US pipeline hacking signals growing cyber-security risk for energy system_老虎社区_美港股上老虎

US pipeline hacking signals growing cyber-security risk for energy system

The Straits Times2021-05-18

WASHINGTON (NYTIMES) - The audacious ransomware attack that shut down a major fuel pipeline and sent Americans scrambling for petrol in the south-east last week was not the first time that hackers ...

网页链接

免责声明：本文观点仅代表作者个人观点，不构成本平台的投资建议，本平台不对文章信息准确性、完整性和及时性做出任何保证，亦不对因使用或信赖文章信息引发的任何损失承担责任。

Poggers
·2021-05-18
Raising some serious issues
回复
点赞
举报
收起
- Poggers:
  Lol
  2021-05-18
  回复
  举报
WildFoE
·2021-05-18
Like n share [Cool]
回复
点赞
举报
LEEQF
·2021-05-18
Reply n like pls
回复
点赞
举报
Derrick0359
·2021-05-18
[Cool] [Cool]
回复
点赞
举报
Spear88
·2021-05-18
Good
回复
点赞
举报
Marcus1993
·2021-05-18
Wow
回复
点赞
举报
KingKong88
·2021-05-18
It affects every sector, not just energy
回复
2
举报
skyel
·2021-05-18
Humans always like to wait for things to happen before act on them or sometimes ignore it. I hope it is an expensive lesson learned.
回复
6
举报
收起
- jw321:
  its like delaying to buy the dip
  2021-05-18
  回复
  举报
- DarrylWong:
  exactly
  2021-05-18
  回复
  举报
- Darylzhuo:
  Good
  2021-05-18
  回复
  举报
查看更多 1 条评论

