On the exploitation of human and technological vulnerabilities in the nuclear sector: a case study at a research institute

In the current digital era, the exponential adoption of computer systems worldwide has inadvertently escalated the spectrum and intensity of cyber threats. As organizations and individuals become increasingly reliant on technology, the frequency, sophistication, and targeted nature of cyberattacks have surged, posing an accelerating threat to privacy and organizational security. Phishing attacks stand out among these threats due to their deceptive simplicity and challenging detection/prevention mechanisms. Characterized by fraudulent attempts to acquire sensitive information through the guise of trustworthy communications, phishing has emerged as a critical vector for initiating more complex cyber threats. The complexity of modern cyber threats, particularly in the context of phishing, underscores a troubling trend: the increasing specialization of hackers and cybercriminal groups in social engineering tactics to exploit human vulnerabilities. Despite enhanced cybersecurity measures within organizations, phishing remains a significant menace, underscoring the necessity for continuous efforts in education and awareness to bolster defenses against such virtual incursions. This concern is magnified within Brazil's nuclear sector, which is responsible for pivotal roles in energy supply and research. The sector's vulnerability to cyberattacks risks operational integrity, national security, environmental safety, and public health. Recognizing this, Brazil has initiated the development of the cybersecurity standard CNEN NN 2.07, aiming to fortify its nuclear installations against cyber threats. This work addresses the core problem of enhancing cybersecurity in the Brazilian nuclear sector and aims to investigate the interplay of human and technological vulnerabilities within critical infrastructures. This study presents a realistic assessment of potential cybersecurity breaches through a simulated phishing attack on a research institute and an analysis of system vulnerabilities. The research is guided by the hypothesis that attackers could exploit the integrated IT and OT networks within industrial environments, leveraging phishing techniques to gain unauthorized access. The justification for this research is rooted in the global increase in cyberattacks, with Brazil experiencing a significant surge post-pandemic. Given the potential ramifications of successful cyberattacks on critical sectors, this study seeks to contribute to the broader discourse on cybersecurity, specifically within the nuclear domain. By proposing actionable improvements and corrective measures, this research aspires to mitigate similar threats and enhance the overall security posture of targeted organizations. We also aim to employ a methodological approach encompassing a comprehensive literature review and a practical case study, bridging knowledge gaps and offering insights into effective cybersecurity strategies for the nuclear sector. Through this scholarly endeavor, we aim to safeguard critical infrastructure and contribute to global efforts in combating the ever-evolving landscape of cyber threats. (author)