration warned that America's electric utilities were not immune to similar attacks.In the past, energy companies typically kept the operational systems that run pipelines or power plants disconnected, or \"air gapped\", from the broader Internet, which meant that hackers could not easily gain access to the most critical infrastructure.But increasingly that is no longer the case, as companies install more sophisticated monitoring and diagnostics software that helps them operate these systems more efficiently. That potentially creates new cyber-security risks.\"Now these systems are all interconnected in ways that the companies themselves do not always fully understand,\" said Mr Marty Edwards, vice-president of operational technology for Tenable, a cyber-security firm.\"That provides an opportunity for attacks in one area to propagate elsewhere.\"Many industrial control systems were installed decades ago and run on outdated software, which means that even finding programmers to upgrade the systems can be a challenge.And the operators of vital energy infrastructure - such as pipelines, refineries or power plants - are often reluctant to shut down the flow of fuel or power for extended periods of time to install frequent security patches.Making things harder still, analysts said, many companies do not always have a good sense of exactly when and where it is worthwhile to spend money on costly new cyber-security defences, in part because of a lack of readily available data on which types of risks they are most likely to face.\"Companies don't always release a lot of information publicly\" about the threats they are seeing, said Mr Padraic O'Reilly, a co-founder of CyberSaint Security, who works with pipelines and critical infrastructure on cyber security.\"That can make it hard as an industry to know where to invest.\"Analysts said that the nation's electric utilities and grid operators were typically further ahead in preparing for cyber attacks than the oil and gas industry, in part because federal regulators have long required cyber-security standards for the backbone of the nation's power grid.Still, vulnerabilities remain.\"Part of it is the sheer complexity of the grid,\" said Mr Reid Sawyer, managing director of the US cyber-consulting practice at Marsh, an insurance firm.Not all levels of the grid face mandatory standards, for instance, and there are more than 3,000 utilities in the country with varying cyber-security practices.Energy companies may never be able to defend themselves against every single potential cyber attack out there, experts said. Instead, businesses and policymakers will need to design broader energy systems that are resilient to attacks and potential shutdowns, by, for instance, building in more redundancies or overrides.\"It's an old saying in cyber security: The people working defence have to be right 100 per cent of the time, while the attackers have to be right only once,\" Mr Monken said.\"That means we have to think a lot harder about contingencies when those defences fail.\"","news_type":1},"isVote":1,"likeStatus":false,"favoriteStatus":false,"reportStatus":false,"tweetType":1,"langContent":"EN"},{"id":195711184,"gmtCreate":1621314947048,"gmtModify":1704355658762,"author":{"id":"3574151642706297","authorId":"3574151642706297","name":"Derrick0359","avatar":"https://static.tigerbbs.com/1e4377b13ebe2fd65f630bf249fd6624","vip":1,"crmLevel":4,"crmLevelSwitch":0},"htmlText":"[Cool]&nbsp;[Cool]&nbsp;","listText":"[Cool]&nbsp;[Cool]&nbsp;","text":"[Cool] [Cool]","images":[],"top":1,"highlighted":1,"essential":1,"paper":1,"likeSize":0,"commentSize":0,"repostSize":0,"link":"https://ttm.financial/post/195711184","repostId":2136190968,"repostType":4,"repost":{"id":"2136190968","pubTimestamp":1621309200,"share":"https://www.laohu8.com/m/news/2136190968?lang=&edition=full","pubTime":"2021-05-18 11:40","market":"us","language":"en","title":"US pipeline hacking signals growing cyber-security risk for energy system","url":"https://stock-news.laohu8.com/highlight/detail?id=2136190968","media":"The Straits Times","summary":"WASHINGTON (NYTIMES) - The audacious ransomware attack that shut down a major fuel pipeline and sent","content":"<div>\n<p>WASHINGTON (NYTIMES) - The audacious ransomware attack that shut down a major fuel pipeline and sent Americans scrambling for petrol in the south-east last week was not the first time that hackers ...</p>\n\n<a href=\"http://www.straitstimes.com/tech/tech-news/us-pipeline-hacking-signals-growing-cyber-security-risk-for-energy-system-0\">Web Link</a>\n\n</div>\n","source":"straits_highlight","collect":0,"html":"<!DOCTYPE html>\n<html>\n<head>\n<meta http-equiv=\"Content-Type\" content=\"text/html; charset=utf-8\" />\n<meta name=\"viewport\" content=\"width=device-width,initial-scale=1.0,minimum-scale=1.0,maximum-scale=1.0,user-scalable=no\"/>\n<meta name=\"format-detection\" content=\"telephone=no,email=no,address=no\" />\n<title>US pipeline hacking signals growing cyber-security risk for energy system</title>\n<style type=\"text/css\">\na,abbr,acronym,address,applet,article,aside,audio,b,big,blockquote,body,canvas,caption,center,cite,code,dd,del,details,dfn,div,dl,dt,\nem,embed,fieldset,figcaption,figure,footer,form,h1,h2,h3,h4,h5,h6,header,hgroup,html,i,iframe,img,ins,kbd,label,legend,li,mark,menu,nav,\nobject,ol,output,p,pre,q,ruby,s,samp,section,small,span,strike,strong,sub,summary,sup,table,tbody,td,tfoot,th,thead,time,tr,tt,u,ul,var,video{ font:inherit;margin:0;padding:0;vertical-align:baseline;border:0 }\nbody{ font-size:16px; line-height:1.5; color:#999; background:transparent; }\n.wrapper{ overflow:hidden;word-break:break-all;padding:10px; }\nh1,h2{ font-weight:normal; line-height:1.35; margin-bottom:.6em; }\nh3,h4,h5,h6{ line-height:1.35; margin-bottom:1em; }\nh1{ font-size:24px; }\nh2{ font-size:20px; }\nh3{ font-size:18px; }\nh4{ font-size:16px; }\nh5{ font-size:14px; }\nh6{ font-size:12px; }\np,ul,ol,blockquote,dl,table{ margin:1.2em 0; }\nul,ol{ margin-left:2em; }\nul{ list-style:disc; }\nol{ list-style:decimal; }\nli,li p{ margin:10px 0;}\nimg{ max-width:100%;display:block;margin:0 auto 1em; }\nblockquote{ color:#B5B2B1; border-left:3px solid #aaa; padding:1em; }\nstrong,b{font-weight:bold;}\nem,i{font-style:italic;}\ntable{ width:100%;border-collapse:collapse;border-spacing:1px;margin:1em 0;font-size:.9em; }\nth,td{ padding:5px;text-align:left;border:1px solid #aaa; }\nth{ font-weight:bold;background:#5d5d5d; }\n.symbol-link{font-weight:bold;}\n/* header{ border-bottom:1px solid #494756; } */\n.title{ margin:0 0 8px;line-height:1.3;color:#ddd; }\n.meta {color:#5e5c6d;font-size:13px;margin:0 0 .5em; }\na{text-decoration:none; color:#2a4b87;}\n.meta .head { display: inline-block; overflow: hidden}\n.head .h-thumb { width: 30px; height: 30px; margin: 0; padding: 0; border-radius: 50%; float: left;}\n.head .h-content { margin: 0; padding: 0 0 0 9px; float: left;}\n.head .h-name {font-size: 13px; color: #eee; margin: 0;}\n.head .h-time {font-size: 11px; color: #7E829C; margin: 0;line-height: 11px;}\n.small {font-size: 12.5px; display: inline-block; transform: scale(0.9); -webkit-transform: scale(0.9); transform-origin: left; -webkit-transform-origin: left;}\n.smaller {font-size: 12.5px; display: inline-block; transform: scale(0.8); -webkit-transform: scale(0.8); transform-origin: left; -webkit-transform-origin: left;}\n.bt-text {font-size: 12px;margin: 1.5em 0 0 0}\n.bt-text p {margin: 0}\n</style>\n</head>\n<body>\n<div class=\"wrapper\">\n<header>\n<h2 class=\"title\">\nUS pipeline hacking signals growing cyber-security risk for energy system\n</h2>\n\n<h4 class=\"meta\">\n\n\n2021-05-18 11:40 GMT+8&nbsp;&nbsp;&nbsp;<a href=http://www.straitstimes.com/tech/tech-news/us-pipeline-hacking-signals-growing-cyber-security-risk-for-energy-system-0><strong>The Straits Times</strong></a>\n\n\n</h4>\n\n</header>\n<article>\n<div>\n<p>WASHINGTON (NYTIMES) - The audacious ransomware attack that shut down a major fuel pipeline and sent Americans scrambling for petrol in the south-east last week was not the first time that hackers ...</p>\n\n<a href=\"http://www.straitstimes.com/tech/tech-news/us-pipeline-hacking-signals-growing-cyber-security-risk-for-energy-system-0\">Web Link</a>\n\n</div>\n\n\n</article>\n</div>\n</body>\n</html>\n","type":0,"thumbnail":"","relate_stocks":{},"source_url":"http://www.straitstimes.com/tech/tech-news/us-pipeline-hacking-signals-growing-cyber-security-risk-for-energy-system-0","is_english":true,"share_image_url":"https://static.laohu8.com/e9f99090a1c2ed51c021029395664489","article_id":"2136190968","content_text":"WASHINGTON (NYTIMES) - The audacious ransomware attack that shut down a major fuel pipeline and sent Americans scrambling for petrol in the south-east last week was not the first time that hackers have disrupted the United States' ageing, vulnerable energy infrastructure. And it is unlikely to be the last.Across the globe, cyber attackers are increasingly taking aim at the energy systems that underpin modern society.A February report from IBM found that the energy industry was the third-most targeted sector for such attacks last year, behind only finance and manufacturing. That was up from ninth place in 2019.