A rogue Raspberry Pi helped hackers access NASA JPL systems Engadget

Sponsored Links

Andrei Stanescu through Getty Images

NASA's Jet Propulsion Laboratory (JPL) suffers from a couple of cybersecurity weaknesses notwithstanding the advances it has accomplished in space era, according to the organisation's Office of Inspector General (PDF). Investigators appeared into the research center's community safety controls after an April2019 safety breach, wherein a Raspberry Pi that changed into now not legal to be linked to the JPL community changed into targeted by means of hackers. The attackers were able to scouse borrow 500 megabytes of facts from certainly one of its predominant task systems, and they also used that hazard to find a gateway that allowed them to go deeper into JPL's network.

Diving deeper into the gadget gave the hackers get right of entry to to several predominant missions, which include NASA's Deep Space Network -- its network of spacecraft conversation facilities. As a result, the security groups of some sensitive applications, such as the Orion Multi-Purpose Crew Vehicle and the International Space Station, have selected to disconnect from the employer's community.

In addition to having reduced visibility to devices linked to its community and to now not retaining one-of-a-kind components of its community separate, investigators have additionally found instances of security tickets no longer being resolved for extended periods of time. In some instances, the tickets sat unresolved for as long as 180 days. The investigators have additionally mentioned that JPL's incident control and reaction practices deviate from NASA's pointers.

The OIG encouraged a fix for all those problems, and NASA agreed to they all except one: organising a proper threat-hunting system to find flaws before they even motive issues. It will verify if JPL follows through earlier than closing the investigation completely.

Via: Threatpost

Source: NASA Office of Inspector General

In this newsletter: gear, jpl, nasa, security

All products recommended via Engadget are decided on by using our editorial team, independent of our figure agency. Some of our tales include associate links. If you buy something via this type of links, we might also earn an affiliate commission.

128 Shares

Share

Tweet

Share

Save

Comments

Sign In

Let's block commercials! (Why?)

//www.engadget.com/2019/06/20/nasa-jpl-cybersecurity-weaknesses/
2019-06-20 09:01:24Z
CAIiEKvmzk-COeZcrQeNAvJKKG4qGAgEKg8IACoHCAowwOjjAjDp3xswpuqvAw

Share this post