UTILITIES, FACTORIES AT RISK FROM ENCRYPTION HOLES IN INDUSTRIAL PROTOCOL

Summary from the TLDR InfoSec newsletter

OPC UA, a widely used industrial protocol, contains cryptographic design flaws that enable authentication bypass and message confusion attacks. Researcher Tom Tervoort has disclosed CVEs and PoCs that affect multiple vendors. He recommends applying patches, disabling OPC UA over HTTPS and Basic128Rsa15, and enforcing network restrictions like IP allowlists to limit exposure.