热议股票

7x24

全部

关于我们·老虎社区守则·老虎社区账号管理规范·老虎社区服务协议·老虎社区隐私政策

公司名称：北京至简风宜信息技术有限公司

违法和不良信息投诉：010-5681-3562（工作时间9:30-18:30）

邮箱：service@laohu8.com

营业执照：91110105MA01A4U55R

ICP备：京ICP备18016422号

网安备：京公网安备11010502036490

关注我们

{"i18n":{"language":"zh_CN"},"data":{"share":"https://www.laohu8.com/m/news/2136190968?lang=zh_CN&edition=full","thumbnail":"","is_english":true,"pubTime":"2021-05-18 11:40","share_image_url":"https://static.laohu8.com/e9f99090a1c2ed51c021029395664489","id":"2136190968","market":"us","top_or_hot":-1,"title":"US pipeline hacking signals growing cyber-security risk for energy system","media":"The Straits Times","content":"<div>\n<p>WASHINGTON (NYTIMES) - The audacious ransomware attack that shut down a major fuel pipeline and sent Americans scrambling for petrol in the south-east last week was not the first time that hackers ...</p>\n\n<a href=\"http://www.straitstimes.com/tech/tech-news/us-pipeline-hacking-signals-growing-cyber-security-risk-for-energy-system-0\">网页链接</a>\n\n</div>\n","source":"straits_highlight","html":"<!DOCTYPE html>\n<html>\n<head>\n<meta http-equiv=\"Content-Type\" content=\"text/html; charset=utf-8\" />\n<meta name=\"viewport\" content=\"width=device-width,initial-scale=1.0,minimum-scale=1.0,maximum-scale=1.0,user-scalable=no\"/>\n<meta name=\"format-detection\" content=\"telephone=no,email=no,address=no\" />\n<title>US pipeline hacking signals growing cyber-security risk for energy system</title>\n<style type=\"text/css\">\na,abbr,acronym,address,applet,article,aside,audio,b,big,blockquote,body,canvas,caption,center,cite,code,dd,del,details,dfn,div,dl,dt,\nem,embed,fieldset,figcaption,figure,footer,form,h1,h2,h3,h4,h5,h6,header,hgroup,html,i,iframe,img,ins,kbd,label,legend,li,mark,menu,nav,\nobject,ol,output,p,pre,q,ruby,s,samp,section,small,span,strike,strong,sub,summary,sup,table,tbody,td,tfoot,th,thead,time,tr,tt,u,ul,var,video{ font:inherit;margin:0;padding:0;vertical-align:baseline;border:0 }\nbody{ font-size:16px; line-height:1.5; color:#999; background:transparent; }\n.wrapper{ overflow:hidden;word-break:break-all;padding:10px; }\nh1,h2{ font-weight:normal; line-height:1.35; margin-bottom:.6em; }\nh3,h4,h5,h6{ line-height:1.35; margin-bottom:1em; }\nh1{ font-size:24px; }\nh2{ font-size:20px; }\nh3{ font-size:18px; }\nh4{ font-size:16px; }\nh5{ font-size:14px; }\nh6{ font-size:12px; }\np,ul,ol,blockquote,dl,table{ margin:1.2em 0; }\nul,ol{ margin-left:2em; }\nul{ list-style:disc; }\nol{ list-style:decimal; }\nli,li p{ margin:10px 0;}\nimg{ max-width:100%;display:block;margin:0 auto 1em; }\nblockquote{ color:#B5B2B1; border-left:3px solid #aaa; padding:1em; }\nstrong,b{font-weight:bold;}\nem,i{font-style:italic;}\ntable{ width:100%;border-collapse:collapse;border-spacing:1px;margin:1em 0;font-size:.9em; }\nth,td{ padding:5px;text-align:left;border:1px solid #aaa; }\nth{ font-weight:bold;background:#5d5d5d; }\n.symbol-link{font-weight:bold;}\n/* header{ border-bottom:1px solid #494756; } */\n.title{ margin:0 0 8px;line-height:1.3;color:#ddd; }\n.meta {color:#5e5c6d;font-size:13px;margin:0 0 .5em; }\na{text-decoration:none; color:#2a4b87;}\n.meta .head { display: inline-block; overflow: hidden}\n.head .h-thumb { width: 30px; height: 30px; margin: 0; padding: 0; border-radius: 50%; float: left;}\n.head .h-content { margin: 0; padding: 0 0 0 9px; float: left;}\n.head .h-name {font-size: 13px; color: #eee; margin: 0;}\n.head .h-time {font-size: 11px; color: #7E829C; margin: 0;line-height: 11px;}\n.small {font-size: 12.5px; display: inline-block; transform: scale(0.9); -webkit-transform: scale(0.9); transform-origin: left; -webkit-transform-origin: left;}\n.smaller {font-size: 12.5px; display: inline-block; transform: scale(0.8); -webkit-transform: scale(0.8); transform-origin: left; -webkit-transform-origin: left;}\n.bt-text {font-size: 12px;margin: 1.5em 0 0 0}\n.bt-text p {margin: 0}\n</style>\n</head>\n<body>\n<div class=\"wrapper\">\n<header>\n<h2 class=\"title\">\nUS pipeline hacking signals growing cyber-security risk for energy system\n</h2>\n\n<h4 class=\"meta\">\n\n\n2021-05-18 11:40 GMT+8&nbsp;&nbsp;&nbsp;<a href=http://www.straitstimes.com/tech/tech-news/us-pipeline-hacking-signals-growing-cyber-security-risk-for-energy-system-0><strong>The Straits Times</strong></a>\n\n\n</h4>\n\n</header>\n<article>\n<div>\n<p>WASHINGTON (NYTIMES) - The audacious ransomware attack that shut down a major fuel pipeline and sent Americans scrambling for petrol in the south-east last week was not the first time that hackers ...</p>\n\n<a href=\"http://www.straitstimes.com/tech/tech-news/us-pipeline-hacking-signals-growing-cyber-security-risk-for-energy-system-0\">网页链接</a>\n\n</div>\n\n\n</article>\n</div>\n</body>\n</html>\n","isBrief":false,"type":0,"news_type":1,"symbol":null,"symbol_name":null,"start_time":0,"source_url":"http://www.straitstimes.com/tech/tech-news/us-pipeline-hacking-signals-growing-cyber-security-risk-for-energy-system-0","article_id":"2136190968","we_media_id":null,"thumbnails":[],"rights":{"source":"straits_highlight","url":"http://www.straitstimes.com/tech/tech-news/us-pipeline-hacking-signals-growing-cyber-security-risk-for-energy-system-0","rn_cache_url":null,"customStyle":"","selectors":"body","filters":"","directOrigin":true},"url":"https://stock-news.laohu8.com/highlight/detail?id=2136190968","pubTimestamp":1621309200,"sourceInfo":{"source_id":"straits_highlight","name":"Straits Times"},"weMediaInfo":null,"summary":"WASHINGTON (NYTIMES) - The audacious ransomware attack that shut down a major fuel pipeline and sent","collect":0,"end_time":0,"defaultTopTitle":"straitstimes.com","property":[],"viewcount":null,"language":"en","relate_stocks":{},"translate_title":"美国管道黑客攻击预示能源系统网络安全风险加大","themeId":null,"isJumpTheme":false,"ttsUrl":null,"symbols_score_info":{},"content_text":"WASHINGTON (NYTIMES) - The audacious ransomware attack that shut down a major fuel pipeline and sent Americans scrambling for petrol in the south-east last week was not the first time that hackers have disrupted the United States' ageing, vulnerable energy infrastructure. And it is unlikely to be the last.Across the globe, cyber attackers are increasingly taking aim at the energy systems that underpin modern society.A February report from IBM found that the energy industry was the third-most targeted sector for such attacks last year, behind only finance and manufacturing. That was up from ninth place in 2019.\"This should be a wake-up call,\" said Mr Jonathon Monken, a principal at energy consulting firm Converge Strategies.\"When you look at what's most likely to cause disruptions to energy companies today, I think you have to put cyber-security risks at the top.\"Despite years of warnings, America's vast network of pipelines, electric grids and power plants remains acutely vulnerable to cyber attacks with the potential to disrupt energy supplies for millions of people.Dealing with those risks, analysts said, will pose a major challenge for the Biden administration as it seeks hundreds of billions of dollars to modernise the nation's energy infrastructure and transition to cleaner sources of energy to address climate change.Regulators are increasingly poised to step in.Last week, Mr Richard Glick, the chairman of the Federal Energy Regulatory Commission, said it was time to establish mandatory cyber-security standards for the nation's nearly 4.8 million km of oil and gas pipelines, similar to those currently found in the electricity sector.\"Simply encouraging pipelines to voluntarily adopt best practices is an inadequate response to the ever increasing number and sophistication of malevolent cyber actors,\" Mr Glick said in a statement.The risks to the nation's energy systems are widespread and varied. Many oil and gas pipelines, for instance, rely on decades-old control systems that are not well defended against more sophisticated cyber attacks and cannot be easily updated.And it is not just pipelines. As electric grid operators harness a growing array of digital technologies to help manage the flow of power and cut planet-warming emissions - such as smart thermostats, or far-flung yet interconnected networks of solar arrays - hackers may find new entry points to exploit.The shutdown on May 7 of the Colonial Pipeline, which stretches 8,850km from Texas to New Jersey and transports 45 per cent of the East Coast's fuel supplies, illustrates how devastating such attacks can be.On May 8, Colonial acknowledged that its corporate computer systems had been hit by a ransomware attack, in which criminal groups hold data hostage until the victim pays a ransom.A tanker delivering fuel to a Speedway petrol station in Alexandria, Virginia, last Thursday. A ransomware attack had shut down a major fuel pipeline in America and sent people scrambling for petrol in the south-east last week. PHOTO: EPA-EFEThe company said that it had shut down the pipeline as a precaution, apparently for fear that the hackers might have obtained information that would enable them to attack parts of the pipeline itself.Colonial said last Wednesday that it had started to resume pipeline operations, although it would take several days to restore full service. But throughout the south-east, panicked Americans were racing to stock up on petrol, causing thousands of petrol stations to run out of fuel.While Colonial has yet to explain exactly what triggered the pipeline shutdown, experts said there were plenty of vulnerabilities lurking throughout America's energy infrastructure.Last year, the Cybersecurity and Infrastructure Security Agency reported a ransomware attack on a natural gas compression facility that caused a shutdown of the facility for two days.In 2018, several natural gas pipeline operators reported that a system that processes customer transactions had been attacked, leading to service disruptions.But bigger risks lurk: In 2016, hackers knocked out large sections of the power grid in Ukraine, in what was thought to be the first intentional blackout triggered by a cyber attack.At the time, the Obama administration warned that America's electric utilities were not immune to similar attacks.In the past, energy companies typically kept the operational systems that run pipelines or power plants disconnected, or \"air gapped\", from the broader Internet, which meant that hackers could not easily gain access to the most critical infrastructure.But increasingly that is no longer the case, as companies install more sophisticated monitoring and diagnostics software that helps them operate these systems more efficiently. That potentially creates new cyber-security risks.\"Now these systems are all interconnected in ways that the companies themselves do not always fully understand,\" said Mr Marty Edwards, vice-president of operational technology for Tenable, a cyber-security firm.\"That provides an opportunity for attacks in one area to propagate elsewhere.\"Many industrial control systems were installed decades ago and run on outdated software, which means that even finding programmers to upgrade the systems can be a challenge.And the operators of vital energy infrastructure - such as pipelines, refineries or power plants - are often reluctant to shut down the flow of fuel or power for extended periods of time to install frequent security patches.Making things harder still, analysts said, many companies do not always have a good sense of exactly when and where it is worthwhile to spend money on costly new cyber-security defences, in part because of a lack of readily available data on which types of risks they are most likely to face.\"Companies don't always release a lot of information publicly\" about the threats they are seeing, said Mr Padraic O'Reilly, a co-founder of CyberSaint Security, who works with pipelines and critical infrastructure on cyber security.\"That can make it hard as an industry to know where to invest.\"Analysts said that the nation's electric utilities and grid operators were typically further ahead in preparing for cyber attacks than the oil and gas industry, in part because federal regulators have long required cyber-security standards for the backbone of the nation's power grid.Still, vulnerabilities remain.\"Part of it is the sheer complexity of the grid,\" said Mr Reid Sawyer, managing director of the US cyber-consulting practice at Marsh, an insurance firm.Not all levels of the grid face mandatory standards, for instance, and there are more than 3,000 utilities in the country with varying cyber-security practices.Energy companies may never be able to defend themselves against every single potential cyber attack out there, experts said. Instead, businesses and policymakers will need to design broader energy systems that are resilient to attacks and potential shutdowns, by, for instance, building in more redundancies or overrides.\"It's an old saying in cyber security: The people working defence have to be right 100 per cent of the time, while the attackers have to be right only once,\" Mr Monken said.\"That means we have to think a lot harder about contingencies when those defences fail.\"","kind":null,"is_publish_news":false,"is_publish_highlight":true,"is_publish_live":false,"is_publish_wemedia":null,"editions":null,"column":"","sentiment":"0","news_tag":"","news_rank":0,"symbols":[],"gpt_button":1},"commentList":[{"id":195764555,"gmtCreate":1621317569977,"gmtModify":1634192481867,"author":{"id":"3567511757211423","authorId":"3567511757211423","authorIdStr":"3567511757211423","name":"Poggers","avatar":"https://static.tigerbbs.com/7da477926f4d48b8b0e46ebd25ac6947","vip":1,"crmLevel":7,"crmLevelSwitch":0,"idStr":"3567511757211423"},"htmlText":"Raising some serious issues","listText":"Raising some serious issues","text":"Raising some serious issues","images":[],"top":1,"highlighted":1,"essential":1,"paper":1,"likeSize":0,"commentSize":1,"repostSize":0,"link":"https://laohu8.com/post/195764555","repostId":2136190968,"repostType":4,"repost":{"id":"2136190968","pubTimestamp":1621309200,"share":"https://www.laohu8.com/m/news/2136190968?lang=&edition=full","pubTime":"2021-05-18 11:40","market":"us","language":"en","title":"US pipeline hacking signals growing cyber-security risk for energy system","url":"https://stock-news.laohu8.com/highlight/detail?id=2136190968","media":"The Straits Times","summary":"WASHINGTON (NYTIMES) - The audacious ransomware attack that shut down a major fuel pipeline and sent","content":"<div>\n<p>WASHINGTON (NYTIMES) - The audacious ransomware attack that shut down a major fuel pipeline and sent Americans scrambling for petrol in the south-east last week was not the first time that hackers ...</p>\n\n<a href=\"http://www.straitstimes.com/tech/tech-news/us-pipeline-hacking-signals-growing-cyber-security-risk-for-energy-system-0\">Web Link</a>\n\n</div>\n","source":"straits_highlight","collect":0,"html":"<!DOCTYPE html>\n<html>\n<head>\n<meta http-equiv=\"Content-Type\" content=\"text/html; charset=utf-8\" />\n<meta name=\"viewport\" content=\"width=device-width,initial-scale=1.0,minimum-scale=1.0,maximum-scale=1.0,user-scalable=no\"/>\n<meta name=\"format-detection\" content=\"telephone=no,email=no,address=no\" />\n<title>US pipeline hacking signals growing cyber-security risk for energy system</title>\n<style type=\"text/css\">\na,abbr,acronym,address,applet,article,aside,audio,b,big,blockquote,body,canvas,caption,center,cite,code,dd,del,details,dfn,div,dl,dt,\nem,embed,fieldset,figcaption,figure,footer,form,h1,h2,h3,h4,h5,h6,header,hgroup,html,i,iframe,img,ins,kbd,label,legend,li,mark,menu,nav,\nobject,ol,output,p,pre,q,ruby,s,samp,section,small,span,strike,strong,sub,summary,sup,table,tbody,td,tfoot,th,thead,time,tr,tt,u,ul,var,video{ font:inherit;margin:0;padding:0;vertical-align:baseline;border:0 }\nbody{ font-size:16px; line-height:1.5; color:#999; background:transparent; }\n.wrapper{ overflow:hidden;word-break:break-all;padding:10px; }\nh1,h2{ font-weight:normal; line-height:1.35; margin-bottom:.6em; }\nh3,h4,h5,h6{ line-height:1.35; margin-bottom:1em; }\nh1{ font-size:24px; }\nh2{ font-size:20px; }\nh3{ font-size:18px; }\nh4{ font-size:16px; }\nh5{ font-size:14px; }\nh6{ font-size:12px; }\np,ul,ol,blockquote,dl,table{ margin:1.2em 0; }\nul,ol{ margin-left:2em; }\nul{ list-style:disc; }\nol{ list-style:decimal; }\nli,li p{ margin:10px 0;}\nimg{ max-width:100%;display:block;margin:0 auto 1em; }\nblockquote{ color:#B5B2B1; border-left:3px solid #aaa; padding:1em; }\nstrong,b{font-weight:bold;}\nem,i{font-style:italic;}\ntable{ width:100%;border-collapse:collapse;border-spacing:1px;margin:1em 0;font-size:.9em; }\nth,td{ padding:5px;text-align:left;border:1px solid #aaa; }\nth{ font-weight:bold;background:#5d5d5d; }\n.symbol-link{font-weight:bold;}\n/* header{ border-bottom:1px solid #494756; } */\n.title{ margin:0 0 8px;line-height:1.3;color:#ddd; }\n.meta {color:#5e5c6d;font-size:13px;margin:0 0 .5em; }\na{text-decoration:none; color:#2a4b87;}\n.meta .head { display: inline-block; overflow: hidden}\n.head .h-thumb { width: 30px; height: 30px; margin: 0; padding: 0; border-radius: 50%; float: left;}\n.head .h-content { margin: 0; padding: 0 0 0 9px; float: left;}\n.head .h-name {font-size: 13px; color: #eee; margin: 0;}\n.head .h-time {font-size: 11px; color: #7E829C; margin: 0;line-height: 11px;}\n.small {font-size: 12.5px; display: inline-block; transform: scale(0.9); -webkit-transform: scale(0.9); transform-origin: left; -webkit-transform-origin: left;}\n.smaller {font-size: 12.5px; display: inline-block; transform: scale(0.8); -webkit-transform: scale(0.8); transform-origin: left; -webkit-transform-origin: left;}\n.bt-text {font-size: 12px;margin: 1.5em 0 0 0}\n.bt-text p {margin: 0}\n</style>\n</head>\n<body>\n<div class=\"wrapper\">\n<header>\n<h2 class=\"title\">\nUS pipeline hacking signals growing cyber-security risk for energy system\n</h2>\n\n<h4 class=\"meta\">\n\n\n2021-05-18 11:40 GMT+8&nbsp;&nbsp;&nbsp;<a href=http://www.straitstimes.com/tech/tech-news/us-pipeline-hacking-signals-growing-cyber-security-risk-for-energy-system-0><strong>The Straits Times</strong></a>\n\n\n</h4>\n\n</header>\n<article>\n<div>\n<p>WASHINGTON (NYTIMES) - The audacious ransomware attack that shut down a major fuel pipeline and sent Americans scrambling for petrol in the south-east last week was not the first time that hackers ...