Kaspersky SAS 2015 CablemeltingBAD

Slides from Kaspersky SAS "SCADA in the cloud" talk. If you saw our 31C3 report you can start from the slide N36.

Different type of SCADA...

+Update http://blog.ptsecurity.com/2015/01/hacking-atm-with-raspberry-pi.html

Slides and demo from Olga and Alex report on ATM hacking at Black Hat. MS08-067 strikes again. Now ATM.
There are a lot of different kinds of SCADA...

Not by SCADA alone: ATM hack @BH Europe

Alexey and Olga gonna speak @BlackHat 2014 EU on ATM security.

SCADA hacking @30C3

Anniversary Chaos Communication Congress going to be awesome.
We cannot stand aside. SCADA StrangeLove crowd will rock there.
Gleb Gritsai and Sergey Gordeychik will talk about thing “We already know”, but a lot of thing “We don’t know yet…”.

Yury Goltsev  and Alexander Zaitsev  on Day 3 will speak about PHDays Labyrinth.
WTF PHDays Labyrinth? It is a magic. Hacker’s Disneyland. Here it is.

SCADA Security Deep Inside

Members of SCADA StrangeLove Gleb Gritsai and Alexander Tlyapov gave a talk at Zeronights conference @Moscow. New slides were splitted into two parts:
 - Industrial protocols (MMS and IEC 104) and how to act during a penetration testing of ICS enviroment with this protocols
- Patched WinCC vulnerabilities discovered by SCADA SL group including Alexander's results of deep reverse engineering of solution

We'd like to thank attendees for their questions and interest in topic. This year showed there is a room for organizational improvements, but the conference talks and the community compensate any negative impressions. Kudos to the organizers of the Zeronights conference for bringing up this international security event and giving us a chance to speak there.

What hack may come

Last week four guys of the SCADA StrangeLove team took part in Power of Community conference in Seoul, South Korea.
Alexander Timorin, Yuri Goltsev and Ilya Karpov run Choo Choo PWN challenge and workshop, and Sergey Gordeychik spoke on automatic exploit generation.






Choo Choo PWN challenge was built for PHDays III and it was the first time it was presented in Korea.

SCADA Strangelove @29c3

Our speech at Chaos Communication Congress #29C3.

Starts at 8:55.

 

Slides

SCADA and Chaos

Our team will participate 29th Chaos Communication Congress. Sergey Gordeychik, Gleb Gritsai and  Denis Baranov will talk about our new researches in  ICS security and vulnerabilities in SCADA and PLC systems. 

Please find speech description and schedule here:

 http://events.ccc.de/congress/2012/Fahrplan/events/5059.en.html

Yuri Goltsev and Segey Scherbel will drive on 29C3 $natch (Snatch) competition, real-time internet banking hacking contest. Please join and show your skills: http://events.ccc.de/congress/2012/wiki/$natch.

See you in Hambur!

PS. Full 29C3 agenda and 29C3 schedule for workshops:
http://events.ccc.de/congress/2012/Fahrplan/

http://events.ccc.de/congress/2012/wiki/Workshops

Security of the morning calm

In early November 2012, the SCADAStrangeLove striking force was thoughtless enough to accept an offer to speak at the Power of Community (POC) conference held in Seoul, South Korea. While I am still under the impression, I want to tell you how they do security in the Land of the Morning Freshness.
Many photos are under the cut.

SCADA StrangeLove and Power Of Community

We will speak about vulnerabilities in SCADA systems @powerofcommunity conference.

New releases comming soon.

Links:
http://www.powerofcommunity.net
https://twitter.com/#!/search/realtime/powerofcommunity

 See you @Seoul

Positive Hack Days video report

Video report from best security event in Europe.

Video of reports:
http://www.phdays.com/press/news/7903/

Slides:
http://www.phdays.com/program/conference/
http://www.phdays.com/program/workshops/

Twitter:
https://twitter.com/#!/search/realtime/%23phdays

SCADA Strangelove or: How I Learned to Start Worrying and Love Nuclear Plants

Our submission accepted @_defcon_. Special thanks to Nikita Kronenberg for write-up.

Talk: https://www.defcon.org/html/defcon-20/dc-20-speakers.html#Gordeychik

Schedule: https://www.defcon.org/html/defcon-20/dc-20-schedule.html#sundayspeakers

Special release for Def Con guys:

SCADA Strangelove or: How I Learned to Start Worrying and Love Nuclear Plants

SERGEY GORDEYCHIK
DENIS BARANOV
GLEB GRITSAI