After the start of the CBO, some foreign information security experts began violating industry ethics in relation to Russia. This was expressed in an interview with socialbites.ca by Vladimir Dashchenko, an expert at Kaspersky Lab who studies cyber threats in industrial security.
Dashchenko said he knew of at least one such case. A Spanish information security researcher found a vulnerability in the software of Russian elevator controllers after the start of the CBO and did not contact the manufacturer to give him the time and opportunity to fix the problem. Instead, the foreign expert promptly published information about the vulnerability, exposing the Russian company to various cyber threats.
“I found a vulnerability! Russia! Breaking!” Of course it’s brutal – no one does that. Wherever and whatever, you must always remain a professional,” said Dashchenko.
According to him, after that, external network connections to the systems of the Russian company began to be observed. That is, attackers reading a foreign expert’s report can actually start hacking things.
Dashchenko noted that the behavior of the Spanish specialist grossly violated the principles of responsible disclosure of information about security vulnerabilities. According to these rules, any cyber expert who discovers a vulnerability in someone else’s system must report the problem to the developer of that system, give him time to fix it, and only then publish a report.
“Often companies are given 90 days to patch a vulnerability. If the producer fails to do so for various reasons, the researcher can make the information public,” the expert explained.
Dashchenko added that disregarding such ethical principles puts the reputations and careers of cyber experts at risk.
For more information on the relationship between Russia and other countries in the field of cybersecurity after the start of the NWO, see. report socialbites.ca is with Vladimir Dashchenko.