\"This should be a wake-up call,\" said Mr Jonathon Monken, a principal at energy consulting firm Converge Strategies.\"When you look at what's most likely to cause disruptions to energy companies today, I think you have to put cyber-security risks at the top.\"Despite years of warnings, America's vast network of pipelines, electric grids and power plants remains acutely vulnerable to cyber attacks with the potential to disrupt energy supplies for millions of people.Dealing with those risks, analysts said, will pose a major challenge for the Biden administration as it seeks hundreds of billions of dollars to modernise the nation's energy infrastructure and transition to cleaner sources of energy to address climate change.Regulators are increasingly poised to step in.Last week, Mr Richard Glick, the chairman of the Federal Energy Regulatory Commission, said it was time to establish mandatory cyber-security standards for the nation's nearly 4.8 million km of oil and gas pipelines, similar to those currently found in the electricity sector.\"Simply encouraging pipelines to voluntarily adopt best practices is an inadequate response to the ever increasing number and sophistication of malevolent cyber actors,\" Mr Glick said in a statement.The risks to the nation's energy systems are widespread and varied. Many oil and gas pipelines, for instance, rely on decades-old control systems that are not well defended against more sophisticated cyber attacks and cannot be easily updated.And it is not just pipelines. As electric grid operators harness a growing array of digital technologies to help manage the flow of power and cut planet-warming emissions - such as smart thermostats, or far-flung yet interconnected networks of solar arrays - hackers may find new entry points to exploit.The shutdown on May 7 of the Colonial Pipeline, which stretches 8,850km from Texas to New Jersey and transports 45 per cent of the East Coast's fuel supplies, illustrates how devastating such attacks can be.On May 8, Colonial acknowledged that its corporate computer systems had been hit by a ransomware attack, in which criminal groups hold data hostage until the victim pays a ransom.A tanker delivering fuel to a Speedway petrol station in Alexandria, Virginia, last Thursday. A ransomware attack had shut down a major fuel pipeline in America and sent people scrambling for petrol in the south-east last week. PHOTO: EPA-EFEThe company said that it had shut down the pipeline as a precaution, apparently for fear that the hackers might have obtained information that would enable them to attack parts of the pipeline itself.Colonial said last Wednesday that it had started to resume pipeline operations, although it would take several days to restore full service. But throughout the south-east, panicked Americans were racing to stock up on petrol, causing thousands of petrol stations to run out of fuel.While Colonial has yet to explain exactly what triggered the pipeline shutdown, experts said there were plenty of vulnerabilities lurking throughout America's energy infrastructure.Last year, the Cybersecurity and Infrastructure Security Agency reported a ransomware attack on a natural gas compression facility that caused a shutdown of the facility for two days.In 2018, several natural gas pipeline operators reported that a system that processes customer transactions had been attacked, leading to service disruptions.But bigger risks lurk: In 2016, hackers knocked out large sections of the power grid in Ukraine, in what was thought to be the first intentional blackout triggered by a cyber attack.At the time, the Obama administration warned that America's electric utilities were not immune to similar attacks.In the past, energy companies typically kept the operational systems that run pipelines or power plants disconnected, or \"air gapped\", from the broader Internet, which meant that hackers could not easily gain access to the most critical infrastructure.But increasingly that is no longer the case, as companies install more sophisticated monitoring and diagnostics software that helps them operate these systems more efficiently. That potentially creates new cyber-security risks.\"Now these systems are all interconnected in ways that the companies themselves do not always fully understand,\" said Mr Marty Edwards, vice-president of operational technology for Tenable, a cyber-security firm.\"That provides an opportunity for attacks in one area to propagate elsewhere.\"Many industrial control systems were installed decades ago and run on outdated software, which means that even finding programmers to upgrade the systems can be a challenge.And the operators of vital energy infrastructure - such as pipelines, refineries or power plants - are often reluctant to shut down the flow of fuel or power for extended periods of time to install frequent security patches.Making things harder still, analysts said, many companies do not always have a good sense of exactly when and where it is worthwhile to spend money on costly new cyber-security defences, in part because of a lack of readily available data on which types of risks they are most likely to face.\"Companies don't always release a lot of information publicly\" about the threats they are seeing, said Mr Padraic O'Reilly, a co-founder of CyberSaint Security, who works with pipelines and critical infrastructure on cyber security.\"That can make it hard as an industry to know where to invest.\"Analysts said that the nation's electric utilities and grid operators were typically further ahead in preparing for cyber attacks than the oil and gas industry, in part because federal regulators have long required cyber-security standards for the backbone of the nation's power grid.Still, vulnerabilities remain.\"Part of it is the sheer complexity of the grid,\" said Mr Reid Sawyer, managing director of the US cyber-consulting practice at Marsh, an insurance firm.Not all levels of the grid face mandatory standards, for instance, and there are more than 3,000 utilities in the country with varying cyber-security practices.Energy companies may never be able to defend themselves against every single potential cyber attack out there, experts said. Instead, businesses and policymakers will need to design broader energy systems that are resilient to attacks and potential shutdowns, by, for instance, building in more redundancies or overrides.\"It's an old saying in cyber security: The people working defence have to be right 100 per cent of the time, while the attackers have to be right only once,\" Mr Monken said.\"That means we have to think a lot harder about contingencies when those defences fail.\"","news_type":1},"isVote":1,"likeStatus":false,"favoriteStatus":false,"reportStatus":false,"tweetType":1,"langContent":"EN"},{"id":195734934,"gmtCreate":1621314499228,"gmtModify":1704355652120,"author":{"id":"3581749910281394","authorId":"3581749910281394","name":"Spear88","avatar":"https://static.tigerbbs.com/303d42689a3f59302539ade2fe6a4ab4","vip":1,"crmLevel":2,"crmLevelSwitch":0},"htmlText":"Good","listText":"Good","text":"Good","images":[],"top":1,"highlighted":1,"essential":1,"paper":1,"likeSize":0,"commentSize":0,"repostSize":0,"link":"https://ttm.financial/post/195734934","repostId":2136190968,"repostType":4,"repost":{"id":"2136190968","pubTimestamp":1621309200,"share":"https://www.laohu8.com/m/news/2136190968?lang=&edition=full","pubTime":"2021-05-18 11:40","market":"us","language":"en","title":"US pipeline hacking signals growing cyber-security risk for energy system","url":"https://stock-news.laohu8.com/highlight/detail?id=2136190968","media":"The Straits Times","summary":"WASHINGTON (NYTIMES) - The audacious ransomware attack that shut down a major fuel pipeline and sent","content":"<div>\n<p>WASHINGTON (NYTIMES) - The audacious ransomware attack that shut down a major fuel pipeline and sent Americans scrambling for petrol in the south-east last week was not the first time that hackers ...