DEF CON: Security Holes in Deere, Case IH Shine Spotlight on Agriculture Cyber Risk

Security researchers disclosed multiple serious vulnerabilities and misconfigurations in John Deere and Case IH public-facing systems—ranging from DOM-based XSS and poor access segmentation to a misconfigured Pega CRM (CVE-2021-27653)—that enabled administrative access, exposure of employee/dealer/customer data, and possession of an Okta signing certificate; combined weaknesses could allow remote access or control of farm equipment and pose systemic risks to the agricultural supply chain.