S4x19 — Miami — Programmable logic controllers (PLCs) long have been known to be easy marks for attack due to their blatant lack of built-in security, but a security researcher here this week will demonstrate how a hacker could commandeer some PLCs via their own advanced communications features. Roee Stark, senior software engineer with ICS/SCADA network security monitoring firm Indegy, discovered that he could use two communication functions built into Rockwell Automation’s CompactLogix PLC line to wage network-borne attacks.

Read full news article on Dark Reading