</p>\n\n<a href=\"http://www.straitstimes.com/tech/tech-news/us-pipeline-hacking-signals-growing-cyber-security-risk-for-energy-system-0\">Web Link</a>\n\n</div>\n","source":"straits_highlight","collect":0,"html":"<!DOCTYPE html>\n<html>\n<head>\n<meta http-equiv=\"Content-Type\" content=\"text/html; charset=utf-8\" />\n<meta name=\"viewport\" content=\"width=device-width,initial-scale=1.0,minimum-scale=1.0,maximum-scale=1.0,user-scalable=no\"/>\n<meta name=\"format-detection\" content=\"telephone=no,email=no,address=no\" />\n<title>US pipeline hacking signals growing cyber-security risk for energy system</title>\n<style type=\"text/css\">\na,abbr,acronym,address,applet,article,aside,audio,b,big,blockquote,body,canvas,caption,center,cite,code,dd,del,details,dfn,div,dl,dt,\nem,embed,fieldset,figcaption,figure,footer,form,h1,h2,h3,h4,h5,h6,header,hgroup,html,i,iframe,img,ins,kbd,label,legend,li,mark,menu,nav,\nobject,ol,output,p,pre,q,ruby,s,samp,section,small,span,strike,strong,sub,summary,sup,table,tbody,td,tfoot,th,thead,time,tr,tt,u,ul,var,video{ font:inherit;margin:0;padding:0;vertical-align:baseline;border:0 }\nbody{ font-size:16px; line-height:1.5; color:#999; background:transparent; }\n.wrapper{ overflow:hidden;word-break:break-all;padding:10px; }\nh1,h2{ font-weight:normal; line-height:1.35; margin-bottom:.6em; }\nh3,h4,h5,h6{ line-height:1.35; margin-bottom:1em; }\nh1{ font-size:24px; }\nh2{ font-size:20px; }\nh3{ font-size:18px; }\nh4{ font-size:16px; }\nh5{ font-size:14px; }\nh6{ font-size:12px; }\np,ul,ol,blockquote,dl,table{ margin:1.2em 0; }\nul,ol{ margin-left:2em; }\nul{ list-style:disc; }\nol{ list-style:decimal; }\nli,li p{ margin:10px 0;}\nimg{ max-width:100%;display:block;margin:0 auto 1em; }\nblockquote{ color:#B5B2B1; border-left:3px solid #aaa; padding:1em; }\nstrong,b{font-weight:bold;}\nem,i{font-style:italic;}\ntable{ width:100%;border-collapse:collapse;border-spacing:1px;margin:1em 0;font-size:.9em; }\nth,td{ padding:5px;text-align:left;border:1px solid #aaa; }\nth{ font-weight:bold;background:#5d5d5d; }\n.symbol-link{font-weight:bold;}\n/* header{ border-bottom:1px solid #494756; } */\n.title{ margin:0 0 8px;line-height:1.3;color:#ddd; }\n.meta {color:#5e5c6d;font-size:13px;margin:0 0 .5em; }\na{text-decoration:none; color:#2a4b87;}\n.meta .head { display: inline-block; overflow: hidden}\n.head .h-thumb { width: 30px; height: 30px; margin: 0; padding: 0; border-radius: 50%; float: left;}\n.head .h-content { margin: 0; padding: 0 0 0 9px; float: left;}\n.head .h-name {font-size: 13px; color: #eee; margin: 0;}\n.head .h-time {font-size: 11px; color: #7E829C; margin: 0;line-height: 11px;}\n.small {font-size: 12.5px; display: inline-block; transform: scale(0.9); -webkit-transform: scale(0.9); transform-origin: left; -webkit-transform-origin: left;}\n.smaller {font-size: 12.5px; display: inline-block; transform: scale(0.8); -webkit-transform: scale(0.8); transform-origin: left; -webkit-transform-origin: left;}\n.bt-text {font-size: 12px;margin: 1.5em 0 0 0}\n.bt-text p {margin: 0}\n</style>\n</head>\n<body>\n<div class=\"wrapper\">\n<header>\n<h2 class=\"title\">\nUS pipeline hacking signals growing cyber-security risk for energy system\n</h2>\n\n<h4 class=\"meta\">\n\n\n2021-05-18 11:40 GMT+8&nbsp;&nbsp;&nbsp;<a href=http://www.straitstimes.com/tech/tech-news/us-pipeline-hacking-signals-growing-cyber-security-risk-for-energy-system-0><strong>The Straits Times</strong></a>\n\n\n</h4>\n\n</header>\n<article>\n<div>\n<p>WASHINGTON (NYTIMES) - The audacious ransomware attack that shut down a major fuel pipeline and sent Americans scrambling for petrol in the south-east last week was not the first time that hackers ...</p>\n\n<a href=\"http://www.straitstimes.com/tech/tech-news/us-pipeline-hacking-signals-growing-cyber-security-risk-for-energy-system-0\">Web Link</a>\n\n</div>\n\n\n</article>\n</div>\n</body>\n</html>\n","type":0,"thumbnail":"","relate_stocks":{},"source_url":"http://www.straitstimes.com/tech/tech-news/us-pipeline-hacking-signals-growing-cyber-security-risk-for-energy-system-0","is_english":true,"share_image_url":"https://static.laohu8.com/e9f99090a1c2ed51c021029395664489","article_id":"2136190968","content_text":"WASHINGTON (NYTIMES) - The audacious ransomware attack that shut down a major fuel pipeline and sent Americans scrambling for petrol in the south-east last week was not the first time that hackers have disrupted the United States' ageing, vulnerable energy infrastructure. And it is unlikely to be the last.Across the globe, cyber attackers are increasingly taking aim at the energy systems that underpin modern society.A February report from IBM found that the energy industry was the third-most targeted sector for such attacks last year, behind only finance and manufacturing. That was up from ninth place in 2019.\"This should be a wake-up call,\" said Mr Jonathon Monken, a principal at energy consulting firm Converge Strategies.\"When you look at what's most likely to cause disruptions to energy companies today, I think you have to put cyber-security risks at the top.\"Despite years of warnings, America's vast network of pipelines, electric grids and power plants remains acutely vulnerable to cyber attacks with the potential to disrupt energy supplies for millions of people.Dealing with those risks, analysts said, will pose a major challenge for the Biden administration as it seeks hundreds of billions of dollars to modernise the nation's energy infrastructure and transition to cleaner sources of energy to address climate change.Regulators are increasingly poised to step in.Last week, Mr Richard Glick, the chairman of the Federal Energy Regulatory Commission, said it was time to establish mandatory cyber-security standards for the nation's nearly 4.8 million km of oil and gas pipelines, similar to those currently found in the electricity sector.\"Simply encouraging pipelines to voluntarily adopt best practices is an inadequate response to the ever increasing number and sophistication of malevolent cyber actors,\" Mr Glick said in a statement.The risks to the nation's energy systems are widespread and varied. Many oil and gas pipelines, for instance, rely on decades-old control systems that are not well defended against more sophisticated cyber attacks and cannot be easily updated.And it is not just pipelines. As electric grid operators harness a growing array of digital technologies to help manage the flow of power and cut planet-warming emissions - such as smart thermostats, or far-flung yet interconnected networks of solar arrays - hackers may find new entry points to exploit.The shutdown on May 7 of the Colonial Pipeline, which stretches 8,850km from Texas to New Jersey and transports 45 per cent of the East Coast's fuel supplies, illustrates how devastating such attacks can be.On May 8, Colonial acknowledged that its corporate computer systems had been hit by a ransomware attack, in which criminal groups hold data hostage until the victim pays a ransom.A tanker delivering fuel to a Speedway petrol station in Alexandria, Virginia, last Thursday. A ransomware attack had shut down a major fuel pipeline in America and sent people scrambling for petrol in the south-east last week. PHOTO: EPA-EFEThe company said that it had shut down the pipeline as a precaution, apparently for fear that the hackers might have obtained information that would enable them to attack parts of the pipeline itself.Colonial said last Wednesday that it had started to resume pipeline operations, although it would take several days to restore full service. But throughout the south-east, panicked Americans were racing to stock up on petrol, causing thousands of petrol stations to run out of fuel.While Colonial has yet to explain exactly what triggered the pipeline shutdown, experts said there were plenty of vulnerabilities lurking throughout America's energy infrastructure.Last year, the Cybersecurity and Infrastructure Security Agency reported a ransomware attack on a natural gas compression facility that caused a shutdown of the facility for two days.In 2018, several natural gas pipeline operators reported that a system that processes customer transactions had been attacked, leading to service disruptions.But bigger risks lurk: In 2016, hackers knocked out large sections of the power grid in Ukraine, in what was thought to be the first intentional blackout triggered by a cyber attack.At the time, the Obama administration warned that America's electric utilities were not immune to similar attacks.In the past, energy companies typically kept the operational systems that run pipelines or power plants disconnected, or \"air gapped\", from the broader Internet, which meant that hackers could not easily gain access to the most critical infrastructure.But increasingly that is no longer the case, as companies install more sophisticated monitoring and diagnostics software that helps them operate these systems more efficiently. That potentially creates new cyber-security risks.