TLDR InfoSec · MISCELLANEOUS
AI 'HACKER' FINDS 4 SEVERE BUGS IN POPULAR INDUSTRIAL CONTROL SOFTWARE IN UNDER 4 HOURS
Summary from the TLDR InfoSec newsletter
Causal Security's Cipher found four EPICS Base vulnerabilities in three hours and 49 minutes. One critical integer overflow, rated CVSS 9.8, could enable remote code execution. Three high-severity flaws permit crashes, memory corruption, or information disclosure. Exploitation requires network access to vulnerable EPICS services. EPICS controls equipment including particle accelerators and fusion experiments.