The Agricultural Data Arms Race: Exploiting a Tractor Load of Vulns
Sick Codes discloses critical vulnerabilities across the American agricultural supply chain, hacking smart tractors, farm telemetry APIs, and grain logistics systems.
Summary
The Cyber Fragility of the American Food Supply Chain
Modern industrial agriculture relies heavily on precision telemetry, cloud-managed tractor fleets, and interconnected grain distribution systems vulnerable to cyber disruptions.
Auditing Smart Tractor Fleets and Telemetry Portals
Sick Codes leads an ad-hoc research group investigating smart tractor manufacturers, uncovering exposed administrative portals, hardcoded credentials, and insecure APIs.
Chaining Exploits from Soil Sensors to Supply Chain Logistics
Combining web vulnerabilities and embedded telematics exploits allowed the team to compromise farm management networks, manipulate agricultural telemetry, and control machinery remotely.
Coordinated Disclosure and Food Security Governance
The author reviews the high-stakes vulnerability disclosure process with agricultural equipment manufacturers, urging national security stakeholders to protect the food supply.
Related talks
Main Stage·44 min
Chanin Kim · Myounghun Pak
Vulnerability analysis and exploit chains targeting Network Video Recorders from Hikvision, Dahua, and Synology Surveillance Station.
Main Stage·31 min
Shlomi Oberman · Moshe Kol · Ariel Schön
JSOF researchers answer audience questions regarding Ripple20 embedded TCP/IP flaws, multi-vendor disclosure challenges, and IoT patching.
Eye on Tech·24 min
Security researchers examine technical aspects of Enterprise Apps Unpacked: Lessons From IoT Supply Chain Wins.