\"Now these systems are all interconnected in ways that the companies themselves do not always fully understand,\" said Mr Marty Edwards, vice-president of operational technology for Tenable, a cyber-security firm.\"That provides an opportunity for attacks in one area to propagate elsewhere.\"Many industrial control systems were installed decades ago and run on outdated software, which means that even finding programmers to upgrade the systems can be a challenge.And the operators of vital energy infrastructure - such as pipelines, refineries or power plants - are often reluctant to shut down the flow of fuel or power for extended periods of time to install frequent security patches.Making things harder still, analysts said, many companies do not always have a good sense of exactly when and where it is worthwhile to spend money on costly new cyber-security defences, in part because of a lack of readily available data on which types of risks they are most likely to face.\"Companies don't always release a lot of information publicly\" about the threats they are seeing, said Mr Padraic O'Reilly, a co-founder of CyberSaint Security, who works with pipelines and critical infrastructure on cyber security.\"That can make it hard as an industry to know where to invest.\"Analysts said that the nation's electric utilities and grid operators were typically further ahead in preparing for cyber attacks than the oil and gas industry, in part because federal regulators have long required cyber-security standards for the backbone of the nation's power grid.Still, vulnerabilities remain.\"Part of it is the sheer complexity of the grid,\" said Mr Reid Sawyer, managing director of the US cyber-consulting practice at Marsh, an insurance firm.Not all levels of the grid face mandatory standards, for instance, and there are more than 3,000 utilities in the country with varying cyber-security practices.Energy companies may never be able to defend themselves against every single potential cyber attack out there, experts said. Instead, businesses and policymakers will need to design broader energy systems that are resilient to attacks and potential shutdowns, by, for instance, building in more redundancies or overrides.\"It's an old saying in cyber security: The people working defence have to be right 100 per cent of the time, while the attackers have to be right only once,\" Mr Monken said.\"That means we have to think a lot harder about contingencies when those defences fail.\"","news_type":1},"isVote":1,"likeStatus":false,"favoriteStatus":false,"reportStatus":false,"tweetType":1,"langContent":"EN"},{"id":195731387,"gmtCreate":1621314059749,"gmtModify":1704355645591,"author":{"id":"3575673928225023","authorId":"3575673928225023","name":"Marcus1993","avatar":"https://static.tigerbbs.com/0b835437b2dfaf620c28adecbcb202d6","vip":1,"crmLevel":4,"crmLevelSwitch":0},"htmlText":"Wow","listText":"Wow","text":"Wow","images":[],"top":1,"highlighted":1,"essential":1,"paper":1,"likeSize":0,"commentSize":0,"repostSize":0,"link":"https://ttm.financial/post/195731387","repostId":2136190968,"repostType":4,"repost":{"id":"2136190968","pubTimestamp":1621309200,"share":"https://www.laohu8.com/m/news/2136190968?lang=&edition=full","pubTime":"2021-05-18 11:40","market":"us","language":"en","title":"US pipeline hacking signals growing cyber-security risk for energy system","url":"https://stock-news.laohu8.com/highlight/detail?id=2136190968","media":"The Straits Times","summary":"WASHINGTON (NYTIMES) - The audacious ransomware attack that shut down a major fuel pipeline and sent","content":"<div>\n<p>WASHINGTON (NYTIMES) - The audacious ransomware attack that shut down a major fuel pipeline and sent Americans scrambling for petrol in the south-east last week was not the first time that hackers ...</p>\n\n<a href=\"http://www.straitstimes.com/tech/tech-news/us-pipeline-hacking-signals-growing-cyber-security-risk-for-energy-system-0\">Web Link</a>\n\n</div>\n","source":"straits_highlight","collect":0,"html":"<!DOCTYPE html>\n<html>\n<head>\n<meta http-equiv=\"Content-Type\" content=\"text/html; charset=utf-8\" />\n<meta name=\"viewport\" content=\"width=device-width,initial-scale=1.0,minimum-scale=1.0,maximum-scale=1.0,user-scalable=no\"/>\n<meta name=\"format-detection\" content=\"telephone=no,email=no,address=no\" />\n<title>US pipeline hacking signals growing cyber-security risk for energy system</title>\n<style type=\"text/css\">\na,abbr,acronym,address,applet,article,aside,audio,b,big,blockquote,body,canvas,caption,center,cite,code,dd,del,details,dfn,div,dl,dt,\nem,embed,fieldset,figcaption,figure,footer,form,h1,h2,h3,h4,h5,h6,header,hgroup,html,i,iframe,img,ins,kbd,label,legend,li,mark,menu,nav,\nobject,ol,output,p,pre,q,ruby,s,samp,section,small,span,strike,strong,sub,summary,sup,table,tbody,td,tfoot,th,thead,time,tr,tt,u,ul,var,video{ font:inherit;margin:0;padding:0;vertical-align:baseline;border:0 }\nbody{ font-size:16px; line-height:1.5; color:#999; background:transparent; }\n.wrapper{ overflow:hidden;word-break:break-all;padding:10px; }\nh1,h2{ font-weight:normal; line-height:1.35; margin-bottom:.6em; }\nh3,h4,h5,h6{ line-height:1.35; margin-bottom:1em; }\nh1{ font-size:24px; }\nh2{ font-size:20px; }\nh3{ font-size:18px; }\nh4{ font-size:16px; }\nh5{ font-size:14px; }\nh6{ font-size:12px; }\np,ul,ol,blockquote,dl,table{ margin:1.2em 0; }\nul,ol{ margin-left:2em; }\nul{ list-style:disc; }\nol{ list-style:decimal; }\nli,li p{ margin:10px 0;}\nimg{ max-width:100%;display:block;margin:0 auto 1em; }\nblockquote{ color:#B5B2B1; border-left:3px solid #aaa; padding:1em; }\nstrong,b{font-weight:bold;}\nem,i{font-style:italic;}\ntable{ width:100%;border-collapse:collapse;border-spacing:1px;margin:1em 0;font-size:.9em; }\nth,td{ padding:5px;text-align:left;border:1px solid #aaa; }\nth{ font-weight:bold;background:#5d5d5d; }\n.symbol-link{font-weight:bold;}\n/* header{ border-bottom:1px solid #494756; } */\n.title{ margin:0 0 8px;line-height:1.3;color:#ddd; }\n.meta {color:#5e5c6d;font-size:13px;margin:0 0 .5em; }\na{text-decoration:none; color:#2a4b87;}\n.meta .head { display: inline-block; overflow: hidden}\n.head .h-thumb { width: 30px; height: 30px; margin: 0; padding: 0; border-radius: 50%; float: left;}\n.head .h-content { margin: 0; padding: 0 0 0 9px; float: left;}\n.head .h-name {font-size: 13px; color: #eee; margin: 0;}\n.head .h-time {font-size: 11px; color: #7E829C; margin: 0;line-height: 11px;}\n.small {font-size: 12.5px; display: inline-block; transform: scale(0.9); -webkit-transform: scale(0.9); transform-origin: left; -webkit-transform-origin: left;}\n.smaller {font-size: 12.5px; display: inline-block; transform: scale(0.8); -webkit-transform: scale(0.8); transform-origin: left; -webkit-transform-origin: left;}\n.bt-text {font-size: 12px;margin: 1.5em 0 0 0}\n.bt-text p {margin: 0}\n</style>\n</head>\n<body>\n<div class=\"wrapper\">\n<header>\n<h2 class=\"title\">\nUS pipeline hacking signals growing cyber-security risk for energy system\n</h2>\n\n<h4 class=\"meta\">\n\n\n2021-05-18 11:40 GMT+8&nbsp;&nbsp;&nbsp;<a href=http://www.straitstimes.com/tech/tech-news/us-pipeline-hacking-signals-growing-cyber-security-risk-for-energy-system-0><strong>The Straits Times</strong></a>\n\n\n</h4>\n\n</header>\n<article>\n<div>\n<p>WASHINGTON (NYTIMES) - The audacious ransomware attack that shut down a major fuel pipeline and sent Americans scrambling for petrol in the south-east last week was not the first time that hackers ...</p>\n\n<a href=\"http://www.straitstimes.com/tech/tech-news/us-pipeline-hacking-signals-growing-cyber-security-risk-for-energy-system-0\">Web Link</a>\n\n</div>\n\n\n</article>\n</div>\n</body>\n</html>\n","type":0,"thumbnail":"","relate_stocks":{},"source_url":"http://www.straitstimes.com/tech/tech-news/us-pipeline-hacking-signals-growing-cyber-security-risk-for-energy-system-0","is_english":true,"share_image_url":"https://static.laohu8.com/e9f99090a1c2ed51c021029395664489","article_id":"2136190968","content_text":"WASHINGTON (NYTIMES) - The audacious ransomware attack that shut down a major fuel pipeline and sent Americans scrambling for petrol in the south-east last week was not the first time that hackers have disrupted the United States' ageing, vulnerable energy infrastructure. And it is unlikely to be the last.Across the globe, cyber attackers are increasingly taking aim at the energy systems that underpin modern society.A February report from IBM found that the energy industry was the third-most targeted sector for such attacks last year, behind only finance and manufacturing. That was up from ninth place in 2019.