6Pages Market Shifts

3 Shifts (Feb 12 2021): Global chip shortage, Water-facility hack via remote desktop, Archer-United’s $1B air taxi deal

6Pages

(1) The global chip shortage is putting billions of dollars at risk across industries (0:37). (2) Water-facility hack exposes flaws in remote-desktop software & industrial control systems (6:33). (3) Air-taxi startup Archer goes public & signs $1B deal with United (10:16). Read this 3 Shifts Edition:  https://6pag.es/qf9hb. Sign up to receive free summaries of our deeply researched briefs: 6Pages.com.

Hello and welcome to this week’s 3 Shifts Edition by 6Pages, the source for far-reaching market shifts and what they mean. It’s 2/12/2021. I’m Eric Thompson, and here are the 3 shifts that you need to know this week:

  1. The global chip shortage is putting billions of dollars at risk across industries
  2. Water-facility hack exposes flaws in remote-desktop software & industrial control systems
  3. Air-taxi startup Archer goes public & signs $1B deal with United


1. The global chip shortage is putting billions of dollars at risk across industries


Related Content:

  • Jun 26 2020 (3 Shifts): Apple reinforces its walled garden with Apple Silicon chips in Macs
  • Apr 4 2020 (Brief #28): Global supply chains diversify away from China


2. Water-facility hack exposes flaws in remote-desktop software & industrial control systems

  • Last week, a water-treatment facility in Florida supplying water to 15,000 people was hacked through remote-desktop software TeamViewer. TeamViewer is designed to let enterprise users and engineers remotely access, support, repair or control connected devices (e.g. computers, phones, industrial machines). The plant had actually changed software vendors but had not removed TeamViewer from its network. In the incident, the hacker used TeamViewer to remotely access a computer in the plant two separate times and increase the amount of sodium hydroxide (lye) in the water by 111X to dangerous levels. An operator saw the hacker control the mouse in real time and make the changes on the computer screen. The operator immediately reverted the changes so no harm was done. (Other safeguards were also in place to alert operators of issues).
  • TeamViewer is widely used by organizations – serving 200M+ users and 2.5B connected devices across 200 countries. The company has benefited from stay-at-home measures during the pandemic, with sales growing 44% in 2020 to $557M+ and expected growth of 30% in 2021. Following the hack, the FBI issued a Private Industry Notification (PIN), which named TeamViewer as an application enterprises need to be aware of. While the PIN was not highly critical of TeamViewer, the FBI called it “functionally similar to Remote Access Trojans (RATs)" in its ability to control the desktop and insert files onto a computer.
  • TeamViewer became “almost ubiquitous” in industrial control system (ICS) environments during the pandemic. Most drinking-water systems, for instance, are underfunded and unattended and use a remote-access system like TeamViewer for monitoring. Cybersecurity experts have since spoken out against TeamViewer for its insufficient security measures – allowing full control of critical resources with just a password. Insecure implementations of TeamViewer have become a meme in some parts of the cybersecurity community.
  • Even before the pandemic, operational technology (OT) that controls industrial equipment was a major cybersecurity vulnerability. Legacy industrial systems that control critical infrastructure such as public utilities have increasingly become connected to the internet with relatively few protections in place. ICS often uses open communication protocols that allow software like TeamViewer to operate across systems unhindered by gateways or air gaps, meaning that a cybersecurity intrusion within one part of the system (e.g. TeamViewer) could cascade into others.
  • One recurring theme of cyberattacks is how often people and processes are among the main sources of vulnerability. In this case, the intrusion appears to have taken place through access to password credentials – perhaps through weak passwords, password-sharing, and/or lack of controls such as mandatory password changes. And the remote-work boom has only made things worse – a Fortinet cybersecurity report found that 92% of organizations had at least one OT-system intrusion in 2020.

Related Content:

  • Dec 4 2020 (3 Shifts): Advances in remote customer service – from cloud-based contact centers to chatbots
  • Jul 24 2020 (3 Shifts): APIs, antitrust & entrants – The latest in the collaboration race 


3. Air-taxi startup Archer goes public & signs $1B deal with United

Related Content:

  • Jan 7 2021 (Brief #40): Breaking down the EV barriers – Vehicle range, price, charging infrastructure
  • Apr 28 2020 (Brief #31): Robotaxis, local delivery & the future of driverless ground vehicles

That’s it for this week’s 3 Shifts Edition. If you’d like to read more content and you’re not already subscribed, head to 6Pages.com to sign up for free summaries of our deeply researched briefs and the 3 Shifts Edition straight to your inbox. Keep an eye out for our upcoming brief on private 5G networks. And talk to you again on next week’s 3 Shifts Edition!