'Evil PLC' Attack Could Turn Programmable Logic Controls Into Attack Vectors

Claroty accomplished an Evil PLC using a ZipSlip attack against vendors (Emerson, Ovarro, B&R, GE, and Xinje), heap overflow against Schneider, and a deserialization attack against Rockwell.