\"This should be a wake-up call,\" said Mr Jonathon Monken, a principal at energy consulting firm Converge Strategies.\"When you look at what's most likely to cause disruptions to energy companies today, I think you have to put cyber-security risks at the top.\"Despite years of warnings, America's vast network of pipelines, electric grids and power plants remains acutely vulnerable to cyber attacks with the potential to disrupt energy supplies for millions of people.Dealing with those risks, analysts said, will pose a major challenge for the Biden administration as it seeks hundreds of billions of dollars to modernise the nation's energy infrastructure and transition to cleaner sources of energy to address climate change.Regulators are increasingly poised to step in.Last week, Mr Richard Glick, the chairman of the Federal Energy Regulatory Commission, said it was time to establish mandatory cyber-security standards for the nation's nearly 4.8 million km of oil and gas pipelines, similar to those currently found in the electricity sector.\"Simply encouraging pipelines to voluntarily adopt best practices is an inadequate response to the ever increasing number and sophistication of malevolent cyber actors,\" Mr Glick said in a statement.The risks to the nation's energy systems are widespread and varied. Many oil and gas pipelines, for instance, rely on decades-old control systems that are not well defended against more sophisticated cyber attacks and cannot be easily updated.And it is not just pipelines. As electric grid operators harness a growing array of digital technologies to help manage the flow of power and cut planet-warming emissions - such as smart thermostats, or far-flung yet interconnected networks of solar arrays - hackers may find new entry points to exploit.The shutdown on May 7 of the Colonial Pipeline, which stretches 8,850km from Texas to New Jersey and transports 45 per cent of the East Coast's fuel supplies, illustrates how devastating such attacks can be.On May 8, Colonial acknowledged that its corporate computer systems had been hit by a ransomware attack, in which criminal groups hold data hostage until the victim pays a ransom.A tanker delivering fuel to a Speedway petrol station in Alexandria, Virginia, last Thursday. A ransomware attack had shut down a major fuel pipeline in America and sent people scrambling for petrol in the south-east last week. PHOTO: EPA-EFEThe company said that it had shut down the pipeline as a precaution, apparently for fear that the hackers might have obtained information that would enable them to attack parts of the pipeline itself.Colonial said last Wednesday that it had started to resume pipeline operations, although it would take several days to restore full service. But throughout the south-east, panicked Americans were racing to stock up on petrol, causing thousands of petrol stations to run out of fuel.While Colonial has yet to explain exactly what triggered the pipeline shutdown, experts said there were plenty of vulnerabilities lurking throughout America's energy infrastructure.Last year, the Cybersecurity and Infrastructure Security Agency reported a ransomware attack on a natural gas compression facility that caused a shutdown of the facility for two days.In 2018, several natural gas pipeline operators reported that a system that processes customer transactions had been attacked, leading to service disruptions.But bigger risks lurk: In 2016, hackers knocked out large sections of the power grid in Ukraine, in what was thought to be the first intentional blackout triggered by a cyber attack.At the time, the Obama administration warned that America's electric utilities were not immune to similar attacks.In the past, energy companies typically kept the operational systems that run pipelines or power plants disconnected, or \"air gapped\", from the broader Internet, which meant that hackers could not easily gain access to the most critical infrastructure.But increasingly that is no longer the case, as companies install more sophisticated monitoring and diagnostics software that helps them operate these systems more efficiently. That potentially creates new cyber-security risks.\"Now these systems are all interconnected in ways that the companies themselves do not always fully understand,\" said Mr Marty Edwards, vice-president of operational technology for Tenable, a cyber-security firm.\"That provides an opportunity for attacks in one area to propagate elsewhere.\"Many industrial control systems were installed decades ago and run on outdated software, which means that even finding programmers to upgrade the systems can be a challenge.And the operators of vital energy infrastructure - such as pipelines, refineries or power plants - are often reluctant to shut down the flow of fuel or power for extended periods of time to install frequent security patches.Making things harder still, analysts said, many companies do not always have a good sense of exactly when and where it is worthwhile to spend money on costly new cyber-security defences, in part because of a lack of readily available data on which types of risks they are most likely to face.\"Companies don't always release a lot of information publicly\" about the threats they are seeing, said Mr Padraic O'Reilly, a co-founder of CyberSaint Security, who works with pipelines and critical infrastructure on cyber security.\"That can make it hard as an industry to know where to invest.\"Analysts said that the nation's electric utilities and grid operators were typically further ahead in preparing for cyber attacks than the oil and gas industry, in part because federal regulators have long required cyber-security standards for the backbone of the nation's power grid.Still, vulnerabilities remain.\"Part of it is the sheer complexity of the grid,\" said Mr Reid Sawyer, managing director of the US cyber-consulting practice at Marsh, an insurance firm.Not all levels of the grid face mandatory standards, for instance, and there are more than 3,000 utilities in the country with varying cyber-security practices.Energy companies may never be able to defend themselves against every single potential cyber attack out there, experts said. Instead, businesses and policymakers will need to design broader energy systems that are resilient to attacks and potential shutdowns, by, for instance, building in more redundancies or overrides.\"It's an old saying in cyber security: The people working defence have to be right 100 per cent of the time, while the attackers have to be right only once,\" Mr Monken said.\"That means we have to think a lot harder about contingencies when those defences fail.\"","news_type":1},"isVote":1,"likeStatus":false,"favoriteStatus":false,"reportStatus":false,"tweetType":1,"langContent":"EN"},{"id":195700972,"gmtCreate":1621312277696,"gmtModify":1704355613811,"author":{"id":"3581844366704770","authorId":"3581844366704770","name":"KingKong88","avatar":"https://static.tigerbbs.com/ca221e1f8c3c6fd2bccd3f8d4d7b5bdb","vip":1,"crmLevel":1,"crmLevelSwitch":0},"htmlText":"It affects every sector, not just energy","listText":"It affects every sector, not just energy","text":"It affects every sector, not just energy","images":[],"top":1,"highlighted":1,"essential":1,"paper":1,"likeSize":2,"commentSize":0,"repostSize":0,"link":"https://ttm.financial/post/195700972","repostId":2136190968,"repostType":4,"repost":{"id":"2136190968","pubTimestamp":1621309200,"share":"https://www.laohu8.com/m/news/2136190968?lang=&edition=full","pubTime":"2021-05-18 11:40","market":"us","language":"en","title":"US pipeline hacking signals growing cyber-security risk for energy system","url":"https://stock-news.laohu8.com/highlight/detail?id=2136190968","media":"The Straits Times","summary":"WASHINGTON (NYTIMES) - The audacious ransomware attack that shut down a major fuel pipeline and sent","content":"<div>\n<p>WASHINGTON (NYTIMES) - The audacious ransomware attack that shut down a major fuel pipeline and sent Americans scrambling for petrol in the south-east last week was not the first time that hackers ...