TLDR InfoSec · MISCELLANEOUS

AI 'HACKER' FINDS 4 SEVERE BUGS IN POPULAR INDUSTRIAL CONTROL SOFTWARE IN UNDER 4 HOURS

theregister.com3 min read

Summary from the TLDR InfoSec newsletter

Causal Security's Cipher found four EPICS Base vulnerabilities in three hours and 49 minutes. One critical integer overflow, rated CVSS 9.8, could enable remote code execution. Three high-severity flaws permit crashes, memory corruption, or information disclosure. Exploitation requires network access to vulnerable EPICS services. EPICS controls equipment including particle accelerators and fusion experiments.