Your industrial IoT gateway isnt exposed to the internet, right? RIGHT?! Unknown criminals are exploiting a maximum severity vulnerability in Node RED, a flow based programming tool that is widely used in critical infrastructure, to deploy a flow that downloads and runs a Linux bot. Node RED is commonly used for workflow automation in industrial control systems ICS and operational technology OT environments. Its built on top of Node.js and is used in commercial products including Siemens...
