A vulnerability found in utility control software is raising serious questions over municipal security. The issue, revealed Wednesday morning, could have let attackers take control of water treatment plants, natural gas lines and potentially even nuclear power plant equipment. Security firm Core Security Technologies discovered the problem and says it notified the system manufacturer five months ago — yet the flaw was not fixed until last week. The systems in question, created by Citect, allow remote management of machinery at various plants.