</p>\n\n<a href=\"http://www.straitstimes.com/tech/tech-news/us-pipeline-hacking-signals-growing-cyber-security-risk-for-energy-system-0\">Web Link</a>\n\n</div>\n\n\n</article>\n</div>\n</body>\n</html>\n","type":0,"thumbnail":"","relate_stocks":{},"source_url":"http://www.straitstimes.com/tech/tech-news/us-pipeline-hacking-signals-growing-cyber-security-risk-for-energy-system-0","is_english":true,"share_image_url":"https://static.laohu8.com/e9f99090a1c2ed51c021029395664489","article_id":"2136190968","content_text":"WASHINGTON (NYTIMES) - The audacious ransomware attack that shut down a major fuel pipeline and sent Americans scrambling for petrol in the south-east last week was not the first time that hackers have disrupted the United States' ageing, vulnerable energy infrastructure. And it is unlikely to be the last.Across the globe, cyber attackers are increasingly taking aim at the energy systems that underpin modern society.A February report from IBM found that the energy industry was the third-most targeted sector for such attacks last year, behind only finance and manufacturing. That was up from ninth place in 2019.\"This should be a wake-up call,\" said Mr Jonathon Monken, a principal at energy consulting firm Converge Strategies.\"When you look at what's most likely to cause disruptions to energy companies today, I think you have to put cyber-security risks at the top.\"Despite years of warnings, America's vast network of pipelines, electric grids and power plants remains acutely vulnerable to cyber attacks with the potential to disrupt energy supplies for millions of people.Dealing with those risks, analysts said, will pose a major challenge for the Biden administration as it seeks hundreds of billions of dollars to modernise the nation's energy infrastructure and transition to cleaner sources of energy to address climate change.Regulators are increasingly poised to step in.Last week, Mr Richard Glick, the chairman of the Federal Energy Regulatory Commission, said it was time to establish mandatory cyber-security standards for the nation's nearly 4.8 million km of oil and gas pipelines, similar to those currently found in the electricity sector.\"Simply encouraging pipelines to voluntarily adopt best practices is an inadequate response to the ever increasing number and sophistication of malevolent cyber actors,\" Mr Glick said in a statement.The risks to the nation's energy systems are widespread and varied. Many oil and gas pipelines, for instance, rely on decades-old control systems that are not well defended against more sophisticated cyber attacks and cannot be easily updated.And it is not just pipelines. As electric grid operators harness a growing array of digital technologies to help manage the flow of power and cut planet-warming emissions - such as smart thermostats, or far-flung yet interconnected networks of solar arrays - hackers may find new entry points to exploit.The shutdown on May 7 of the Colonial Pipeline, which stretches 8,850km from Texas to New Jersey and transports 45 per cent of the East Coast's fuel supplies, illustrates how devastating such attacks can be.On May 8, Colonial acknowledged that its corporate computer systems had been hit by a ransomware attack, in which criminal groups hold data hostage until the victim pays a ransom.A tanker delivering fuel to a Speedway petrol station in Alexandria, Virginia, last Thursday. A ransomware attack had shut down a major fuel pipeline in America and sent people scrambling for petrol in the south-east last week. PHOTO: EPA-EFEThe company said that it had shut down the pipeline as a precaution, apparently for fear that the hackers might have obtained information that would enable them to attack parts of the pipeline itself.Colonial said last Wednesday that it had started to resume pipeline operations, although it would take several days to restore full service. But throughout the south-east, panicked Americans were racing to stock up on petrol, causing thousands of petrol stations to run out of fuel.While Colonial has yet to explain exactly what triggered the pipeline shutdown, experts said there were plenty of vulnerabilities lurking throughout America's energy infrastructure.Last year, the Cybersecurity and Infrastructure Security Agency reported a ransomware attack on a natural gas compression facility that caused a shutdown of the facility for two days.In 2018, several natural gas pipeline operators reported that a system that processes customer transactions had been attacked, leading to service disruptions.But bigger risks lurk: In 2016, hackers knocked out large sections of the power grid in Ukraine, in what was thought to be the first intentional blackout triggered by a cyber attack.At the time, the Obama administration warned that America's electric utilities were not immune to similar attacks.In the past, energy companies typically kept the operational systems that run pipelines or power plants disconnected, or \"air gapped\", from the broader Internet, which meant that hackers could not easily gain access to the most critical infrastructure.But increasingly that is no longer the case, as companies install more sophisticated monitoring and diagnostics software that helps them operate these systems more efficiently. That potentially creates new cyber-security risks.\"Now these systems are all interconnected in ways that the companies themselves do not always fully understand,\" said Mr Marty Edwards, vice-president of operational technology for Tenable, a cyber-security firm.\"That provides an opportunity for attacks in one area to propagate elsewhere.\"Many industrial control systems were installed decades ago and run on outdated software, which means that even finding programmers to upgrade the systems can be a challenge.And the operators of vital energy infrastructure - such as pipelines, refineries or power plants - are often reluctant to shut down the flow of fuel or power for extended periods of time to install frequent security patches.Making things harder still, analysts said, many companies do not always have a good sense of exactly when and where it is worthwhile to spend money on costly new cyber-security defences, in part because of a lack of readily available data on which types of risks they are most likely to face.\"Companies don't always release a lot of information publicly\" about the threats they are seeing, said Mr Padraic O'Reilly, a co-founder of CyberSaint Security, who works with pipelines and critical infrastructure on cyber security.\"That can make it hard as an industry to know where to invest.\"Analysts said that the nation's electric utilities and grid operators were typically further ahead in preparing for cyber attacks than the oil and gas industry, in part because federal regulators have long required cyber-security standards for the backbone of the nation's power grid.Still, vulnerabilities remain.\"Part of it is the sheer complexity of the grid,\" said Mr Reid Sawyer, managing director of the US cyber-consulting practice at Marsh, an insurance firm.Not all levels of the grid face mandatory standards, for instance, and there are more than 3,000 utilities in the country with varying cyber-security practices.Energy companies may never be able to defend themselves against every single potential cyber attack out there, experts said. Instead, businesses and policymakers will need to design broader energy systems that are resilient to attacks and potential shutdowns, by, for instance, building in more redundancies or overrides.\"It's an old saying in cyber security: The people working defence have to be right 100 per cent of the time, while the attackers have to be right only once,\" Mr Monken said.\"That means we have to think a lot harder about contingencies when those defences fail.\"","news_type":1},"isVote":1,"likeStatus":false,"favoriteStatus":false,"reportStatus":false,"tweetType":1,"comments":[{"id":4364326,"gmtCreate":1621317581105,"gmtModify":1635406654434,"authorId":3567511757211423,"author":{"id":3567511757211423,"authorId":3567511757211423,"name":"Poggers","avatar":"https://static.tigerbbs.com/7da477926f4d48b8b0e46ebd25ac6947","vip":1,"crmLevel":7,"crmLevelSwitch":0,"individualDisplayBadges":[]},"repliedAuthorId":0,"objectId":195764555,"type":1,"supId":0,"prevId":0,"content":"Lol","text":"Lol","html":"Lol"}],"langContent":"EN"},{"id":195786338,"gmtCreate":1621316273624,"gmtModify":1634192491657,"author":{"id":"3582681863367126","authorId":"3582681863367126","authorIdStr":"3582681863367126","name":"WildFoE","avatar":"https://static.tigerbbs.com/67af813b31febdb58805e26e317209f2","vip":1,"crmLevel":2,"crmLevelSwitch":0,"idStr":"3582681863367126"},"htmlText":"Like n share [Cool]&nbsp;","listText":"Like n share [Cool]&nbsp;","text":"Like n share [Cool]","images":[],"top":1,"highlighted":1,"essential":1,"paper":1,"likeSize":0,"commentSize":0,"repostSize":0,"link":"https://laohu8.com/post/195786338","repostId":2136190968,"repostType":4,"repost":{"id":"2136190968","pubTimestamp":1621309200,"share":"https://www.laohu8.com/m/news/2136190968?lang=&edition=full","pubTime":"2021-05-18 11:40","market":"us","language":"en","title":"US pipeline hacking signals growing cyber-security risk for energy system","url":"https://stock-news.laohu8.com/highlight/detail?id=2136190968","media":"The Straits Times","summary":"WASHINGTON (NYTIMES) - The audacious ransomware attack that shut down a major fuel pipeline and sent","content":"<div>\n<p>WASHINGTON (NYTIMES) - The audacious ransomware attack that shut down a major fuel pipeline and sent Americans scrambling for petrol in the south-east last week was not the first time that hackers ...</p>\n\n<a href=\"http://www.straitstimes.com/tech/tech-news/us-pipeline-hacking-signals-growing-cyber-security-risk-for-energy-system-0\">Web Link</a>\n\n</div>\n","source":"straits_highlight","collect":0,"html":"<!DOCTYPE html>\n<html>\n<head>\n<meta http-equiv=\"Content-Type\" content=\"text/html; charset=utf-8\" />\n<meta name=\"viewport\" content=\"width=device-width,initial-scale=1.0,minimum-scale=1.0,maximum-scale=1.0,user-scalable=no\"/>\n<meta name=\"format-detection\" content=\"telephone=no,email=no,address=no\" />\n<title>US pipeline hacking signals growing cyber-security risk for energy system</title>\n<style type=\"text/css\">\na,abbr,acronym,address,applet,article,aside,audio,b,big,blockquote,body,canvas,caption,center,cite,code,dd,del,details,dfn,div,dl,dt,\nem,embed,fieldset,figcaption,figure,footer,form,h1,h2,h3,h4,h5,h6,header,hgroup,html,i,iframe,img,ins,kbd,label,legend,li,mark,menu,nav,\nobject,ol,output,p,pre,q,ruby,s,samp,section,small,span,strike,strong,sub,summary,sup,table,tbody,td,tfoot,th,thead,time,tr,tt,u,ul,var,video{ font:inherit;margin:0;padding:0;vertical-align:baseline;border:0 }\nbody{ font-size:16px; line-height:1.5; color:#999; background:transparent; }\n.wrapper{ overflow:hidden;word-break:break-all;padding:10px; }\nh1,h2{ font-weight:normal; line-height:1.35; margin-bottom:.6em; }\nh3,h4,h5,h6{ line-height:1.35; margin-bottom:1em; }\nh1{ font-size:24px; }\nh2{ font-size:20px; }\nh3{ font-size:18px; }\nh4{ font-size:16px; }\nh5{ font-size:14px; }\nh6{ font-size:12px; }\np,ul,ol,blockquote,dl,table{ margin:1.2em 0; }\nul,ol{ margin-left:2em; }\nul{ list-style:disc; }\nol{ list-style:decimal; }\nli,li p{ margin:10px 0;}\nimg{ max-width:100%;display:block;margin:0 auto 1em; }\nblockquote{ color:#B5B2B1; border-left:3px solid #aaa; padding:1em; }\nstrong,b{font-weight:bold;}\nem,i{font-style:italic;}\ntable{ width:100%;border-collapse:collapse;border-spacing:1px;margin:1em 0;font-size:.9em; }\nth,td{ padding:5px;text-align:left;border:1px solid #aaa; }\nth{ font-weight:bold;background:#5d5d5d; }\n.symbol-link{font-weight:bold;}\n/* header{ border-bottom:1px solid #494756; } */\n.title{ margin:0 0 8px;line-height:1.3;color:#ddd; }\n.meta {color:#5e5c6d;font-size:13px;margin:0 0 .5em; }\na{text-decoration:none; color:#2a4b87;}\n.meta .head { display: inline-block; overflow: hidden}\n.head .h-thumb { width: 30px; height: 30px; margin: 0; padding: 0; border-radius: 50%; float: left;}\n.head .h-content { margin: 0; padding: 0 0 0 9px; float: left;}\n.head .h-name {font-size: 13px; color: #eee; margin: 0;}\n.head .h-time {font-size: 11px; color: #7E829C; margin: 0;line-height: 11px;}\n.small {font-size: 12.5px; display: inline-block; transform: scale(0.9); -webkit-transform: scale(0.9); transform-origin: left; -webkit-transform-origin: left;}\n.smaller {font-size: 12.5px; display: inline-block; transform: scale(0.8); -webkit-transform: scale(0.8); transform-origin: left; -webkit-transform-origin: left;}\n.bt-text {font-size: 12px;margin: 1.5em 0 0 0}\n.bt-text p {margin: 0}\n</style>\n</head>\n<body>\n<div class=\"wrapper\">\n<header>\n<h2 class=\"title\">\nUS pipeline hacking signals growing cyber-security risk for energy system\n</h2>\n\n<h4 class=\"meta\">\n\n\n2021-05-18 11:40 GMT+8&nbsp;&nbsp;&nbsp;<a href=http://www.straitstimes.com/tech/tech-news/us-pipeline-hacking-signals-growing-cyber-security-risk-for-energy-system-0><strong>The Straits Times</strong></a>\n\n\n</h4>\n\n</header>\n<article>\n<div>\n<p>WASHINGTON (NYTIMES) - The audacious ransomware attack that shut down a major fuel pipeline and sent Americans scrambling for petrol in the south-east last week was not the first time that hackers ...</p>\n\n<a href=\"http://www.straitstimes.com/tech/tech-news/us-pipeline-hacking-signals-growing-cyber-security-risk-for-energy-system-0\">Web Link</a>\n\n</div>\n\n\n</article>\n</div>\n</body>\n</html>\n","type":0,"thumbnail":"","relate_stocks":{},"source_url":"http://www.straitstimes.com/tech/tech-news/us-pipeline-hacking-signals-growing-cyber-security-risk-for-energy-system-0","is_english":true,"share_image_url":"https://static.laohu8.com/e9f99090a1c2ed51c021029395664489","article_id":"2136190968","content_text":"WASHINGTON (NYTIMES) - The audacious ransomware attack that shut down a major fuel pipeline and sent Americans scrambling for petrol in the south-east last week was not the first time that hackers have disrupted the United States' ageing, vulnerable energy infrastructure. And it is unlikely to be the last.Across the globe, cyber attackers are increasingly taking aim at the energy systems that underpin modern society.A February report from IBM found that the energy industry was the third-most targeted sector for such attacks last year, behind only finance and manufacturing. That was up from ninth place in 2019.\"This should be a wake-up call,\" said Mr Jonathon Monken, a principal at energy consulting firm Converge Strategies.\"When you look at what's most likely to cause disruptions to energy companies today, I think you have to put cyber-security risks at the top.\"Despite years of warnings, America's vast network of pipelines, electric grids and power plants remains acutely vulnerable to cyber attacks with the potential to disrupt energy supplies for millions of people.Dealing with those risks, analysts said, will pose a major challenge for the Biden administration as it seeks hundreds of billions of dollars to modernise the nation's energy infrastructure and transition to cleaner sources of energy to address climate change.Regulators are increasingly poised to step in.Last week, Mr Richard Glick, the chairman of the Federal Energy Regulatory Commission, said it was time to establish mandatory cyber-security standards for the nation's nearly 4.8 million km of oil and gas pipelines, similar to those currently found in the electricity sector.