</p>\n\n<a href=\"http://www.straitstimes.com/tech/tech-news/us-pipeline-hacking-signals-growing-cyber-security-risk-for-energy-system-0\">Web Link</a>\n\n</div>\n","source":"straits_highlight","collect":0,"html":"<!DOCTYPE html>\n<html>\n<head>\n<meta http-equiv=\"Content-Type\" content=\"text/html; charset=utf-8\" />\n<meta name=\"viewport\" content=\"width=device-width,initial-scale=1.0,minimum-scale=1.0,maximum-scale=1.0,user-scalable=no\"/>\n<meta name=\"format-detection\" content=\"telephone=no,email=no,address=no\" />\n<title>US pipeline hacking signals growing cyber-security risk for energy system</title>\n<style type=\"text/css\">\na,abbr,acronym,address,applet,article,aside,audio,b,big,blockquote,body,canvas,caption,center,cite,code,dd,del,details,dfn,div,dl,dt,\nem,embed,fieldset,figcaption,figure,footer,form,h1,h2,h3,h4,h5,h6,header,hgroup,html,i,iframe,img,ins,kbd,label,legend,li,mark,menu,nav,\nobject,ol,output,p,pre,q,ruby,s,samp,section,small,span,strike,strong,sub,summary,sup,table,tbody,td,tfoot,th,thead,time,tr,tt,u,ul,var,video{ font:inherit;margin:0;padding:0;vertical-align:baseline;border:0 }\nbody{ font-size:16px; line-height:1.5; color:#999; background:transparent; }\n.wrapper{ overflow:hidden;word-break:break-all;padding:10px; }\nh1,h2{ font-weight:normal; line-height:1.35; margin-bottom:.6em; }\nh3,h4,h5,h6{ line-height:1.35; margin-bottom:1em; }\nh1{ font-size:24px; }\nh2{ font-size:20px; }\nh3{ font-size:18px; }\nh4{ font-size:16px; }\nh5{ font-size:14px; }\nh6{ font-size:12px; }\np,ul,ol,blockquote,dl,table{ margin:1.2em 0; }\nul,ol{ margin-left:2em; }\nul{ list-style:disc; }\nol{ list-style:decimal; }\nli,li p{ margin:10px 0;}\nimg{ max-width:100%;display:block;margin:0 auto 1em; }\nblockquote{ color:#B5B2B1; border-left:3px solid #aaa; padding:1em; }\nstrong,b{font-weight:bold;}\nem,i{font-style:italic;}\ntable{ width:100%;border-collapse:collapse;border-spacing:1px;margin:1em 0;font-size:.9em; }\nth,td{ padding:5px;text-align:left;border:1px solid #aaa; }\nth{ font-weight:bold;background:#5d5d5d; }\n.symbol-link{font-weight:bold;}\n/* header{ border-bottom:1px solid #494756; } */\n.title{ margin:0 0 8px;line-height:1.3;color:#ddd; }\n.meta {color:#5e5c6d;font-size:13px;margin:0 0 .5em; }\na{text-decoration:none; color:#2a4b87;}\n.meta .head { display: inline-block; overflow: hidden}\n.head .h-thumb { width: 30px; height: 30px; margin: 0; padding: 0; border-radius: 50%; float: left;}\n.head .h-content { margin: 0; padding: 0 0 0 9px; float: left;}\n.head .h-name {font-size: 13px; color: #eee; margin: 0;}\n.head .h-time {font-size: 11px; color: #7E829C; margin: 0;line-height: 11px;}\n.small {font-size: 12.5px; display: inline-block; transform: scale(0.9); -webkit-transform: scale(0.9); transform-origin: left; -webkit-transform-origin: left;}\n.smaller {font-size: 12.5px; display: inline-block; transform: scale(0.8); -webkit-transform: scale(0.8); transform-origin: left; -webkit-transform-origin: left;}\n.bt-text {font-size: 12px;margin: 1.5em 0 0 0}\n.bt-text p {margin: 0}\n</style>\n</head>\n<body>\n<div class=\"wrapper\">\n<header>\n<h2 class=\"title\">\nUS pipeline hacking signals growing cyber-security risk for energy system\n</h2>\n\n<h4 class=\"meta\">\n\n\n2021-05-18 11:40 GMT+8&nbsp;&nbsp;&nbsp;<a href=http://www.straitstimes.com/tech/tech-news/us-pipeline-hacking-signals-growing-cyber-security-risk-for-energy-system-0><strong>The Straits Times</strong></a>\n\n\n</h4>\n\n</header>\n<article>\n<div>\n<p>WASHINGTON (NYTIMES) - The audacious ransomware attack that shut down a major fuel pipeline and sent Americans scrambling for petrol in the south-east last week was not the first time that hackers ...</p>\n\n<a href=\"http://www.straitstimes.com/tech/tech-news/us-pipeline-hacking-signals-growing-cyber-security-risk-for-energy-system-0\">Web Link</a>\n\n</div>\n\n\n</article>\n</div>\n</body>\n</html>\n","type":0,"thumbnail":"","relate_stocks":{},"source_url":"http://www.straitstimes.com/tech/tech-news/us-pipeline-hacking-signals-growing-cyber-security-risk-for-energy-system-0","is_english":true,"share_image_url":"https://static.laohu8.com/e9f99090a1c2ed51c021029395664489","article_id":"2136190968","content_text":"WASHINGTON (NYTIMES) - The audacious ransomware attack that shut down a major fuel pipeline and sent Americans scrambling for petrol in the south-east last week was not the first time that hackers have disrupted the United States' ageing, vulnerable energy infrastructure. And it is unlikely to be the last.Across the globe, cyber attackers are increasingly taking aim at the energy systems that underpin modern society.A February report from IBM found that the energy industry was the third-most targeted sector for such attacks last year, behind only finance and manufacturing. That was up from ninth place in 2019.\"This should be a wake-up call,\" said Mr Jonathon Monken, a principal at energy consulting firm Converge Strategies.\"When you look at what's most likely to cause disruptions to energy companies today, I think you have to put cyber-security risks at the top.\"Despite years of warnings, America's vast network of pipelines, electric grids and power plants remains acutely vulnerable to cyber attacks with the potential to disrupt energy supplies for millions of people.Dealing with those risks, analysts said, will pose a major challenge for the Biden administration as it seeks hundreds of billions of dollars to modernise the nation's energy infrastructure and transition to cleaner sources of energy to address climate change.Regulators are increasingly poised to step in.Last week, Mr Richard Glick, the chairman of the Federal Energy Regulatory Commission, said it was time to establish mandatory cyber-security standards for the nation's nearly 4.8 million km of oil and gas pipelines, similar to those currently found in the electricity sector.\"Simply encouraging pipelines to voluntarily adopt best practices is an inadequate response to the ever increasing number and sophistication of malevolent cyber actors,\" Mr Glick said in a statement.The risks to the nation's energy systems are widespread and varied. Many oil and gas pipelines, for instance, rely on decades-old control systems that are not well defended against more sophisticated cyber attacks and cannot be easily updated.And it is not just pipelines. As electric grid operators harness a growing array of digital technologies to help manage the flow of power and cut planet-warming emissions - such as smart thermostats, or far-flung yet interconnected networks of solar arrays - hackers may find new entry points to exploit.The shutdown on May 7 of the Colonial Pipeline, which stretches 8,850km from Texas to New Jersey and transports 45 per cent of the East Coast's fuel supplies, illustrates how devastating such attacks can be.On May 8, Colonial acknowledged that its corporate computer systems had been hit by a ransomware attack, in which criminal groups hold data hostage until the victim pays a ransom.A tanker delivering fuel to a Speedway petrol station in Alexandria, Virginia, last Thursday. A ransomware attack had shut down a major fuel pipeline in America and sent people scrambling for petrol in the south-east last week. PHOTO: EPA-EFEThe company said that it had shut down the pipeline as a precaution, apparently for fear that the hackers might have obtained information that would enable them to attack parts of the pipeline itself.Colonial said last Wednesday that it had started to resume pipeline operations, although it would take several days to restore full service. But throughout the south-east, panicked Americans were racing to stock up on petrol, causing thousands of petrol stations to run out of fuel.While Colonial has yet to explain exactly what triggered the pipeline shutdown, experts said there were plenty of vulnerabilities lurking throughout America's energy infrastructure.Last year, the Cybersecurity and Infrastructure Security Agency reported a ransomware attack on a natural gas compression facility that caused a shutdown of the facility for two days.In 2018, several natural gas pipeline operators reported that a system that processes customer transactions had been attacked, leading to service disruptions.But bigger risks lurk: In 2016, hackers knocked out large sections of the power grid in Ukraine, in what was thought to be the first intentional blackout triggered by a cyber attack.At the time, the Obama administration warned that America's electric utilities were not immune to similar attacks.In the past, energy companies typically kept the operational systems that run pipelines or power plants disconnected, or \"air gapped\", from the broader Internet, which meant that hackers could not easily gain access to the most critical infrastructure.But increasingly that is no longer the case, as companies install more sophisticated monitoring and diagnostics software that helps them operate these systems more efficiently. That potentially creates new cyber-security risks.\"Now these systems are all interconnected in ways that the companies themselves do not always fully understand,\" said Mr Marty Edwards, vice-president of operational technology for Tenable, a cyber-security firm.\"That provides an opportunity for attacks in one area to propagate elsewhere.