Many critical pieces of industrial infrastructure, including natural gas pipeline systems, connect to monitoring systems using encrypted software called OpenSSL, which researchers have determined is vulnerable to security breaches from the Heartbleed bug.
The Puget Sound Business Journal reports that reliance on legacy systems, such as old versions of Microsoft Windows, makes the infrastructure networks vulnerable, especially if they cannot be updated to new operating systems and software.
Bloomberg reported that most large websites have already implemented a fix. Two-thirds of the world’s Internet sites use the open-source software. However, Bloomberg’s Jordan Robertson expressed concern about the length of time that the virus has been active.
“The fact that this flaw has been around for two years raises some really interesting questions about who knew about it before,” he said. The likelihood that intelligence agencies, such as the National Security Agency, were unaware of the bug, is small, he said.
In his blog, Steve Rosenbush of the Wall Street Journal quoted security expert Bruce Schneier describing Heartbleed as “catastrophic.” Said Schneier: “At this point, the odds are close to one that every target has had its private keys extracted by multiple intelligence agencies.”
Recommended Reading
Targa to Proceed with Permian Basin Apex Pipeline After All
2024-05-02 - Targa Resources expects to take a final investment decision for the Apex pipeline out of the Permian Basin before the end of the year.
US Appeals Court Upholds FERC Approvals for Gas Pipeline Expansion
2024-05-02 - A unanimous three-judge panel of the U.S. Circuit Court of Appeals for the D.C. Circuit held that the Federal Energy Regulatory Commission was right to determine the Evangeline Pass Expansion project is functionally separate from four related gas infrastructure developments.
Enterprise Targets FID for SPOT Project by End of 2024
2024-05-01 - Enterprise Products Partners’ co-CEO disputed capex figures reported in the media regarding its Sea Port Oil Export Terminal.
US Reforms Green Law to Speed Clean Energy, Infrastructure Permits
2024-04-30 - The reforms are the second and final phase of adjustments to the National Environmental Policy Act, or NEPA, by the Biden administration.
Canadian Railway Companies Brace for Strike
2024-04-25 - A service disruption caused by a strike in May could delay freight deliveries of petrochemicals.