\"Simply encouraging pipelines to voluntarily adopt best practices is an inadequate response to the ever increasing number and sophistication of malevolent cyber actors,\" Mr Glick said in a statement.The risks to the nation's energy systems are widespread and varied. Many oil and gas pipelines, for instance, rely on decades-old control systems that are not well defended against more sophisticated cyber attacks and cannot be easily updated.And it is not just pipelines. As electric grid operators harness a growing array of digital technologies to help manage the flow of power and cut planet-warming emissions - such as smart thermostats, or far-flung yet interconnected networks of solar arrays - hackers may find new entry points to exploit.The shutdown on May 7 of the Colonial Pipeline, which stretches 8,850km from Texas to New Jersey and transports 45 per cent of the East Coast's fuel supplies, illustrates how devastating such attacks can be.On May 8, Colonial acknowledged that its corporate computer systems had been hit by a ransomware attack, in which criminal groups hold data hostage until the victim pays a ransom.A tanker delivering fuel to a Speedway petrol station in Alexandria, Virginia, last Thursday. A ransomware attack had shut down a major fuel pipeline in America and sent people scrambling for petrol in the south-east last week. PHOTO: EPA-EFEThe company said that it had shut down the pipeline as a precaution, apparently for fear that the hackers might have obtained information that would enable them to attack parts of the pipeline itself.Colonial said last Wednesday that it had started to resume pipeline operations, although it would take several days to restore full service. But throughout the south-east, panicked Americans were racing to stock up on petrol, causing thousands of petrol stations to run out of fuel.While Colonial has yet to explain exactly what triggered the pipeline shutdown, experts said there were plenty of vulnerabilities lurking throughout America's energy infrastructure.Last year, the Cybersecurity and Infrastructure Security Agency reported a ransomware attack on a natural gas compression facility that caused a shutdown of the facility for two days.In 2018, several natural gas pipeline operators reported that a system that processes customer transactions had been attacked, leading to service disruptions.But bigger risks lurk: In 2016, hackers knocked out large sections of the power grid in Ukraine, in what was thought to be the first intentional blackout triggered by a cyber attack.At the time, the Obama administration warned that America's electric utilities were not immune to similar attacks.In the past, energy companies typically kept the operational systems that run pipelines or power plants disconnected, or \"air gapped\", from the broader Internet, which meant that hackers could not easily gain access to the most critical infrastructure.But increasingly that is no longer the case, as companies install more sophisticated monitoring and diagnostics software that helps them operate these systems more efficiently. That potentially creates new cyber-security risks.\"Now these systems are all interconnected in ways that the companies themselves do not always fully understand,\" said Mr Marty Edwards, vice-president of operational technology for Tenable, a cyber-security firm.\"That provides an opportunity for attacks in one area to propagate elsewhere.\"Many industrial control systems were installed decades ago and run on outdated software, which means that even finding programmers to upgrade the systems can be a challenge.And the operators of vital energy infrastructure - such as pipelines, refineries or power plants - are often reluctant to shut down the flow of fuel or power for extended periods of time to install frequent security patches.Making things harder still, analysts said, many companies do not always have a good sense of exactly when and where it is worthwhile to spend money on costly new cyber-security defences, in part because of a lack of readily available data on which types of risks they are most likely to face.\"Companies don't always release a lot of information publicly\" about the threats they are seeing, said Mr Padraic O'Reilly, a co-founder of CyberSaint Security, who works with pipelines and critical infrastructure on cyber security.\"That can make it hard as an industry to know where to invest.\"Analysts said that the nation's electric utilities and grid operators were typically further ahead in preparing for cyber attacks than the oil and gas industry, in part because federal regulators have long required cyber-security standards for the backbone of the nation's power grid.Still, vulnerabilities remain.\"Part of it is the sheer complexity of the grid,\" said Mr Reid Sawyer, managing director of the US cyber-consulting practice at Marsh, an insurance firm.Not all levels of the grid face mandatory standards, for instance, and there are more than 3,000 utilities in the country with varying cyber-security practices.Energy companies may never be able to defend themselves against every single potential cyber attack out there, experts said. Instead, businesses and policymakers will need to design broader energy systems that are resilient to attacks and potential shutdowns, by, for instance, building in more redundancies or overrides.\"It's an old saying in cyber security: The people working defence have to be right 100 per cent of the time, while the attackers have to be right only once,\" Mr Monken said.\"That means we have to think a lot harder about contingencies when those defences fail.\"","news_type":1},"isVote":1,"likeStatus":false,"favoriteStatus":false,"reportStatus":false,"tweetType":1,"langContent":"EN"},{"id":195715456,"gmtCreate":1621315341175,"gmtModify":1634192497056,"author":{"id":"3572235673675008","authorId":"3572235673675008","authorIdStr":"3572235673675008","name":"LEEQF","avatar":"https://static.tigerbbs.com/ead66a2c538631d15658309f808c7d40","vip":1,"crmLevel":3,"crmLevelSwitch":0,"idStr":"3572235673675008"},"htmlText":"Reply n like pls","listText":"Reply n like pls","text":"Reply n like pls","images":[],"top":1,"highlighted":1,"essential":1,"paper":1,"likeSize":0,"commentSize":0,"repostSize":0,"link":"https://laohu8.com/post/195715456","repostId":2136190968,"repostType":4,"repost":{"id":"2136190968","pubTimestamp":1621309200,"share":"https://www.laohu8.com/m/news/2136190968?lang=&edition=full","pubTime":"2021-05-18 11:40","market":"us","language":"en","title":"US pipeline hacking signals growing cyber-security risk for energy system","url":"https://stock-news.laohu8.com/highlight/detail?id=2136190968","media":"The Straits Times","summary":"WASHINGTON (NYTIMES) - The audacious ransomware attack that shut down a major fuel pipeline and sent","content":"<div>\n<p>WASHINGTON (NYTIMES) - The audacious ransomware attack that shut down a major fuel pipeline and sent Americans scrambling for petrol in the south-east last week was not the first time that hackers ...</p>\n\n<a href=\"http://www.straitstimes.com/tech/tech-news/us-pipeline-hacking-signals-growing-cyber-security-risk-for-energy-system-0\">Web Link</a>\n\n</div>\n","source":"straits_highlight","collect":0,"html":"<!DOCTYPE html>\n<html>\n<head>\n<meta http-equiv=\"Content-Type\" content=\"text/html; charset=utf-8\" />\n<meta name=\"viewport\" content=\"width=device-width,initial-scale=1.0,minimum-scale=1.0,maximum-scale=1.0,user-scalable=no\"/>\n<meta name=\"format-detection\" content=\"telephone=no,email=no,address=no\" />\n<title>US pipeline hacking signals growing cyber-security risk for energy system</title>\n<style type=\"text/css\">\na,abbr,acronym,address,applet,article,aside,audio,b,big,blockquote,body,canvas,caption,center,cite,code,dd,del,details,dfn,div,dl,dt,\nem,embed,fieldset,figcaption,figure,footer,form,h1,h2,h3,h4,h5,h6,header,hgroup,html,i,iframe,img,ins,kbd,label,legend,li,mark,menu,nav,\nobject,ol,output,p,pre,q,ruby,s,samp,section,small,span,strike,strong,sub,summary,sup,table,tbody,td,tfoot,th,thead,time,tr,tt,u,ul,var,video{ font:inherit;margin:0;padding:0;vertical-align:baseline;border:0 }\nbody{ font-size:16px; line-height:1.5; color:#999; background:transparent; }\n.wrapper{ overflow:hidden;word-break:break-all;padding:10px; }\nh1,h2{ font-weight:normal; line-height:1.35; margin-bottom:.6em; }\nh3,h4,h5,h6{ line-height:1.35; margin-bottom:1em; }\nh1{ font-size:24px; }\nh2{ font-size:20px; }\nh3{ font-size:18px; }\nh4{ font-size:16px; }\nh5{ font-size:14px; }\nh6{ font-size:12px; }\np,ul,ol,blockquote,dl,table{ margin:1.2em 0; }\nul,ol{ margin-left:2em; }\nul{ list-style:disc; }\nol{ list-style:decimal; }\nli,li p{ margin:10px 0;}\nimg{ max-width:100%;display:block;margin:0 auto 1em; }\nblockquote{ color:#B5B2B1; border-left:3px solid #aaa; padding:1em; }\nstrong,b{font-weight:bold;}\nem,i{font-style:italic;}\ntable{ width:100%;border-collapse:collapse;border-spacing:1px;margin:1em 0;font-size:.9em; }\nth,td{ padding:5px;text-align:left;border:1px solid #aaa; }\nth{ font-weight:bold;background:#5d5d5d; }\n.symbol-link{font-weight:bold;}\n/* header{ border-bottom:1px solid #494756; } */\n.title{ margin:0 0 8px;line-height:1.3;color:#ddd; }\n.meta {color:#5e5c6d;font-size:13px;margin:0 0 .5em; }\na{text-decoration:none; color:#2a4b87;}\n.meta .head { display: inline-block; overflow: hidden}\n.head .h-thumb { width: 30px; height: 30px; margin: 0; padding: 0; border-radius: 50%; float: left;}\n.head .h-content { margin: 0; padding: 0 0 0 9px; float: left;}\n.head .h-name {font-size: 13px; color: #eee; margin: 0;}\n.head .h-time {font-size: 11px; color: #7E829C; margin: 0;line-height: 11px;}\n.small {font-size: 12.5px; display: inline-block; transform: scale(0.9); -webkit-transform: scale(0.9); transform-origin: left; -webkit-transform-origin: left;}\n.smaller {font-size: 12.5px; display: inline-block; transform: scale(0.8); -webkit-transform: scale(0.8); transform-origin: left; -webkit-transform-origin: left;}\n.bt-text {font-size: 12px;margin: 1.5em 0 0 0}\n.bt-text p {margin: 0}\n</style>\n</head>\n<body>\n<div class=\"wrapper\">\n<header>\n<h2 class=\"title\">\nUS pipeline hacking signals growing cyber-security risk for energy system\n</h2>\n\n<h4 class=\"meta\">\n\n\n2021-05-18 11:40 GMT+8&nbsp;&nbsp;&nbsp;<a href=http://www.straitstimes.com/tech/tech-news/us-pipeline-hacking-signals-growing-cyber-security-risk-for-energy-system-0><strong>The Straits Times</strong></a>\n\n\n</h4>\n\n</header>\n<article>\n<div>\n<p>WASHINGTON (NYTIMES) - The audacious ransomware attack that shut down a major fuel pipeline and sent Americans scrambling for petrol in the south-east last week was not the first time that hackers ...</p>\n\n<a href=\"http://www.straitstimes.com/tech/tech-news/us-pipeline-hacking-signals-growing-cyber-security-risk-for-energy-system-0\">Web Link</a>\n\n</div>\n\n\n</article>\n</div>\n</body>\n</html>\n","type":0,"thumbnail":"","relate_stocks":{},"source_url":"http://www.straitstimes.com/tech/tech-news/us-pipeline-hacking-signals-growing-cyber-security-risk-for-energy-system-0","is_english":true,"share_image_url":"https://static.laohu8.com/e9f99090a1c2ed51c021029395664489","article_id":"2136190968","content_text":"WASHINGTON (NYTIMES) - The audacious ransomware attack that shut down a major fuel pipeline and sent Americans scrambling for petrol in the south-east last week was not the first time that hackers have disrupted the United States' ageing, vulnerable energy infrastructure. And it is unlikely to be the last.Across the globe, cyber attackers are increasingly taking aim at the energy systems that underpin modern society.A February report from IBM found that the energy industry was the third-most targeted sector for such attacks last year, behind only finance and manufacturing. That was up from ninth place in 2019.\"This should be a wake-up call,\" said Mr Jonathon Monken, a principal at energy consulting firm Converge Strategies.\"When you look at what's most likely to cause disruptions to energy companies today, I think you have to put cyber-security risks at the top.\"Despite years of warnings, America's vast network of pipelines, electric grids and power plants remains acutely vulnerable to cyber attacks with the potential to disrupt energy supplies for millions of people.Dealing with those risks, analysts said, will pose a major challenge for the Biden administration as it seeks hundreds of billions of dollars to modernise the nation's energy infrastructure and transition to cleaner sources of energy to address climate change.Regulators are increasingly poised to step in.Last week, Mr Richard Glick, the chairman of the Federal Energy Regulatory Commission, said it was time to establish mandatory cyber-security standards for the nation's nearly 4.8 million km of oil and gas pipelines, similar to those currently found in the electricity sector.\"Simply encouraging pipelines to voluntarily adopt best practices is an inadequate response to the ever increasing number and sophistication of malevolent cyber actors,\" Mr Glick said in a statement.The risks to the nation's energy systems are widespread and varied. Many oil and gas pipelines, for instance, rely on decades-old control systems that are not well defended against more sophisticated cyber attacks and cannot be easily updated.And it is not just pipelines. As electric grid operators harness a growing array of digital technologies to help manage the flow of power and cut planet-warming emissions - such as smart thermostats, or far-flung yet interconnected networks of solar arrays - hackers may find new entry points to exploit.The shutdown on May 7 of the Colonial Pipeline, which stretches 8,850km from Texas to New Jersey and transports 45 per cent of the East Coast's fuel supplies, illustrates how devastating such attacks can be.On May 8, Colonial acknowledged that its corporate computer systems had been hit by a ransomware attack, in which criminal groups hold data hostage until the victim pays a ransom.A tanker delivering fuel to a Speedway petrol station in Alexandria, Virginia, last Thursday. A ransomware attack had shut down a major fuel pipeline in America and sent people scrambling for petrol in the south-east last week. PHOTO: EPA-EFEThe company said that it had shut down the pipeline as a precaution, apparently for fear that the hackers might have obtained information that would enable them to attack parts of the pipeline itself.Colonial said last Wednesday that it had started to resume pipeline operations, although it would take several days to restore full service. But throughout the south-east, panicked Americans were racing to stock up on petrol, causing thousands of petrol stations to run out of fuel.While Colonial has yet to explain exactly what triggered the pipeline shutdown, experts said there were plenty of vulnerabilities lurking throughout America's energy infrastructure.Last year, the Cybersecurity and Infrastructure Security Agency reported a ransomware attack on a natural gas compression facility that caused a shutdown of the facility for two days.In 2018, several natural gas pipeline operators reported that a system that processes customer transactions had been attacked, leading to service disruptions.But bigger risks lurk: In 2016, hackers knocked out large sections of the power grid in Ukraine, in what was thought to be the first intentional blackout triggered by a cyber attack.At the time, the Obama administration warned that America's electric utilities were not immune to similar attacks.In the past, energy companies typically kept the operational systems that run pipelines or power plants disconnected, or \"air gapped\", from the broader Internet, which meant that hackers could not easily gain access to the most critical infrastructure.But increasingly that is no longer the case, as companies install more sophisticated monitoring and diagnostics software that helps them operate these systems more efficiently. That potentially creates new cyber-security risks.\"Now these systems are all interconnected in ways that the companies themselves do not always fully understand,\" said Mr Marty Edwards, vice-president of operational technology for Tenable, a cyber-security firm.\"That provides an opportunity for attacks in one area to propagate elsewhere.\"Many industrial control systems were installed decades ago and run on outdated software, which means that even finding programmers to upgrade the systems can be a challenge.And the operators of vital energy infrastructure - such as pipelines, refineries or power plants - are often reluctant to shut down the flow of fuel or power for extended periods of time to install frequent security patches.Making things harder still, analysts said, many companies do not always have a good sense of exactly when and where it is worthwhile to spend money on costly new cyber-security defences, in part because of a lack of readily available data on which types of risks they are most likely to face.\"Companies don't always release a lot of information publicly\" about the threats they are seeing, said Mr Padraic O'Reilly, a co-founder of CyberSaint Security, who works with pipelines and critical infrastructure on cyber security.\"That can make it hard as an industry to know where to invest.