\"Many industrial control systems were installed decades ago and run on outdated software, which means that even finding programmers to upgrade the systems can be a challenge.And the operators of vital energy infrastructure - such as pipelines, refineries or power plants - are often reluctant to shut down the flow of fuel or power for extended periods of time to install frequent security patches.Making things harder still, analysts said, many companies do not always have a good sense of exactly when and where it is worthwhile to spend money on costly new cyber-security defences, in part because of a lack of readily available data on which types of risks they are most likely to face.\"Companies don't always release a lot of information publicly\" about the threats they are seeing, said Mr Padraic O'Reilly, a co-founder of CyberSaint Security, who works with pipelines and critical infrastructure on cyber security.\"That can make it hard as an industry to know where to invest.\"Analysts said that the nation's electric utilities and grid operators were typically further ahead in preparing for cyber attacks than the oil and gas industry, in part because federal regulators have long required cyber-security standards for the backbone of the nation's power grid.Still, vulnerabilities remain.\"Part of it is the sheer complexity of the grid,\" said Mr Reid Sawyer, managing director of the US cyber-consulting practice at Marsh, an insurance firm.Not all levels of the grid face mandatory standards, for instance, and there are more than 3,000 utilities in the country with varying cyber-security practices.Energy companies may never be able to defend themselves against every single potential cyber attack out there, experts said. Instead, businesses and policymakers will need to design broader energy systems that are resilient to attacks and potential shutdowns, by, for instance, building in more redundancies or overrides.\"It's an old saying in cyber security: The people working defence have to be right 100 per cent of the time, while the attackers have to be right only once,\" Mr Monken said.\"That means we have to think a lot harder about contingencies when those defences fail.\"","news_type":1},"isVote":1,"likeStatus":false,"favoriteStatus":false,"reportStatus":false,"tweetType":1,"langContent":"EN"},{"id":195427303,"gmtCreate":1621309983202,"gmtModify":1704355569118,"author":{"id":"3581505866102985","authorId":"3581505866102985","name":"skyel","avatar":"https://static.tigerbbs.com/a4e416c9b1fabad56fbe0e086388d5b0","vip":1,"crmLevel":4,"crmLevelSwitch":0},"htmlText":"Humans always like to wait for things to happen before act on them or sometimes ignore it. I hope it is an expensive lesson learned.&nbsp;","listText":"Humans always like to wait for things to happen before act on them or sometimes ignore it. I hope it is an expensive lesson learned.&nbsp;","text":"Humans always like to wait for things to happen before act on them or sometimes ignore it. I hope it is an expensive lesson learned.","images":[],"top":1,"highlighted":1,"essential":1,"paper":1,"likeSize":6,"commentSize":4,"repostSize":0,"link":"https://ttm.financial/post/195427303","repostId":2136190968,"repostType":4,"repost":{"id":"2136190968","pubTimestamp":1621309200,"share":"https://www.laohu8.com/m/news/2136190968?lang=&edition=full","pubTime":"2021-05-18 11:40","market":"us","language":"en","title":"US pipeline hacking signals growing cyber-security risk for energy system","url":"https://stock-news.laohu8.com/highlight/detail?id=2136190968","media":"The Straits Times","summary":"WASHINGTON (NYTIMES) - The audacious ransomware attack that shut down a major fuel pipeline and sent","content":"<div>\n<p>WASHINGTON (NYTIMES) - The audacious ransomware attack that shut down a major fuel pipeline and sent Americans scrambling for petrol in the south-east last week was not the first time that hackers ...</p>\n\n<a href=\"http://www.straitstimes.com/tech/tech-news/us-pipeline-hacking-signals-growing-cyber-security-risk-for-energy-system-0\">Web Link</a>\n\n</div>\n","source":"straits_highlight","collect":0,"html":"<!DOCTYPE html>\n<html>\n<head>\n<meta http-equiv=\"Content-Type\" content=\"text/html; charset=utf-8\" />\n<meta name=\"viewport\" content=\"width=device-width,initial-scale=1.0,minimum-scale=1.0,maximum-scale=1.0,user-scalable=no\"/>\n<meta name=\"format-detection\" content=\"telephone=no,email=no,address=no\" />\n<title>US pipeline hacking signals growing cyber-security risk for energy system</title>\n<style type=\"text/css\">\na,abbr,acronym,address,applet,article,aside,audio,b,big,blockquote,body,canvas,caption,center,cite,code,dd,del,details,dfn,div,dl,dt,\nem,embed,fieldset,figcaption,figure,footer,form,h1,h2,h3,h4,h5,h6,header,hgroup,html,i,iframe,img,ins,kbd,label,legend,li,mark,menu,nav,\nobject,ol,output,p,pre,q,ruby,s,samp,section,small,span,strike,strong,sub,summary,sup,table,tbody,td,tfoot,th,thead,time,tr,tt,u,ul,var,video{ font:inherit;margin:0;padding:0;vertical-align:baseline;border:0 }\nbody{ font-size:16px; line-height:1.5; color:#999; background:transparent; }\n.wrapper{ overflow:hidden;word-break:break-all;padding:10px; }\nh1,h2{ font-weight:normal; line-height:1.35; margin-bottom:.6em; }\nh3,h4,h5,h6{ line-height:1.35; margin-bottom:1em; }\nh1{ font-size:24px; }\nh2{ font-size:20px; }\nh3{ font-size:18px; }\nh4{ font-size:16px; }\nh5{ font-size:14px; }\nh6{ font-size:12px; }\np,ul,ol,blockquote,dl,table{ margin:1.2em 0; }\nul,ol{ margin-left:2em; }\nul{ list-style:disc; }\nol{ list-style:decimal; }\nli,li p{ margin:10px 0;}\nimg{ max-width:100%;display:block;margin:0 auto 1em; }\nblockquote{ color:#B5B2B1; border-left:3px solid #aaa; padding:1em; }\nstrong,b{font-weight:bold;}\nem,i{font-style:italic;}\ntable{ width:100%;border-collapse:collapse;border-spacing:1px;margin:1em 0;font-size:.9em; }\nth,td{ padding:5px;text-align:left;border:1px solid #aaa; }\nth{ font-weight:bold;background:#5d5d5d; }\n.symbol-link{font-weight:bold;}\n/* header{ border-bottom:1px solid #494756; } */\n.title{ margin:0 0 8px;line-height:1.3;color:#ddd; }\n.meta {color:#5e5c6d;font-size:13px;margin:0 0 .5em; }\na{text-decoration:none; color:#2a4b87;}\n.meta .head { display: inline-block; overflow: hidden}\n.head .h-thumb { width: 30px; height: 30px; margin: 0; padding: 0; border-radius: 50%; float: left;}\n.head .h-content { margin: 0; padding: 0 0 0 9px; float: left;}\n.head .h-name {font-size: 13px; color: #eee; margin: 0;}\n.head .h-time {font-size: 11px; color: #7E829C; margin: 0;line-height: 11px;}\n.small {font-size: 12.5px; display: inline-block; transform: scale(0.9); -webkit-transform: scale(0.9); transform-origin: left; -webkit-transform-origin: left;}\n.smaller {font-size: 12.5px; display: inline-block; transform: scale(0.8); -webkit-transform: scale(0.8); transform-origin: left; -webkit-transform-origin: left;}\n.bt-text {font-size: 12px;margin: 1.5em 0 0 0}\n.bt-text p {margin: 0}\n</style>\n</head>\n<body>\n<div class=\"wrapper\">\n<header>\n<h2 class=\"title\">\nUS pipeline hacking signals growing cyber-security risk for energy system\n</h2>\n\n<h4 class=\"meta\">\n\n\n2021-05-18 11:40 GMT+8&nbsp;&nbsp;&nbsp;<a href=http://www.straitstimes.com/tech/tech-news/us-pipeline-hacking-signals-growing-cyber-security-risk-for-energy-system-0><strong>The Straits Times</strong></a>\n\n\n</h4>\n\n</header>\n<article>\n<div>\n<p>WASHINGTON (NYTIMES) - The audacious ransomware attack that shut down a major fuel pipeline and sent Americans scrambling for petrol in the south-east last week was not the first time that hackers ...</p>\n\n<a href=\"http://www.straitstimes.com/tech/tech-news/us-pipeline-hacking-signals-growing-cyber-security-risk-for-energy-system-0\">Web Link</a>\n\n</div>\n\n\n</article>\n</div>\n</body>\n</html>\n","type":0,"thumbnail":"","relate_stocks":{},"source_url":"http://www.straitstimes.com/tech/tech-news/us-pipeline-hacking-signals-growing-cyber-security-risk-for-energy-system-0","is_english":true,"share_image_url":"https://static.laohu8.com/e9f99090a1c2ed51c021029395664489","article_id":"2136190968","content_text":"WASHINGTON (NYTIMES) - The audacious ransomware attack that shut down a major fuel pipeline and sent Americans scrambling for petrol in the south-east last week was not the first time that hackers have disrupted the United States' ageing, vulnerable energy infrastructure. And it is unlikely to be the last.Across the globe, cyber attackers are increasingly taking aim at the energy systems that underpin modern society.A February report from IBM found that the energy industry was the third-most targeted sector for such attacks last year, behind only finance and manufacturing. That was up from ninth place in 2019.\"This should be a wake-up call,\" said Mr Jonathon Monken, a principal at energy consulting firm Converge Strategies.