GoKawiil
Tech News
An anonymous security researcher has reconstructed and released a reverse-engineered version of Stuxnet's source code on GitHub, complete with build instructions. Stuxnet was the malware that sabotaged centrifuges at Iran's Natanz nuclear facility by targeting Siemens industrial controllers while masking the damage from plant operators.
A security researcher has released a reverse-engineered reconstruction of Stuxnet, the 2010 worm that sabotaged Siemens industrial control systems used in Iran's uranium enrichment program. The repository rebuilds the malware's loader, privilege-escalation exploit, rootkit drivers, and PLC-tampering payload from previously decompiled binaries, organized for study rather than deployment. Its author frames the project as educational, aimed at malware analysts and defenders rather than as usable attack code.
An opinion piece critiques a recent open letter from over 100 tech firms—including OpenAI, Anthropic, Microsoft and Google—warning that AI will make cyberattacks cheaper and more frequent. The author praises the letter's factual basis, citing a real August incident where federal agencies found AI-generated exploit scripts targeting Siemens industrial controllers, but argues the letter fails to address who is actually responsible for defense. A think tank's counterpoint is cited: criminals adopt new tools mainly when old revenue streams dry up, not simply because new technology exists.
CISA disclosed that hackers breached more than 100 internet-exposed water and wastewater systems across the U.S. during July, expanding the known scope of an ongoing campaign already reported in Michigan, Minnesota and other states. The attackers primarily targeted programmable logic controllers from vendors like Rockwell, Schneider Electric and Siemens, in some cases disabling shutdown alarms and safety processes without alerting operators.