\"Analysts said that the nation's electric utilities and grid operators were typically further ahead in preparing for cyber attacks than the oil and gas industry, in part because federal regulators have long required cyber-security standards for the backbone of the nation's power grid.Still, vulnerabilities remain.\"Part of it is the sheer complexity of the grid,\" said Mr Reid Sawyer, managing director of the US cyber-consulting practice at Marsh, an insurance firm.Not all levels of the grid face mandatory standards, for instance, and there are more than 3,000 utilities in the country with varying cyber-security practices.Energy companies may never be able to defend themselves against every single potential cyber attack out there, experts said. Instead, businesses and policymakers will need to design broader energy systems that are resilient to attacks and potential shutdowns, by, for instance, building in more redundancies or overrides.\"It's an old saying in cyber security: The people working defence have to be right 100 per cent of the time, while the attackers have to be right only once,\" Mr Monken said.\"That means we have to think a lot harder about contingencies when those defences fail.\"","news_type":1},"isVote":1,"likeStatus":false,"favoriteStatus":false,"reportStatus":false,"tweetType":1,"langContent":"EN"},{"id":195711184,"gmtCreate":1621314947048,"gmtModify":1634192501226,"author":{"id":"3574151642706297","authorId":"3574151642706297","authorIdStr":"3574151642706297","name":"Derrick0359","avatar":"https://static.tigerbbs.com/1e4377b13ebe2fd65f630bf249fd6624","vip":1,"crmLevel":4,"crmLevelSwitch":0,"idStr":"3574151642706297"},"htmlText":"[Cool]&nbsp;[Cool]&nbsp;","listText":"[Cool]&nbsp;[Cool]&nbsp;","text":"[Cool] [Cool]","images":[],"top":1,"highlighted":1,"essential":1,"paper":1,"likeSize":0,"commentSize":0,"repostSize":0,"link":"https://laohu8.com/post/195711184","repostId":2136190968,"repostType":4,"repost":{"id":"2136190968","pubTimestamp":1621309200,"share":"https://www.laohu8.com/m/news/2136190968?lang=&edition=full","pubTime":"2021-05-18 11:40","market":"us","language":"en","title":"US pipeline hacking signals growing cyber-security risk for energy system","url":"https://stock-news.laohu8.com/highlight/detail?id=2136190968","media":"The Straits Times","summary":"WASHINGTON (NYTIMES) - The audacious ransomware attack that shut down a major fuel pipeline and sent","content":"<div>\n<p>WASHINGTON (NYTIMES) - The audacious ransomware attack that shut down a major fuel pipeline and sent Americans scrambling for petrol in the south-east last week was not the first time that hackers ...</p>\n\n<a href=\"http://www.straitstimes.com/tech/tech-news/us-pipeline-hacking-signals-growing-cyber-security-risk-for-energy-system-0\">Web Link</a>\n\n</div>\n","source":"straits_highlight","collect":0,"html":"<!DOCTYPE html>\n<html>\n<head>\n<meta http-equiv=\"Content-Type\" content=\"text/html; charset=utf-8\" />\n<meta name=\"viewport\" content=\"width=device-width,initial-scale=1.0,minimum-scale=1.0,maximum-scale=1.0,user-scalable=no\"/>\n<meta name=\"format-detection\" content=\"telephone=no,email=no,address=no\" />\n<title>US pipeline hacking signals growing cyber-security risk for energy system</title>\n<style type=\"text/css\">\na,abbr,acronym,address,applet,article,aside,audio,b,big,blockquote,body,canvas,caption,center,cite,code,dd,del,details,dfn,div,dl,dt,\nem,embed,fieldset,figcaption,figure,footer,form,h1,h2,h3,h4,h5,h6,header,hgroup,html,i,iframe,img,ins,kbd,label,legend,li,mark,menu,nav,\nobject,ol,output,p,pre,q,ruby,s,samp,section,small,span,strike,strong,sub,summary,sup,table,tbody,td,tfoot,th,thead,time,tr,tt,u,ul,var,video{ font:inherit;margin:0;padding:0;vertical-align:baseline;border:0 }\nbody{ font-size:16px; line-height:1.5; color:#999; background:transparent; }\n.wrapper{ overflow:hidden;word-break:break-all;padding:10px; }\nh1,h2{ font-weight:normal; line-height:1.35; margin-bottom:.6em; }\nh3,h4,h5,h6{ line-height:1.35; margin-bottom:1em; }\nh1{ font-size:24px; }\nh2{ font-size:20px; }\nh3{ font-size:18px; }\nh4{ font-size:16px; }\nh5{ font-size:14px; }\nh6{ font-size:12px; }\np,ul,ol,blockquote,dl,table{ margin:1.2em 0; }\nul,ol{ margin-left:2em; }\nul{ list-style:disc; }\nol{ list-style:decimal; }\nli,li p{ margin:10px 0;}\nimg{ max-width:100%;display:block;margin:0 auto 1em; }\nblockquote{ color:#B5B2B1; border-left:3px solid #aaa; padding:1em; }\nstrong,b{font-weight:bold;}\nem,i{font-style:italic;}\ntable{ width:100%;border-collapse:collapse;border-spacing:1px;margin:1em 0;font-size:.9em; }\nth,td{ padding:5px;text-align:left;border:1px solid #aaa; }\nth{ font-weight:bold;background:#5d5d5d; }\n.symbol-link{font-weight:bold;}\n/* header{ border-bottom:1px solid #494756; } */\n.title{ margin:0 0 8px;line-height:1.3;color:#ddd; }\n.meta {color:#5e5c6d;font-size:13px;margin:0 0 .5em; }\na{text-decoration:none; color:#2a4b87;}\n.meta .head { display: inline-block; overflow: hidden}\n.head .h-thumb { width: 30px; height: 30px; margin: 0; padding: 0; border-radius: 50%; float: left;}\n.head .h-content { margin: 0; padding: 0 0 0 9px; float: left;}\n.head .h-name {font-size: 13px; color: #eee; margin: 0;}\n.head .h-time {font-size: 11px; color: #7E829C; margin: 0;line-height: 11px;}\n.small {font-size: 12.5px; display: inline-block; transform: scale(0.9); -webkit-transform: scale(0.9); transform-origin: left; -webkit-transform-origin: left;}\n.smaller {font-size: 12.5px; display: inline-block; transform: scale(0.8); -webkit-transform: scale(0.8); transform-origin: left; -webkit-transform-origin: left;}\n.bt-text {font-size: 12px;margin: 1.5em 0 0 0}\n.bt-text p {margin: 0}\n</style>\n</head>\n<body>\n<div class=\"wrapper\">\n<header>\n<h2 class=\"title\">\nUS pipeline hacking signals growing cyber-security risk for energy system\n</h2>\n\n<h4 class=\"meta\">\n\n\n2021-05-18 11:40 GMT+8&nbsp;&nbsp;&nbsp;<a href=http://www.straitstimes.com/tech/tech-news/us-pipeline-hacking-signals-growing-cyber-security-risk-for-energy-system-0><strong>The Straits Times</strong></a>\n\n\n</h4>\n\n</header>\n<article>\n<div>\n<p>WASHINGTON (NYTIMES) - The audacious ransomware attack that shut down a major fuel pipeline and sent Americans scrambling for petrol in the south-east last week was not the first time that hackers ...</p>\n\n<a href=\"http://www.straitstimes.com/tech/tech-news/us-pipeline-hacking-signals-growing-cyber-security-risk-for-energy-system-0\">Web Link</a>\n\n</div>\n\n\n</article>\n</div>\n</body>\n</html>\n","type":0,"thumbnail":"","relate_stocks":{},"source_url":"http://www.straitstimes.com/tech/tech-news/us-pipeline-hacking-signals-growing-cyber-security-risk-for-energy-system-0","is_english":true,"share_image_url":"https://static.laohu8.com/e9f99090a1c2ed51c021029395664489","article_id":"2136190968","content_text":"WASHINGTON (NYTIMES) - The audacious ransomware attack that shut down a major fuel pipeline and sent Americans scrambling for petrol in the south-east last week was not the first time that hackers have disrupted the United States' ageing, vulnerable energy infrastructure. And it is unlikely to be the last.Across the globe, cyber attackers are increasingly taking aim at the energy systems that underpin modern society.A February report from IBM found that the energy industry was the third-most targeted sector for such attacks last year, behind only finance and manufacturing. That was up from ninth place in 2019.\"This should be a wake-up call,\" said Mr Jonathon Monken, a principal at energy consulting firm Converge Strategies.\"When you look at what's most likely to cause disruptions to energy companies today, I think you have to put cyber-security risks at the top.\"Despite years of warnings, America's vast network of pipelines, electric grids and power plants remains acutely vulnerable to cyber attacks with the potential to disrupt energy supplies for millions of people.Dealing with those risks, analysts said, will pose a major challenge for the Biden administration as it seeks hundreds of billions of dollars to modernise the nation's energy infrastructure and transition to cleaner sources of energy to address climate change.Regulators are increasingly poised to step in.Last week, Mr Richard Glick, the chairman of the Federal Energy Regulatory Commission, said it was time to establish mandatory cyber-security standards for the nation's nearly 4.8 million km of oil and gas pipelines, similar to those currently found in the electricity sector.\"Simply encouraging pipelines to voluntarily adopt best practices is an inadequate response to the ever increasing number and sophistication of malevolent cyber actors,\" Mr Glick said in a statement.The risks to the nation's energy systems are widespread and varied. Many oil and gas pipelines, for instance, rely on decades-old control systems that are not well defended against more sophisticated cyber attacks and cannot be easily updated.And it is not just pipelines. As electric grid operators harness a growing array of digital technologies to help manage the flow of power and cut planet-warming emissions - such as smart thermostats, or far-flung yet interconnected networks of solar arrays - hackers may find new entry points to exploit.The shutdown on May 7 of the Colonial Pipeline, which stretches 8,850km from Texas to New Jersey and transports 45 per cent of the East Coast's fuel supplies, illustrates how devastating such attacks can be.On May 8, Colonial acknowledged that its corporate computer systems had been hit by a ransomware attack, in which criminal groups hold data hostage until the victim pays a ransom.A tanker delivering fuel to a Speedway petrol station in Alexandria, Virginia, last Thursday. A ransomware attack had shut down a major fuel pipeline in America and sent people scrambling for petrol in the south-east last week. PHOTO: EPA-EFEThe company said that it had shut down the pipeline as a precaution, apparently for fear that the hackers might have obtained information that would enable them to attack parts of the pipeline itself.Colonial said last Wednesday that it had started to resume pipeline operations, although it would take several days to restore full service. But throughout the south-east, panicked Americans were racing to stock up on petrol, causing thousands of petrol stations to run out of fuel.While Colonial has yet to explain exactly what triggered the pipeline shutdown, experts said there were plenty of vulnerabilities lurking throughout America's energy infrastructure.Last year, the Cybersecurity and Infrastructure Security Agency reported a ransomware attack on a natural gas compression facility that caused a shutdown of the facility for two days.In 2018, several natural gas pipeline operators reported that a system that processes customer transactions had been attacked, leading to service disruptions.But bigger risks lurk: In 2016, hackers knocked out large sections of the power grid in Ukraine, in what was thought to be the first intentional blackout triggered by a cyber attack.At the time, the Obama administration warned that America's electric utilities were not immune to similar attacks.In the past, energy companies typically kept the operational systems that run pipelines or power plants disconnected, or \"air gapped\", from the broader Internet, which meant that hackers could not easily gain access to the most critical infrastructure.But increasingly that is no longer the case, as companies install more sophisticated monitoring and diagnostics software that helps them operate these systems more efficiently. That potentially creates new cyber-security risks.\"Now these systems are all interconnected in ways that the companies themselves do not always fully understand,\" said Mr Marty Edwards, vice-president of operational technology for Tenable, a cyber-security firm.\"That provides an opportunity for attacks in one area to propagate elsewhere.\"Many industrial control systems were installed decades ago and run on outdated software, which means that even finding programmers to upgrade the systems can be a challenge.And the operators of vital energy infrastructure - such as pipelines, refineries or power plants - are often reluctant to shut down the flow of fuel or power for extended periods of time to install frequent security patches.Making things harder still, analysts said, many companies do not always have a good sense of exactly when and where it is worthwhile to spend money on costly new cyber-security defences, in part because of a lack of readily available data on which types of risks they are most likely to face.\"Companies don't always release a lot of information publicly\" about the threats they are seeing, said Mr Padraic O'Reilly, a co-founder of CyberSaint Security, who works with pipelines and critical infrastructure on cyber security.\"That can make it hard as an industry to know where to invest.\"Analysts said that the nation's electric utilities and grid operators were typically further ahead in preparing for cyber attacks than the oil and gas industry, in part because federal regulators have long required cyber-security standards for the backbone of the nation's power grid.Still, vulnerabilities remain.\"Part of it is the sheer complexity of the grid,\" said Mr Reid Sawyer, managing director of the US cyber-consulting practice at Marsh, an insurance firm.Not all levels of the grid face mandatory standards, for instance, and there are more than 3,000 utilities in the country with varying cyber-security practices.Energy companies may never be able to defend themselves against every single potential cyber attack out there, experts said. Instead, businesses and policymakers will need to design broader energy systems that are resilient to attacks and potential shutdowns, by, for instance, building in more redundancies or overrides.\"It's an old saying in cyber security: The people working defence have to be right 100 per cent of the time, while the attackers have to be right only once,\" Mr Monken said.\"That means we have to think a lot harder about contingencies when those defences fail.\"","news_type":1},"isVote":1,"likeStatus":false,"favoriteStatus":false,"reportStatus":false,"tweetType":1,"langContent":"EN"},{"id":195734934,"gmtCreate":1621314499228,"gmtModify":1634192504065,"author":{"id":"3581749910281394","authorId":"3581749910281394","authorIdStr":"3581749910281394","name":"Spear88","avatar":"https://static.tigerbbs.com/303d42689a3f59302539ade2fe6a4ab4","vip":1,"crmLevel":2,"crmLevelSwitch":0,"idStr":"3581749910281394"},"htmlText":"Good","listText":"Good","text":"Good","images":[],"top":1,"highlighted":1,"essential":1,"paper":1,"likeSize":0,"commentSize":0,"repostSize":0,"link":"https://laohu8.com/post/195734934","repostId":2136190968,"repostType":4,"repost":{"id":"2136190968","pubTimestamp":1621309200,"share":"https://www.laohu8.com/m/news/2136190968?lang=&edition=full","pubTime":"2021-05-18 11:40","market":"us","language":"en","title":"US pipeline hacking signals growing cyber-security risk for energy system","url":"https://stock-news.laohu8.com/highlight/detail?id=2136190968","media":"The Straits Times","summary":"WASHINGTON (NYTIMES) - The audacious ransomware attack that shut down a major fuel pipeline and sent","content":"<div>\n<p>WASHINGTON (NYTIMES) - The audacious ransomware attack that shut down a major fuel pipeline and sent Americans scrambling for petrol in the south-east last week was not the first time that hackers ...