Two researchers say the security of industrial control systems is less secure than ever before. More than 20 percent of the 147 issues could be used to either directly misinform an ICS operator or influence some sort of industrial process. Nearly half of the mobile apps had insecure storage issues or data leakage, they found. The most common mistake was the complete lack of passwords to protect the HMI [human machine interface] project and panel data configuration, the paper says. The research paper from IOActive and Embedi says the growth of “everything is connected” has not led to improved security for mobile SCADA applications.”]
Source: https://www.cuinfosecurity.com/rising-attack-vector-for-industrial-iot-smartphone-apps-a-10580