\"When you look at what's most likely to cause disruptions to energy companies today, I think you have to put cyber-security risks at the top.\"Despite years of warnings, America's vast network of pipelines, electric grids and power plants remains acutely vulnerable to cyber attacks with the potential to disrupt energy supplies for millions of people.Dealing with those risks, analysts said, will pose a major challenge for the Biden administration as it seeks hundreds of billions of dollars to modernise the nation's energy infrastructure and transition to cleaner sources of energy to address climate change.Regulators are increasingly poised to step in.Last week, Mr Richard Glick, the chairman of the Federal Energy Regulatory Commission, said it was time to establish mandatory cyber-security standards for the nation's nearly 4.8 million km of oil and gas pipelines, similar to those currently found in the electricity sector.\"Simply encouraging pipelines to voluntarily adopt best practices is an inadequate response to the ever increasing number and sophistication of malevolent cyber actors,\" Mr Glick said in a statement.The risks to the nation's energy systems are widespread and varied. Many oil and gas pipelines, for instance, rely on decades-old control systems that are not well defended against more sophisticated cyber attacks and cannot be easily updated.And it is not just pipelines. As electric grid operators harness a growing array of digital technologies to help manage the flow of power and cut planet-warming emissions - such as smart thermostats, or far-flung yet interconnected networks of solar arrays - hackers may find new entry points to exploit.The shutdown on May 7 of the Colonial Pipeline, which stretches 8,850km from Texas to New Jersey and transports 45 per cent of the East Coast's fuel supplies, illustrates how devastating such attacks can be.On May 8, Colonial acknowledged that its corporate computer systems had been hit by a ransomware attack, in which criminal groups hold data hostage until the victim pays a ransom.A tanker delivering fuel to a Speedway petrol station in Alexandria, Virginia, last Thursday. A ransomware attack had shut down a major fuel pipeline in America and sent people scrambling for petrol in the south-east last week. PHOTO: EPA-EFEThe company said that it had shut down the pipeline as a precaution, apparently for fear that the hackers might have obtained information that would enable them to attack parts of the pipeline itself.Colonial said last Wednesday that it had started to resume pipeline operations, although it would take several days to restore full service. But throughout the south-east, panicked Americans were racing to stock up on petrol, causing thousands of petrol stations to run out of fuel.While Colonial has yet to explain exactly what triggered the pipeline shutdown, experts said there were plenty of vulnerabilities lurking throughout America's energy infrastructure.Last year, the Cybersecurity and Infrastructure Security Agency reported a ransomware attack on a natural gas compression facility that caused a shutdown of the facility for two days.In 2018, several natural gas pipeline operators reported that a system that processes customer transactions had been attacked, leading to service disruptions.But bigger risks lurk: In 2016, hackers knocked out large sections of the power grid in Ukraine, in what was thought to be the first intentional blackout triggered by a cyber attack.At the time, the Obama administration warned that America's electric utilities were not immune to similar attacks.In the past, energy companies typically kept the operational systems that run pipelines or power plants disconnected, or \"air gapped\", from the broader Internet, which meant that hackers could not easily gain access to the most critical infrastructure.But increasingly that is no longer the case, as companies install more sophisticated monitoring and diagnostics software that helps them operate these systems more efficiently. That potentially creates new cyber-security risks.\"Now these systems are all interconnected in ways that the companies themselves do not always fully understand,\" said Mr Marty Edwards, vice-president of operational technology for Tenable, a cyber-security firm.\"That provides an opportunity for attacks in one area to propagate elsewhere.\"Many industrial control systems were installed decades ago and run on outdated software, which means that even finding programmers to upgrade the systems can be a challenge.And the operators of vital energy infrastructure - such as pipelines, refineries or power plants - are often reluctant to shut down the flow of fuel or power for extended periods of time to install frequent security patches.Making things harder still, analysts said, many companies do not always have a good sense of exactly when and where it is worthwhile to spend money on costly new cyber-security defences, in part because of a lack of readily available data on which types of risks they are most likely to face.\"Companies don't always release a lot of information publicly\" about the threats they are seeing, said Mr Padraic O'Reilly, a co-founder of CyberSaint Security, who works with pipelines and critical infrastructure on cyber security.\"That can make it hard as an industry to know where to invest.\"Analysts said that the nation's electric utilities and grid operators were typically further ahead in preparing for cyber attacks than the oil and gas industry, in part because federal regulators have long required cyber-security standards for the backbone of the nation's power grid.Still, vulnerabilities remain.\"Part of it is the sheer complexity of the grid,\" said Mr Reid Sawyer, managing director of the US cyber-consulting practice at Marsh, an insurance firm.Not all levels of the grid face mandatory standards, for instance, and there are more than 3,000 utilities in the country with varying cyber-security practices.Energy companies may never be able to defend themselves against every single potential cyber attack out there, experts said. Instead, businesses and policymakers will need to design broader energy systems that are resilient to attacks and potential shutdowns, by, for instance, building in more redundancies or overrides.\"It's an old saying in cyber security: The people working defence have to be right 100 per cent of the time, while the attackers have to be right only once,\" Mr Monken said.\"That means we have to think a lot harder about contingencies when those defences fail.\"","news_type":1},"isVote":1,"likeStatus":false,"favoriteStatus":false,"reportStatus":false,"tweetType":1,"comments":[{"id":4363562,"gmtCreate":1621312488783,"gmtModify":1680789433420,"authorId":3582714812293607,"author":{"id":3582714812293607,"authorId":3582714812293607,"name":"Darylzhuo","avatar":"https://static.tigerbbs.com/fd5e4be85ccfbeb4c1c4b4faed74f6f1","vip":1,"crmLevel":1,"crmLevelSwitch":0,"individualDisplayBadges":[]},"repliedAuthorId":0,"objectId":195427303,"type":1,"supId":4363424,"prevId":0,"content":"<u>Good</u>","text":"<u>Good</u>","html":"<u>Good</u>"},{"id":4363701,"gmtCreate":1621313317685,"gmtModify":1680789429395,"authorId":3584405602897728,"author":{"id":3584405602897728,"authorId":3584405602897728,"name":"EeC","avatar":"https://static.tigerbbs.com/03c26214aba1f7a26a1eb4841ffd150a","vip":1,"crmLevel":2,"crmLevelSwitch":0,"individualDisplayBadges":[]},"repliedAuthorId":0,"objectId":195427303,"type":1,"supId":0,"prevId":0,"content":"Very wisewords","text":"Very wisewords","html":"Very wisewords"},{"id":4363398,"gmtCreate":1621311581325,"gmtModify":1680789424266,"authorId":3574053691106982,"author":{"id":3574053691106982,"authorId":3574053691106982,"name":"jw321","avatar":"https://static.tigerbbs.com/1263b51c7856e75fbd5cf4072078ca6e","vip":1,"crmLevel":4,"crmLevelSwitch":0,"individualDisplayBadges":[]},"repliedAuthorId":0,"objectId":195427303,"type":1,"supId":0,"prevId":0,"content":"its like delaying to buy the dip","text":"its like delaying to buy the dip","html":"its like delaying to buy the dip"},{"id":4363424,"gmtCreate":1621311726055,"gmtModify":1680789424113,"authorId":3580190462625568,"author":{"id":3580190462625568,"authorId":3580190462625568,"name":"DarrylWong","avatar":"https://static.tigerbbs.com/8e4b82d595be883bcd8e099845c3f407","vip":1,"crmLevel":2,"crmLevelSwitch":0,"individualDisplayBadges":[]},"repliedAuthorId":0,"objectId":195427303,"type":1,"supId":0,"prevId":0,"content":"exactly","text":"exactly","html":"exactly"}],"langContent":"EN"}],"hasMoreComments":true,"newsSizeData":{"likeSize":76,"commentSize":8,"repostSize":0,"favoriteSize":0,"likeStatus":false,"favoriteStatus":false}}