</p>\n\n<a href=\"http://www.straitstimes.com/tech/tech-news/us-pipeline-hacking-signals-growing-cyber-security-risk-for-energy-system-0\">Web Link</a>\n\n</div>\n","source":"straits_highlight","collect":0,"html":"<!DOCTYPE html>\n<html>\n<head>\n<meta http-equiv=\"Content-Type\" content=\"text/html; charset=utf-8\" />\n<meta name=\"viewport\" content=\"width=device-width,initial-scale=1.0,minimum-scale=1.0,maximum-scale=1.0,user-scalable=no\"/>\n<meta name=\"format-detection\" content=\"telephone=no,email=no,address=no\" />\n<title>US pipeline hacking signals growing cyber-security risk for energy system</title>\n<style type=\"text/css\">\na,abbr,acronym,address,applet,article,aside,audio,b,big,blockquote,body,canvas,caption,center,cite,code,dd,del,details,dfn,div,dl,dt,\nem,embed,fieldset,figcaption,figure,footer,form,h1,h2,h3,h4,h5,h6,header,hgroup,html,i,iframe,img,ins,kbd,label,legend,li,mark,menu,nav,\nobject,ol,output,p,pre,q,ruby,s,samp,section,small,span,strike,strong,sub,summary,sup,table,tbody,td,tfoot,th,thead,time,tr,tt,u,ul,var,video{ font:inherit;margin:0;padding:0;vertical-align:baseline;border:0 }\nbody{ font-size:16px; line-height:1.5; color:#999; background:transparent; }\n.wrapper{ overflow:hidden;word-break:break-all;padding:10px; }\nh1,h2{ font-weight:normal; line-height:1.35; margin-bottom:.6em; }\nh3,h4,h5,h6{ line-height:1.35; margin-bottom:1em; }\nh1{ font-size:24px; }\nh2{ font-size:20px; }\nh3{ font-size:18px; }\nh4{ font-size:16px; }\nh5{ font-size:14px; }\nh6{ font-size:12px; }\np,ul,ol,blockquote,dl,table{ margin:1.2em 0; }\nul,ol{ margin-left:2em; }\nul{ list-style:disc; }\nol{ list-style:decimal; }\nli,li p{ margin:10px 0;}\nimg{ max-width:100%;display:block;margin:0 auto 1em; }\nblockquote{ color:#B5B2B1; border-left:3px solid #aaa; padding:1em; }\nstrong,b{font-weight:bold;}\nem,i{font-style:italic;}\ntable{ width:100%;border-collapse:collapse;border-spacing:1px;margin:1em 0;font-size:.9em; }\nth,td{ padding:5px;text-align:left;border:1px solid #aaa; }\nth{ font-weight:bold;background:#5d5d5d; }\n.symbol-link{font-weight:bold;}\n/* header{ border-bottom:1px solid #494756; } */\n.title{ margin:0 0 8px;line-height:1.3;color:#ddd; }\n.meta {color:#5e5c6d;font-size:13px;margin:0 0 .5em; }\na{text-decoration:none; color:#2a4b87;}\n.meta .head { display: inline-block; overflow: hidden}\n.head .h-thumb { width: 30px; height: 30px; margin: 0; padding: 0; border-radius: 50%; float: left;}\n.head .h-content { margin: 0; padding: 0 0 0 9px; float: left;}\n.head .h-name {font-size: 13px; color: #eee; margin: 0;}\n.head .h-time {font-size: 11px; color: #7E829C; margin: 0;line-height: 11px;}\n.small {font-size: 12.5px; display: inline-block; transform: scale(0.9); -webkit-transform: scale(0.9); transform-origin: left; -webkit-transform-origin: left;}\n.smaller {font-size: 12.5px; display: inline-block; transform: scale(0.8); -webkit-transform: scale(0.8); transform-origin: left; -webkit-transform-origin: left;}\n.bt-text {font-size: 12px;margin: 1.5em 0 0 0}\n.bt-text p {margin: 0}\n</style>\n</head>\n<body>\n<div class=\"wrapper\">\n<header>\n<h2 class=\"title\">\nUS pipeline hacking signals growing cyber-security risk for energy system\n</h2>\n\n<h4 class=\"meta\">\n\n\n2021-05-18 11:40 GMT+8&nbsp;&nbsp;&nbsp;<a href=http://www.straitstimes.com/tech/tech-news/us-pipeline-hacking-signals-growing-cyber-security-risk-for-energy-system-0><strong>The Straits Times</strong></a>\n\n\n</h4>\n\n</header>\n<article>\n<div>\n<p>WASHINGTON (NYTIMES) - The audacious ransomware attack that shut down a major fuel pipeline and sent Americans scrambling for petrol in the south-east last week was not the first time that hackers ...</p>\n\n<a href=\"http://www.straitstimes.com/tech/tech-news/us-pipeline-hacking-signals-growing-cyber-security-risk-for-energy-system-0\">Web Link</a>\n\n</div>\n\n\n</article>\n</div>\n</body>\n</html>\n","type":0,"thumbnail":"","relate_stocks":{},"source_url":"http://www.straitstimes.com/tech/tech-news/us-pipeline-hacking-signals-growing-cyber-security-risk-for-energy-system-0","is_english":true,"share_image_url":"https://static.laohu8.com/e9f99090a1c2ed51c021029395664489","article_id":"2136190968","content_text":"WASHINGTON (NYTIMES) - The audacious ransomware attack that shut down a major fuel pipeline and sent Americans scrambling for petrol in the south-east last week was not the first time that hackers have disrupted the United States' ageing, vulnerable energy infrastructure. And it is unlikely to be the last.Across the globe, cyber attackers are increasingly taking aim at the energy systems that underpin modern society.A February report from IBM found that the energy industry was the third-most targeted sector for such attacks last year, behind only finance and manufacturing. That was up from ninth place in 2019.\"This should be a wake-up call,\" said Mr Jonathon Monken, a principal at energy consulting firm Converge Strategies.\"When you look at what's most likely to cause disruptions to energy companies today, I think you have to put cyber-security risks at the top.\"Despite years of warnings, America's vast network of pipelines, electric grids and power plants remains acutely vulnerable to cyber attacks with the potential to disrupt energy supplies for millions of people.Dealing with those risks, analysts said, will pose a major challenge for the Biden administration as it seeks hundreds of billions of dollars to modernise the nation's energy infrastructure and transition to cleaner sources of energy to address climate change.Regulators are increasingly poised to step in.Last week, Mr Richard Glick, the chairman of the Federal Energy Regulatory Commission, said it was time to establish mandatory cyber-security standards for the nation's nearly 4.8 million km of oil and gas pipelines, similar to those currently found in the electricity sector.\"Simply encouraging pipelines to voluntarily adopt best practices is an inadequate response to the ever increasing number and sophistication of malevolent cyber actors,\" Mr Glick said in a statement.The risks to the nation's energy systems are widespread and varied. Many oil and gas pipelines, for instance, rely on decades-old control systems that are not well defended against more sophisticated cyber attacks and cannot be easily updated.And it is not just pipelines. As electric grid operators harness a growing array of digital technologies to help manage the flow of power and cut planet-warming emissions - such as smart thermostats, or far-flung yet interconnected networks of solar arrays - hackers may find new entry points to exploit.The shutdown on May 7 of the Colonial Pipeline, which stretches 8,850km from Texas to New Jersey and transports 45 per cent of the East Coast's fuel supplies, illustrates how devastating such attacks can be.On May 8, Colonial acknowledged that its corporate computer systems had been hit by a ransomware attack, in which criminal groups hold data hostage until the victim pays a ransom.A tanker delivering fuel to a Speedway petrol station in Alexandria, Virginia, last Thursday. A ransomware attack had shut down a major fuel pipeline in America and sent people scrambling for petrol in the south-east last week. PHOTO: EPA-EFEThe company said that it had shut down the pipeline as a precaution, apparently for fear that the hackers might have obtained information that would enable them to attack parts of the pipeline itself.Colonial said last Wednesday that it had started to resume pipeline operations, although it would take several days to restore full service. But throughout the south-east, panicked Americans were racing to stock up on petrol, causing thousands of petrol stations to run out of fuel.While Colonial has yet to explain exactly what triggered the pipeline shutdown, experts said there were plenty of vulnerabilities lurking throughout America's energy infrastructure.Last year, the Cybersecurity and Infrastructure Security Agency reported a ransomware attack on a natural gas compression facility that caused a shutdown of the facility for two days.In 2018, several natural gas pipeline operators reported that a system that processes customer transactions had been attacked, leading to service disruptions.But bigger risks lurk: In 2016, hackers knocked out large sections of the power grid in Ukraine, in what was thought to be the first intentional blackout triggered by a cyber attack.At the time, the Obama administration warned that America's electric utilities were not immune to similar attacks.In the past, energy companies typically kept the operational systems that run pipelines or power plants disconnected, or \"air gapped\", from the broader Internet, which meant that hackers could not easily gain access to the most critical infrastructure.But increasingly that is no longer the case, as companies install more sophisticated monitoring and diagnostics software that helps them operate these systems more efficiently. That potentially creates new cyber-security risks.\"Now these systems are all interconnected in ways that the companies themselves do not always fully understand,\" said Mr Marty Edwards, vice-president of operational technology for Tenable, a cyber-security firm.\"That provides an opportunity for attacks in one area to propagate elsewhere.\"Many industrial control systems were installed decades ago and run on outdated software, which means that even finding programmers to upgrade the systems can be a challenge.And the operators of vital energy infrastructure - such as pipelines, refineries or power plants - are often reluctant to shut down the flow of fuel or power for extended periods of time to install frequent security patches.Making things harder still, analysts said, many companies do not always have a good sense of exactly when and where it is worthwhile to spend money on costly new cyber-security defences, in part because of a lack of readily available data on which types of risks they are most likely to face.\"Companies don't always release a lot of information publicly\" about the threats they are seeing, said Mr Padraic O'Reilly, a co-founder of CyberSaint Security, who works with pipelines and critical infrastructure on cyber security.\"That can make it hard as an industry to know where to invest.\"Analysts said that the nation's electric utilities and grid operators were typically further ahead in preparing for cyber attacks than the oil and gas industry, in part because federal regulators have long required cyber-security standards for the backbone of the nation's power grid.Still, vulnerabilities remain.\"Part of it is the sheer complexity of the grid,\" said Mr Reid Sawyer, managing director of the US cyber-consulting practice at Marsh, an insurance firm.Not all levels of the grid face mandatory standards, for instance, and there are more than 3,000 utilities in the country with varying cyber-security practices.Energy companies may never be able to defend themselves against every single potential cyber attack out there, experts said. Instead, businesses and policymakers will need to design broader energy systems that are resilient to attacks and potential shutdowns, by, for instance, building in more redundancies or overrides.\"It's an old saying in cyber security: The people working defence have to be right 100 per cent of the time, while the attackers have to be right only once,\" Mr Monken said.\"That means we have to think a lot harder about contingencies when those defences fail.\"","news_type":1},"isVote":1,"likeStatus":false,"favoriteStatus":false,"reportStatus":false,"tweetType":1,"langContent":"EN"},{"id":195731387,"gmtCreate":1621314059749,"gmtModify":1634192507766,"author":{"id":"3575673928225023","authorId":"3575673928225023","authorIdStr":"3575673928225023","name":"Marcus1993","avatar":"https://static.tigerbbs.com/0b835437b2dfaf620c28adecbcb202d6","vip":1,"crmLevel":7,"crmLevelSwitch":0,"idStr":"3575673928225023"},"htmlText":"Wow","listText":"Wow","text":"Wow","images":[],"top":1,"highlighted":1,"essential":1,"paper":1,"likeSize":0,"commentSize":0,"repostSize":0,"link":"https://laohu8.com/post/195731387","repostId":2136190968,"repostType":4,"repost":{"id":"2136190968","pubTimestamp":1621309200,"share":"https://www.laohu8.com/m/news/2136190968?lang=&edition=full","pubTime":"2021-05-18 11:40","market":"us","language":"en","title":"US pipeline hacking signals growing cyber-security risk for energy system","url":"https://stock-news.laohu8.com/highlight/detail?id=2136190968","media":"The Straits Times","summary":"WASHINGTON (NYTIMES) - The audacious ransomware attack that shut down a major fuel pipeline and sent","content":"<div>\n<p>WASHINGTON (NYTIMES) - The audacious ransomware attack that shut down a major fuel pipeline and sent Americans scrambling for petrol in the south-east last week was not the first time that hackers ...</p>\n\n<a href=\"http://www.straitstimes.com/tech/tech-news/us-pipeline-hacking-signals-growing-cyber-security-risk-for-energy-system-0\">Web Link</a>\n\n</div>\n","source":"straits_highlight","collect":0,"html":"<!DOCTYPE html>\n<html>\n<head>\n<meta http-equiv=\"Content-Type\" content=\"text/html; charset=utf-8\" />\n<meta name=\"viewport\" content=\"width=device-width,initial-scale=1.0,minimum-scale=1.0,maximum-scale=1.0,user-scalable=no\"/>\n<meta name=\"format-detection\" content=\"telephone=no,email=no,address=no\" />\n<title>US pipeline hacking signals growing cyber-security risk for energy system</title>\n<style type=\"text/css\">\na,abbr,acronym,address,applet,article,aside,audio,b,big,blockquote,body,canvas,caption,center,cite,code,dd,del,details,dfn,div,dl,dt,\nem,embed,fieldset,figcaption,figure,footer,form,h1,h2,h3,h4,h5,h6,header,hgroup,html,i,iframe,img,ins,kbd,label,legend,li,mark,menu,nav,\nobject,ol,output,p,pre,q,ruby,s,samp,section,small,span,strike,strong,sub,summary,sup,table,tbody,td,tfoot,th,thead,time,tr,tt,u,ul,var,video{ font:inherit;margin:0;padding:0;vertical-align:baseline;border:0 }\nbody{ font-size:16px; line-height:1.5; color:#999; background:transparent; }\n.wrapper{ overflow:hidden;word-break:break-all;padding:10px; }\nh1,h2{ font-weight:normal; line-height:1.35; margin-bottom:.6em; }\nh3,h4,h5,h6{ line-height:1.35; margin-bottom:1em; }\nh1{ font-size:24px; }\nh2{ font-size:20px; }\nh3{ font-size:18px; }\nh4{ font-size:16px; }\nh5{ font-size:14px; }\nh6{ font-size:12px; }\np,ul,ol,blockquote,dl,table{ margin:1.2em 0; }\nul,ol{ margin-left:2em; }\nul{ list-style:disc; }\nol{ list-style:decimal; }\nli,li p{ margin:10px 0;}\nimg{ max-width:100%;display:block;margin:0 auto 1em; }\nblockquote{ color:#B5B2B1; border-left:3px solid #aaa; padding:1em; }\nstrong,b{font-weight:bold;}\nem,i{font-style:italic;}\ntable{ width:100%;border-collapse:collapse;border-spacing:1px;margin:1em 0;font-size:.9em; }\nth,td{ padding:5px;text-align:left;border:1px solid #aaa; }\nth{ font-weight:bold;background:#5d5d5d; }\n.symbol-link{font-weight:bold;}\n/* header{ border-bottom:1px solid #494756; } */\n.title{ margin:0 0 8px;line-height:1.3;color:#ddd; }\n.meta {color:#5e5c6d;font-size:13px;margin:0 0 .5em; }\na{text-decoration:none; color:#2a4b87;}\n.meta .head { display: inline-block; overflow: hidden}\n.head .h-thumb { width: 30px; height: 30px; margin: 0; padding: 0; border-radius: 50%; float: left;}\n.head .h-content { margin: 0; padding: 0 0 0 9px; float: left;}\n.head .h-name {font-size: 13px; color: #eee; margin: 0;}\n.head .h-time {font-size: 11px; color: #7E829C; margin: 0;line-height: 11px;}\n.small {font-size: 12.5px; display: inline-block; transform: scale(0.9); -webkit-transform: scale(0.9); transform-origin: left; -webkit-transform-origin: left;}\n.smaller {font-size: 12.5px; display: inline-block; transform: scale(0.8); -webkit-transform: scale(0.8); transform-origin: left; -webkit-transform-origin: left;}\n.bt-text {font-size: 12px;margin: 1.5em 0 0 0}\n.bt-text p {margin: 0}\n</style>\n</head>\n<body>\n<div class=\"wrapper\">\n<header>\n<h2 class=\"title\">\nUS pipeline hacking signals growing cyber-security risk for energy system\n</h2>\n\n<h4 class=\"meta\">\n\n\n2021-05-18 11:40 GMT+8&nbsp;&nbsp;&nbsp;<a href=http://www.straitstimes.com/tech/tech-news/us-pipeline-hacking-signals-growing-cyber-security-risk-for-energy-system-0><strong>The Straits Times</strong></a>\n\n\n</h4>\n\n</header>\n<article>\n<div>\n<p>WASHINGTON (NYTIMES) - The audacious ransomware attack that shut down a major fuel pipeline and sent Americans scrambling for petrol in the south-east last week was not the first time that hackers ...</p>\n\n<a href=\"http://www.straitstimes.com/tech/tech-news/us-pipeline-hacking-signals-growing-cyber-security-risk-for-energy-system-0\">Web Link</a>\n\n</div>\n\n\n</article>\n</div>\n</body>\n</html>\n","type":0,"thumbnail":"","relate_stocks":{},"source_url":"http://www.straitstimes.com/tech/tech-news/us-pipeline-hacking-signals-growing-cyber-security-risk-for-energy-system-0","is_english":true,"share_image_url":"https://static.laohu8.com/e9f99090a1c2ed51c021029395664489","article_id":"2136190968","content_text":"WASHINGTON (NYTIMES) - The audacious ransomware attack that shut down a major fuel pipeline and sent Americans scrambling for petrol in the south-east last week was not the first time that hackers have disrupted the United States' ageing, vulnerable energy infrastructure. And it is unlikely to be the last.Across the globe, cyber attackers are increasingly taking aim at the energy systems that underpin modern society.A February report from IBM found that the energy industry was the third-most targeted sector for such attacks last year, behind only finance and manufacturing. That was up from ninth place in 2019.\"This should be a wake-up call,\" said Mr Jonathon Monken, a principal at energy consulting firm Converge Strategies.\"When you look at what's most likely to cause disruptions to energy companies today, I think you have to put cyber-security risks at the top.\"Despite years of warnings, America's vast network of pipelines, electric grids and power plants remains acutely vulnerable to cyber attacks with the potential to disrupt energy supplies for millions of people.Dealing with those risks, analysts said, will pose a major challenge for the Biden administration as it seeks hundreds of billions of dollars to modernise the nation's energy infrastructure and transition to cleaner sources of energy to address climate change.Regulators are increasingly poised to step in.Last week, Mr Richard Glick, the chairman of the Federal Energy Regulatory Commission, said it was time to establish mandatory cyber-security standards for the nation's nearly 4.8 million km of oil and gas pipelines, similar to those currently found in the electricity sector.\"Simply encouraging pipelines to voluntarily adopt best practices is an inadequate response to the ever increasing number and sophistication of malevolent cyber actors,\" Mr Glick said in a statement.The risks to the nation's energy systems are widespread and varied. Many oil and gas pipelines, for instance, rely on decades-old control systems that are not well defended against more sophisticated cyber attacks and cannot be easily updated.And it is not just pipelines. As electric grid operators harness a growing array of digital technologies to help manage the flow of power and cut planet-warming emissions - such as smart thermostats, or far-flung yet interconnected networks of solar arrays - hackers may find new entry points to exploit.The shutdown on May 7 of the Colonial Pipeline, which stretches 8,850km from Texas to New Jersey and transports 45 per cent of the East Coast's fuel supplies, illustrates how devastating such attacks can be.On May 8, Colonial acknowledged that its corporate computer systems had been hit by a ransomware attack, in which criminal groups hold data hostage until the victim pays a ransom.A tanker delivering fuel to a Speedway petrol station in Alexandria, Virginia, last Thursday. A ransomware attack had shut down a major fuel pipeline in America and sent people scrambling for petrol in the south-east last week. PHOTO: EPA-EFEThe company said that it had shut down the pipeline as a precaution, apparently for fear that the hackers might have obtained information that would enable them to attack parts of the pipeline itself.Colonial said last Wednesday that it had started to resume pipeline operations, although it would take several days to restore full service. But throughout the south-east, panicked Americans were racing to stock up on petrol, causing thousands of petrol stations to run out of fuel.While Colonial has yet to explain exactly what triggered the pipeline shutdown, experts said there were plenty of vulnerabilities lurking throughout America's energy infrastructure.Last year, the Cybersecurity and Infrastructure Security Agency reported a ransomware attack on a natural gas compression facility that caused a shutdown of the facility for two days.In 2018, several natural gas pipeline operators reported that a system that processes customer transactions had been attacked, leading to service disruptions.But bigger risks lurk: In 2016, hackers knocked out large sections of the power grid in Ukraine, in what was thought to be the first intentional blackout triggered by a cyber attack.At the time, the Obama administration warned that America's electric utilities were not immune to similar attacks.In the past, energy companies typically kept the operational systems that run pipelines or power plants disconnected, or \"air gapped\", from the broader Internet, which meant that hackers could not easily gain access to the most critical infrastructure.But increasingly that is no longer the case, as companies install more sophisticated monitoring and diagnostics software that helps them operate these systems more efficiently. That potentially creates new cyber-security risks.\"Now these systems are all interconnected in ways that the companies themselves do not always fully understand,\" said Mr Marty Edwards, vice-president of operational technology for Tenable, a cyber-security firm.\"That provides an opportunity for attacks in one area to propagate elsewhere.\"Many industrial control systems were installed decades ago and run on outdated software, which means that even finding programmers to upgrade the systems can be a challenge.And the operators of vital energy infrastructure - such as pipelines, refineries or power plants - are often reluctant to shut down the flow of fuel or power for extended periods of time to install frequent security patches.Making things harder still, analysts said, many companies do not always have a good sense of exactly when and where it is worthwhile to spend money on costly new cyber-security defences, in part because of a lack of readily available data on which types of risks they are most likely to face.\"Companies don't always release a lot of information publicly\" about the threats they are seeing, said Mr Padraic O'Reilly, a co-founder of CyberSaint Security, who works with pipelines and critical infrastructure on cyber security.\"That can make it hard as an industry to know where to invest.\"Analysts said that the nation's electric utilities and grid operators were typically further ahead in preparing for cyber attacks than the oil and gas industry, in part because federal regulators have long required cyber-security standards for the backbone of the nation's power grid.Still, vulnerabilities remain.\"Part of it is the sheer complexity of the grid,\" said Mr Reid Sawyer, managing director of the US cyber-consulting practice at Marsh, an insurance firm.Not all levels of the grid face mandatory standards, for instance, and there are more than 3,000 utilities in the country with varying cyber-security practices.Energy companies may never be able to defend themselves against every single potential cyber attack out there, experts said. Instead, businesses and policymakers will need to design broader energy systems that are resilient to attacks and potential shutdowns, by, for instance, building in more redundancies or overrides.\"It's an old saying in cyber security: The people working defence have to be right 100 per cent of the time, while the attackers have to be right only once,\" Mr Monken said.\"That means we have to think a lot harder about contingencies when those defences fail.\"","news_type":1},"isVote":1,"likeStatus":false,"favoriteStatus":false,"reportStatus":false,"tweetType":1,"langContent":"EN"},{"id":195700972,"gmtCreate":1621312277696,"gmtModify":1634192525218,"author":{"id":"3581844366704770","authorId":"3581844366704770","authorIdStr":"3581844366704770","name":"KingKong88","avatar":"https://static.tigerbbs.com/ca221e1f8c3c6fd2bccd3f8d4d7b5bdb","vip":1,"crmLevel":1,"crmLevelSwitch":0,"idStr":"3581844366704770"},"htmlText":"It affects every sector, not just energy","listText":"It affects every sector, not just energy","text":"It affects every sector, not just energy","images":[],"top":1,"highlighted":1,"essential":1,"paper":1,"likeSize":2,"commentSize":0,"repostSize":0,"link":"https://laohu8.com/post/195700972","repostId":2136190968,"repostType":4,"repost":{"id":"2136190968","pubTimestamp":1621309200,"share":"https://www.laohu8.com/m/news/2136190968?lang=&edition=full","pubTime":"2021-05-18 11:40","market":"us","language":"en","title":"US pipeline hacking signals growing cyber-security risk for energy system","url":"https://stock-news.laohu8.com/highlight/detail?id=2136190968","media":"The Straits Times","summary":"WASHINGTON (NYTIMES) - The audacious ransomware attack that shut down a major fuel pipeline and sent","content":"<div>\n<p>WASHINGTON (NYTIMES) - The audacious ransomware attack that shut down a major fuel pipeline and sent Americans scrambling for petrol in the south-east last week was not the first time that hackers ...</p>\n\n<a href=\"http://www.straitstimes.com/tech/tech-news/us-pipeline-hacking-signals-growing-cyber-security-risk-for-energy-system-0\">Web Link</a>\n\n</div>\n","source":"straits_highlight","collect":0,"html":"<!DOCTYPE html>\n<html>\n<head>\n<meta http-equiv=\"Content-Type\" content=\"text/html; charset=utf-8\" />\n<meta name=\"viewport\" content=\"width=device-width,initial-scale=1.0,minimum-scale=1.0,maximum-scale=1.0,user-scalable=no\"/>\n<meta name=\"format-detection\" content=\"telephone=no,email=no,address=no\" />\n<title>US pipeline hacking signals growing cyber-security risk for energy system</title>\n<style type=\"text/css\">\na,abbr,acronym,address,applet,article,aside,audio,b,big,blockquote,body,canvas,caption,center,cite,code,dd,del,details,dfn,div,dl,dt,\nem,embed,fieldset,figcaption,figure,footer,form,h1,h2,h3,h4,h5,h6,header,hgroup,html,i,iframe,img,ins,kbd,label,legend,li,mark,menu,nav,\nobject,ol,output,p,pre,q,ruby,s,samp,section,small,span,strike,strong,sub,summary,sup,table,tbody,td,tfoot,th,thead,time,tr,tt,u,ul,var,video{ font:inherit;margin:0;padding:0;vertical-align:baseline;border:0 }\nbody{ font-size:16px; line-height:1.5; color:#999; background:transparent; }\n.wrapper{ overflow:hidden;word-break:break-all;padding:10px; }\nh1,h2{ font-weight:normal; line-height:1.35; margin-bottom:.6em; }\nh3,h4,h5,h6{ line-height:1.35; margin-bottom:1em; }\nh1{ font-size:24px; }\nh2{ font-size:20px; }\nh3{ font-size:18px; }\nh4{ font-size:16px; }\nh5{ font-size:14px; }\nh6{ font-size:12px; }\np,ul,ol,blockquote,dl,table{ margin:1.2em 0; }\nul,ol{ margin-left:2em; }\nul{ list-style:disc; }\nol{ list-style:decimal; }\nli,li p{ margin:10px 0;}\nimg{ max-width:100%;display:block;margin:0 auto 1em; }\nblockquote{ color:#B5B2B1; border-left:3px solid #aaa; padding:1em; }\nstrong,b{font-weight:bold;}\nem,i{font-style:italic;}\ntable{ width:100%;border-collapse:collapse;border-spacing:1px;margin:1em 0;font-size:.9em; }\nth,td{ padding:5px;text-align:left;border:1px solid #aaa; }\nth{ font-weight:bold;background:#5d5d5d; }\n.symbol-link{font-weight:bold;}\n/* header{ border-bottom:1px solid #494756; } */\n.title{ margin:0 0 8px;line-height:1.3;color:#ddd; }\n.meta {color:#5e5c6d;font-size:13px;margin:0 0 .5em; }\na{text-decoration:none; color:#2a4b87;}\n.meta .head { display: inline-block; overflow: hidden}\n.head .h-thumb { width: 30px; height: 30px; margin: 0; padding: 0; border-radius: 50%; float: left;}\n.head .h-content { margin: 0; padding: 0 0 0 9px; float: left;}\n.head .h-name {font-size: 13px; color: #eee; margin: 0;}\n.head .h-time {font-size: 11px; color: #7E829C; margin: 0;line-height: 11px;}\n.small {font-size: 12.5px; display: inline-block; transform: scale(0.9); -webkit-transform: scale(0.9); transform-origin: left; -webkit-transform-origin: left;}\n.smaller {font-size: 12.5px; display: inline-block; transform: scale(0.8); -webkit-transform: scale(0.8); transform-origin: left; -webkit-transform-origin: left;}\n.bt-text {font-size: 12px;margin: 1.5em 0 0 0}\n.bt-text p {margin: 0}\n</style>\n</head>\n<body>\n<div class=\"wrapper\">\n<header>\n<h2 class=\"title\">\nUS pipeline hacking signals growing cyber-security risk for energy system\n</h2>\n\n<h4 class=\"meta\">\n\n\n2021-05-18 11:40 GMT+8&nbsp;&nbsp;&nbsp;<a href=http://www.straitstimes.com/tech/tech-news/us-pipeline-hacking-signals-growing-cyber-security-risk-for-energy-system-0><strong>The Straits Times</strong></a>\n\n\n</h4>\n\n</header>\n<article>\n<div>\n<p>WASHINGTON (NYTIMES) - The audacious ransomware attack that shut down a major fuel pipeline and sent Americans scrambling for petrol in the south-east last week was not the first time that hackers ...</p>\n\n<a href=\"http://www.straitstimes.com/tech/tech-news/us-pipeline-hacking-signals-growing-cyber-security-risk-for-energy-system-0\">Web Link</a>\n\n</div>\n\n\n</article>\n</div>\n</body>\n</html>\n","type":0,"thumbnail":"","relate_stocks":{},"source_url":"http://www.straitstimes.com/tech/tech-news/us-pipeline-hacking-signals-growing-cyber-security-risk-for-energy-system-0","is_english":true,"share_image_url":"https://static.laohu8.com/e9f99090a1c2ed51c021029395664489","article_id":"2136190968","content_text":"WASHINGTON (NYTIMES) - The audacious ransomware attack that shut down a major fuel pipeline and sent Americans scrambling for petrol in the south-east last week was not the first time that hackers have disrupted the United States' ageing, vulnerable energy infrastructure. And it is unlikely to be the last.Across the globe, cyber attackers are increasingly taking aim at the energy systems that underpin modern society.A February report from IBM found that the energy industry was the third-most targeted sector for such attacks last year, behind only finance and manufacturing. That was up from ninth place in 2019.\"This should be a wake-up call,\" said Mr Jonathon Monken, a principal at energy consulting firm Converge Strategies.\"When you look at what's most likely to cause disruptions to energy companies today, I think you have to put cyber-security risks at the top.\"Despite years of warnings, America's vast network of pipelines, electric grids and power plants remains acutely vulnerable to cyber attacks with the potential to disrupt energy supplies for millions of people.Dealing with those risks, analysts said, will pose a major challenge for the Biden administration as it seeks hundreds of billions of dollars to modernise the nation's energy infrastructure and transition to cleaner sources of energy to address climate change.Regulators are increasingly poised to step in.Last week, Mr Richard Glick, the chairman of the Federal Energy Regulatory Commission, said it was time to establish mandatory cyber-security standards for the nation's nearly 4.8 million km of oil and gas pipelines, similar to those currently found in the electricity sector.\"Simply encouraging pipelines to voluntarily adopt best practices is an inadequate response to the ever increasing number and sophistication of malevolent cyber actors,\" Mr Glick said in a statement.The risks to the nation's energy systems are widespread and varied. Many oil and gas pipelines, for instance, rely on decades-old control systems that are not well defended against more sophisticated cyber attacks and cannot be easily updated.And it is not just pipelines. As electric grid operators harness a growing array of digital technologies to help manage the flow of power and cut planet-warming emissions - such as smart thermostats, or far-flung yet interconnected networks of solar arrays - hackers may find new entry points to exploit.The shutdown on May 7 of the Colonial Pipeline, which stretches 8,850km from Texas to New Jersey and transports 45 per cent of the East Coast's fuel supplies, illustrates how devastating such attacks can be.On May 8, Colonial acknowledged that its corporate computer systems had been hit by a ransomware attack, in which criminal groups hold data hostage until the victim pays a ransom.A tanker delivering fuel to a Speedway petrol station in Alexandria, Virginia, last Thursday. A ransomware attack had shut down a major fuel pipeline in America and sent people scrambling for petrol in the south-east last week. PHOTO: EPA-EFEThe company said that it had shut down the pipeline as a precaution, apparently for fear that the hackers might have obtained information that would enable them to attack parts of the pipeline itself.Colonial said last Wednesday that it had started to resume pipeline operations, although it would take several days to restore full service. But throughout the south-east, panicked Americans were racing to stock up on petrol, causing thousands of petrol stations to run out of fuel.While Colonial has yet to explain exactly what triggered the pipeline shutdown, experts said there were plenty of vulnerabilities lurking throughout America's energy infrastructure.Last year, the Cybersecurity and Infrastructure Security Agency reported a ransomware attack on a natural gas compression facility that caused a shutdown of the facility for two days.In 2018, several natural gas pipeline operators reported that a system that processes customer transactions had been attacked, leading to service disruptions.But bigger risks lurk: In 2016, hackers knocked out large sections of the power grid in Ukraine, in what was thought to be the first intentional blackout triggered by a cyber attack.At the time, the Obama administration warned that America's electric utilities were not immune to similar attacks.In the past, energy companies typically kept the operational systems that run pipelines or power plants disconnected, or \"air gapped\", from the broader Internet, which meant that hackers could not easily gain access to the most critical infrastructure.But increasingly that is no longer the case, as companies install more sophisticated monitoring and diagnostics software that helps them operate these systems more efficiently. That potentially creates new cyber-security risks.\"Now these systems are all interconnected in ways that the companies themselves do not always fully understand,\" said Mr Marty Edwards, vice-president of operational technology for Tenable, a cyber-security firm.\"That provides an opportunity for attacks in one area to propagate elsewhere.\"Many industrial control systems were installed decades ago and run on outdated software, which means that even finding programmers to upgrade the systems can be a challenge.And the operators of vital energy infrastructure - such as pipelines, refineries or power plants - are often reluctant to shut down the flow of fuel or power for extended periods of time to install frequent security patches.Making things harder still, analysts said, many companies do not always have a good sense of exactly when and where it is worthwhile to spend money on costly new cyber-security defences, in part because of a lack of readily available data on which types of risks they are most likely to face.\"Companies don't always release a lot of information publicly\" about the threats they are seeing, said Mr Padraic O'Reilly, a co-founder of CyberSaint Security, who works with pipelines and critical infrastructure on cyber security.\"That can make it hard as an industry to know where to invest.\"Analysts said that the nation's electric utilities and grid operators were typically further ahead in preparing for cyber attacks than the oil and gas industry, in part because federal regulators have long required cyber-security standards for the backbone of the nation's power grid.Still, vulnerabilities remain.\"Part of it is the sheer complexity of the grid,\" said Mr Reid Sawyer, managing director of the US cyber-consulting practice at Marsh, an insurance firm.Not all levels of the grid face mandatory standards, for instance, and there are more than 3,000 utilities in the country with varying cyber-security practices.Energy companies may never be able to defend themselves against every single potential cyber attack out there, experts said. Instead, businesses and policymakers will need to design broader energy systems that are resilient to attacks and potential shutdowns, by, for instance, building in more redundancies or overrides.\"It's an old saying in cyber security: The people working defence have to be right 100 per cent of the time, while the attackers have to be right only once,\" Mr Monken said.\"That means we have to think a lot harder about contingencies when those defences fail.\"","news_type":1},"isVote":1,"likeStatus":false,"favoriteStatus":false,"reportStatus":false,"tweetType":1,"langContent":"EN"},{"id":195427303,"gmtCreate":1621309983202,"gmtModify":1634192550648,"author":{"id":"3581505866102985","authorId":"3581505866102985","authorIdStr":"3581505866102985","name":"skyel","avatar":"https://static.tigerbbs.com/a4e416c9b1fabad56fbe0e086388d5b0","vip":1,"crmLevel":4,"crmLevelSwitch":0,"idStr":"3581505866102985"},"htmlText":"Humans always like to wait for things to happen before act on them or sometimes ignore it. I hope it is an expensive lesson learned.&nbsp;","listText":"Humans always like to wait for things to happen before act on them or sometimes ignore it. I hope it is an expensive lesson learned.&nbsp;","text":"Humans always like to wait for things to happen before act on them or sometimes ignore it. I hope it is an expensive lesson learned.","images":[],"top":1,"highlighted":1,"essential":1,"paper":1,"likeSize":6,"commentSize":4,"repostSize":0,"link":"https://laohu8.com/post/195427303","repostId":2136190968,"repostType":4,"repost":{"id":"2136190968","pubTimestamp":1621309200,"share":"https://www.laohu8.com/m/news/2136190968?lang=&edition=full","pubTime":"2021-05-18 11:40","market":"us","language":"en","title":"US pipeline hacking signals growing cyber-security risk for energy system","url":"https://stock-news.laohu8.com/highlight/detail?id=2136190968","media":"The Straits Times","summary":"WASHINGTON (NYTIMES) - The audacious ransomware attack that shut down a major fuel pipeline and sent","content":"<div>\n<p>WASHINGTON (NYTIMES) - The audacious ransomware attack that shut down a major fuel pipeline and sent Americans scrambling for petrol in the south-east last week was not the first time that hackers ...</p>\n\n<a href=\"http://www.straitstimes.com/tech/tech-news/us-pipeline-hacking-signals-growing-cyber-security-risk-for-energy-system-0\">Web Link</a>\n\n</div>\n","source":"straits_highlight","collect":0,"html":"<!DOCTYPE html>\n<html>\n<head>\n<meta http-equiv=\"Content-Type\" content=\"text/html; charset=utf-8\" />\n<meta name=\"viewport\" content=\"width=device-width,initial-scale=1.0,minimum-scale=1.0,maximum-scale=1.0,user-scalable=no\"/>\n<meta name=\"format-detection\" content=\"telephone=no,email=no,address=no\" />\n<title>US pipeline hacking signals growing cyber-security risk for energy system</title>\n<style type=\"text/css\">\na,abbr,acronym,address,applet,article,aside,audio,b,big,blockquote,body,canvas,caption,center,cite,code,dd,del,details,dfn,div,dl,dt,\nem,embed,fieldset,figcaption,figure,footer,form,h1,h2,h3,h4,h5,h6,header,hgroup,html,i,iframe,img,ins,kbd,label,legend,li,mark,menu,nav,\nobject,ol,output,p,pre,q,ruby,s,samp,section,small,span,strike,strong,sub,summary,sup,table,tbody,td,tfoot,th,thead,time,tr,tt,u,ul,var,video{ font:inherit;margin:0;padding:0;vertical-align:baseline;border:0 }\nbody{ font-size:16px; line-height:1.5; color:#999; background:transparent; }\n.wrapper{ overflow:hidden;word-break:break-all;padding:10px; }\nh1,h2{ font-weight:normal; line-height:1.35; margin-bottom:.6em; }\nh3,h4,h5,h6{ line-height:1.35; margin-bottom:1em; }\nh1{ font-size:24px; }\nh2{ font-size:20px; }\nh3{ font-size:18px; }\nh4{ font-size:16px; }\nh5{ font-size:14px; }\nh6{ font-size:12px; }\np,ul,ol,blockquote,dl,table{ margin:1.2em 0; }\nul,ol{ margin-left:2em; }\nul{ list-style:disc; }\nol{ list-style:decimal; }\nli,li p{ margin:10px 0;}\nimg{ max-width:100%;display:block;margin:0 auto 1em; }\nblockquote{ color:#B5B2B1; border-left:3px solid #aaa; padding:1em; }\nstrong,b{font-weight:bold;}\nem,i{font-style:italic;}\ntable{ width:100%;border-collapse:collapse;border-spacing:1px;margin:1em 0;font-size:.9em; }\nth,td{ padding:5px;text-align:left;border:1px solid #aaa; }\nth{ font-weight:bold;background:#5d5d5d; }\n.symbol-link{font-weight:bold;}\n/* header{ border-bottom:1px solid #494756; } */\n.title{ margin:0 0 8px;line-height:1.3;color:#ddd; }\n.meta {color:#5e5c6d;font-size:13px;margin:0 0 .5em; }\na{text-decoration:none; color:#2a4b87;}\n.meta .head { display: inline-block; overflow: hidden}\n.head .h-thumb { width: 30px; height: 30px; margin: 0; padding: 0; border-radius: 50%; float: left;}\n.head .h-content { margin: 0; padding: 0 0 0 9px; float: left;}\n.head .h-name {font-size: 13px; color: #eee; margin: 0;}\n.head .h-time {font-size: 11px; color: #7E829C; margin: 0;line-height: 11px;}\n.small {font-size: 12.5px; display: inline-block; transform: scale(0.9); -webkit-transform: scale(0.9); transform-origin: left; -webkit-transform-origin: left;}\n.smaller {font-size: 12.5px; display: inline-block; transform: scale(0.8); -webkit-transform: scale(0.8); transform-origin: left; -webkit-transform-origin: left;}\n.bt-text {font-size: 12px;margin: 1.5em 0 0 0}\n.bt-text p {margin: 0}\n</style>\n</head>\n<body>\n<div class=\"wrapper\">\n<header>\n<h2 class=\"title\">\nUS pipeline hacking signals growing cyber-security risk for energy system\n</h2>\n\n<h4 class=\"meta\">\n\n\n2021-05-18 11:40 GMT+8&nbsp;&nbsp;&nbsp;<a href=http://www.straitstimes.com/tech/tech-news/us-pipeline-hacking-signals-growing-cyber-security-risk-for-energy-system-0><strong>The Straits Times</strong></a>\n\n\n</h4>\n\n</header>\n<article>\n<div>\n<p>WASHINGTON (NYTIMES) - The audacious ransomware attack that shut down a major fuel pipeline and sent Americans scrambling for petrol in the south-east last week was not the first time that hackers ...</p>\n\n<a href=\"http://www.straitstimes.com/tech/tech-news/us-pipeline-hacking-signals-growing-cyber-security-risk-for-energy-system-0\">Web Link</a>\n\n</div>\n\n\n</article>\n</div>\n</body>\n</html>\n","type":0,"thumbnail":"","relate_stocks":{},"source_url":"http://www.straitstimes.com/tech/tech-news/us-pipeline-hacking-signals-growing-cyber-security-risk-for-energy-system-0","is_english":true,"share_image_url":"https://static.laohu8.com/e9f99090a1c2ed51c021029395664489","article_id":"2136190968","content_text":"WASHINGTON (NYTIMES) - The audacious ransomware attack that shut down a major fuel pipeline and sent Americans scrambling for petrol in the south-east last week was not the first time that hackers have disrupted the United States' ageing, vulnerable energy infrastructure. And it is unlikely to be the last.Across the globe, cyber attackers are increasingly taking aim at the energy systems that underpin modern society.A February report from IBM found that the energy industry was the third-most targeted sector for such attacks last year, behind only finance and manufacturing. That was up from ninth place in 2019.\"This should be a wake-up call,\" said Mr Jonathon Monken, a principal at energy consulting firm Converge Strategies.\"When you look at what's most likely to cause disruptions to energy companies today, I think you have to put cyber-security risks at the top.\"Despite years of warnings, America's vast network of pipelines, electric grids and power plants remains acutely vulnerable to cyber attacks with the potential to disrupt energy supplies for millions of people.Dealing with those risks, analysts said, will pose a major challenge for the Biden administration as it seeks hundreds of billions of dollars to modernise the nation's energy infrastructure and transition to cleaner sources of energy to address climate change.Regulators are increasingly poised to step in.Last week, Mr Richard Glick, the chairman of the Federal Energy Regulatory Commission, said it was time to establish mandatory cyber-security standards for the nation's nearly 4.8 million km of oil and gas pipelines, similar to those currently found in the electricity sector.\"Simply encouraging pipelines to voluntarily adopt best practices is an inadequate response to the ever increasing number and sophistication of malevolent cyber actors,\" Mr Glick said in a statement.The risks to the nation's energy systems are widespread and varied. Many oil and gas pipelines, for instance, rely on decades-old control systems that are not well defended against more sophisticated cyber attacks and cannot be easily updated.And it is not just pipelines. As electric grid operators harness a growing array of digital technologies to help manage the flow of power and cut planet-warming emissions - such as smart thermostats, or far-flung yet interconnected networks of solar arrays - hackers may find new entry points to exploit.The shutdown on May 7 of the Colonial Pipeline, which stretches 8,850km from Texas to New Jersey and transports 45 per cent of the East Coast's fuel supplies, illustrates how devastating such attacks can be.On May 8, Colonial acknowledged that its corporate computer systems had been hit by a ransomware attack, in which criminal groups hold data hostage until the victim pays a ransom.A tanker delivering fuel to a Speedway petrol station in Alexandria, Virginia, last Thursday. A ransomware attack had shut down a major fuel pipeline in America and sent people scrambling for petrol in the south-east last week. PHOTO: EPA-EFEThe company said that it had shut down the pipeline as a precaution, apparently for fear that the hackers might have obtained information that would enable them to attack parts of the pipeline itself.Colonial said last Wednesday that it had started to resume pipeline operations, although it would take several days to restore full service. But throughout the south-east, panicked Americans were racing to stock up on petrol, causing thousands of petrol stations to run out of fuel.While Colonial has yet to explain exactly what triggered the pipeline shutdown, experts said there were plenty of vulnerabilities lurking throughout America's energy infrastructure.Last year, the Cybersecurity and Infrastructure Security Agency reported a ransomware attack on a natural gas compression facility that caused a shutdown of the facility for two days.In 2018, several natural gas pipeline operators reported that a system that processes customer transactions had been attacked, leading to service disruptions.But bigger risks lurk: In 2016, hackers knocked out large sections of the power grid in Ukraine, in what was thought to be the first intentional blackout triggered by a cyber attack.At the time, the Obama administration warned that America's electric utilities were not immune to similar attacks.In the past, energy companies typically kept the operational systems that run pipelines or power plants disconnected, or \"air gapped\", from the broader Internet, which meant that hackers could not easily gain access to the most critical infrastructure.But increasingly that is no longer the case, as companies install more sophisticated monitoring and diagnostics software that helps them operate these systems more efficiently. That potentially creates new cyber-security risks.\"Now these systems are all interconnected in ways that the companies themselves do not always fully understand,\" said Mr Marty Edwards, vice-president of operational technology for Tenable, a cyber-security firm.\"That provides an opportunity for attacks in one area to propagate elsewhere.\"Many industrial control systems were installed decades ago and run on outdated software, which means that even finding programmers to upgrade the systems can be a challenge.And the operators of vital energy infrastructure - such as pipelines, refineries or power plants - are often reluctant to shut down the flow of fuel or power for extended periods of time to install frequent security patches.Making things harder still, analysts said, many companies do not always have a good sense of exactly when and where it is worthwhile to spend money on costly new cyber-security defences, in part because of a lack of readily available data on which types of risks they are most likely to face.\"Companies don't always release a lot of information publicly\" about the threats they are seeing, said Mr Padraic O'Reilly, a co-founder of CyberSaint Security, who works with pipelines and critical infrastructure on cyber security.\"That can make it hard as an industry to know where to invest.\"Analysts said that the nation's electric utilities and grid operators were typically further ahead in preparing for cyber attacks than the oil and gas industry, in part because federal regulators have long required cyber-security standards for the backbone of the nation's power grid.Still, vulnerabilities remain.\"Part of it is the sheer complexity of the grid,\" said Mr Reid Sawyer, managing director of the US cyber-consulting practice at Marsh, an insurance firm.Not all levels of the grid face mandatory standards, for instance, and there are more than 3,000 utilities in the country with varying cyber-security practices.Energy companies may never be able to defend themselves against every single potential cyber attack out there, experts said. Instead, businesses and policymakers will need to design broader energy systems that are resilient to attacks and potential shutdowns, by, for instance, building in more redundancies or overrides.\"It's an old saying in cyber security: The people working defence have to be right 100 per cent of the time, while the attackers have to be right only once,\" Mr Monken said.\"That means we have to think a lot harder about contingencies when those defences fail.\"","news_type":1},"isVote":1,"likeStatus":false,"favoriteStatus":false,"reportStatus":false,"tweetType":1,"comments":[{"id":4363398,"gmtCreate":1621311581325,"gmtModify":1635406738814,"authorId":3574053691106982,"author":{"id":3574053691106982,"authorId":3574053691106982,"name":"jw321","avatar":"https://static.tigerbbs.com/1263b51c7856e75fbd5cf4072078ca6e","vip":1,"crmLevel":3,"crmLevelSwitch":0,"individualDisplayBadges":[]},"repliedAuthorId":0,"objectId":195427303,"type":1,"supId":0,"prevId":0,"content":"its like delaying to buy the dip","text":"its like delaying to buy the dip","html":"its like delaying to buy the dip"},{"id":4363424,"gmtCreate":1621311726055,"gmtModify":1635406736508,"authorId":3580190462625568,"author":{"id":3580190462625568,"authorId":3580190462625568,"name":"DarrylWong","avatar":"https://static.tigerbbs.com/8e4b82d595be883bcd8e099845c3f407","vip":1,"crmLevel":2,"crmLevelSwitch":0,"individualDisplayBadges":[]},"repliedAuthorId":0,"objectId":195427303,"type":1,"supId":0,"prevId":0,"content":"exactly","text":"exactly","html":"exactly"},{"id":4363562,"gmtCreate":1621312488783,"gmtModify":1635406725030,"authorId":3582714812293607,"author":{"id":3582714812293607,"authorId":3582714812293607,"name":"Darylzhuo","avatar":"https://static.tigerbbs.com/fd5e4be85ccfbeb4c1c4b4faed74f6f1","vip":1,"crmLevel":1,"crmLevelSwitch":0,"individualDisplayBadges":[]},"repliedAuthorId":0,"objectId":195427303,"type":1,"supId":4363424,"prevId":0,"content":"<u>Good</u>","text":"<u>Good</u>","html":"<u>Good</u>"},{"id":4363701,"gmtCreate":1621313317685,"gmtModify":1635406712570,"authorId":3584405602897728,"author":{"id":3584405602897728,"authorId":3584405602897728,"name":"EeC","avatar":"https://static.tigerbbs.com/03c26214aba1f7a26a1eb4841ffd150a","vip":1,"crmLevel":2,"crmLevelSwitch":0,"individualDisplayBadges":[]},"repliedAuthorId":0,"objectId":195427303,"type":1,"supId":0,"prevId":0,"content":"Very wisewords","text":"Very wisewords","html":"Very wisewords"}],"langContent":"EN"}],"hasMoreComments":true,"newsSizeData":{"likeSize":76,"commentSize":8,"repostSize":0,"favoriteSize":0,"likeStatus":false,"favoriteStatus":false}}