ICS/OT - Security Ticks

Microsoft Discloses Codesys Flaws Allowing Shutdown of Industrial Operations, Spying

ICS, ICS/OT, Microsoft, vulnerability / SecurityTicks

Microsoft Discloses Codesys Flaws Allowing Shutdown of Industrial Operations, Spying 11/08/2023 at 15:16 By Eduard Kovacs Over a dozen Codesys vulnerabilities discovered by Microsoft researchers can be exploited to shut down industrial processes or deploy backdoors. The post Microsoft Discloses Codesys Flaws Allowing Shutdown of Industrial Operations, Spying appeared first on SecurityWeek. This article is […]

React to this headline:

Microsoft Discloses Codesys Flaws Allowing Shutdown of Industrial Operations, Spying Read More »

ICS Patch Tuesday: Siemens Fixes 7 Vulnerabilities in Ruggedcom Products

ICS, ICS Patch Tuesday, ICS/OT / SecurityTicks

ICS Patch Tuesday: Siemens Fixes 7 Vulnerabilities in Ruggedcom Products 08/08/2023 at 16:32 By Eduard Kovacs ICS Patch Tuesday: Siemens releases a dozen advisories covering over 30 vulnerabilities, but Schneider Electric has only published one advisory. The post ICS Patch Tuesday: Siemens Fixes 7 Vulnerabilities in Ruggedcom Products appeared first on SecurityWeek. This article is

React to this headline:

ICS Patch Tuesday: Siemens Fixes 7 Vulnerabilities in Ruggedcom Products Read More »

670 ICS Vulnerabilities Disclosed by CISA in First Half of 2023: Analysis

ICS, ICS/OT, vulnerability / SecurityTicks

670 ICS Vulnerabilities Disclosed by CISA in First Half of 2023: Analysis 03/08/2023 at 19:46 By Eduard Kovacs CISA disclosed 670 ICS vulnerabilities in the first half of 2023, but roughly one-third have no patches or mitigations from the vendor. The post 670 ICS Vulnerabilities Disclosed by CISA in First Half of 2023: Analysis appeared

React to this headline:

670 ICS Vulnerabilities Disclosed by CISA in First Half of 2023: Analysis Read More »

Dozens of RCE Vulnerabilities Impact Milesight Industrial Router

ICS/OT, Industrial, router, Vulnerabilities / SecurityTicks

Dozens of RCE Vulnerabilities Impact Milesight Industrial Router 03/08/2023 at 17:47 By Ionut Arghire Cisco Talos researchers warn of dozens of critical- and high-severity vulnerabilities in the Milesight UR32L industrial router leading to code execution. The post Dozens of RCE Vulnerabilities Impact Milesight Industrial Router appeared first on SecurityWeek. This article is an excerpt from

React to this headline:

Dozens of RCE Vulnerabilities Impact Milesight Industrial Router Read More »

Ransomware Attacks on Industrial Organizations Doubled in Past Year: Report

Featured, ICS, ICS/OT, Ransomware / SecurityTicks

Ransomware Attacks on Industrial Organizations Doubled in Past Year: Report 01/08/2023 at 14:03 By Eduard Kovacs The number of ransomware attacks targeting industrial organizations and infrastructure has doubled since the second quarter of 2022, according to Dragos. The post Ransomware Attacks on Industrial Organizations Doubled in Past Year: Report appeared first on SecurityWeek. This article

React to this headline:

Ransomware Attacks on Industrial Organizations Doubled in Past Year: Report Read More »

Weintek Weincloud Vulnerabilities Allowed Manipulation, Damaging of ICS Devices

ICS, ICS/OT / SecurityTicks

Weintek Weincloud Vulnerabilities Allowed Manipulation, Damaging of ICS Devices 28/07/2023 at 14:16 By Eduard Kovacs Several vulnerabilities found in Weintek Weincloud could have allowed hackers to manipulate and damage ICS, including PLCs and field devices. The post Weintek Weincloud Vulnerabilities Allowed Manipulation, Damaging of ICS Devices appeared first on SecurityWeek. This article is an excerpt

React to this headline:

Weintek Weincloud Vulnerabilities Allowed Manipulation, Damaging of ICS Devices Read More »

Axis Door Controller Vulnerability Exposes Facilities to Physical, Cyber Threats

ICS/OT / SecurityTicks

Axis Door Controller Vulnerability Exposes Facilities to Physical, Cyber Threats 27/07/2023 at 15:47 By Eduard Kovacs An Axis network door controller vulnerability can be exploited to target facilities, exposing them to both physical and cyber threats. The post Axis Door Controller Vulnerability Exposes Facilities to Physical, Cyber Threats appeared first on SecurityWeek. This article is

React to this headline:

Axis Door Controller Vulnerability Exposes Facilities to Physical, Cyber Threats Read More »

Webinar Tomorrow: Exposing Common Myths of OT Cybersecurity

ICS, ICS/OT, SCADA / SecurityTicks

Webinar Tomorrow: Exposing Common Myths of OT Cybersecurity 25/07/2023 at 21:17 By SecurityWeek News Join SecurityWeek and TXOne Networks for this webinar as we expose common misconceptions surrounding the security of Operational Technology (OT) and dive into the evolving threat landscape. The post Webinar Tomorrow: Exposing Common Myths of OT Cybersecurity appeared first on SecurityWeek.

React to this headline:

Webinar Tomorrow: Exposing Common Myths of OT Cybersecurity Read More »

TETRA Radio Standard Vulnerabilities Can Expose Military Comms, Industrial Systems

ICS, ICS/OT, Vulnerabilities, vulnerability / SecurityTicks

TETRA Radio Standard Vulnerabilities Can Expose Military Comms, Industrial Systems 25/07/2023 at 19:32 By Kevin Townsend TETRA:BURST – vulnerabilities in widely used radio standard could threaten military and law enforcement communications, as well as ICS. The post TETRA Radio Standard Vulnerabilities Can Expose Military Comms, Industrial Systems appeared first on SecurityWeek. This article is an

React to this headline:

TETRA Radio Standard Vulnerabilities Can Expose Military Comms, Industrial Systems Read More »

In Other News: Military Emails Leaked, Google Restricts Internet Access, Chinese Spyware

email security, ICS/OT, In Other News, Malware & Threats / SecurityTicks

In Other News: Military Emails Leaked, Google Restricts Internet Access, Chinese Spyware 21/07/2023 at 18:03 By Eduard Kovacs Weekly cybersecurity news roundup that provides a summary of noteworthy stories that might have slipped under the radar for the week of July 17, 2023. The post In Other News: Military Emails Leaked, Google Restricts Internet Access,

React to this headline:

In Other News: Military Emails Leaked, Google Restricts Internet Access, Chinese Spyware Read More »

Recently Patched GE Cimplicity Vulnerabilities Reminiscent of Russian ICS Attacks

GE, ICS, ICS/OT, SCADA / SecurityTicks

Recently Patched GE Cimplicity Vulnerabilities Reminiscent of Russian ICS Attacks 19/07/2023 at 16:52 By Eduard Kovacs Over a dozen vulnerabilities patched by GE in its Cimplicity HMI/SCADA product are reminiscent of ICS attacks conducted by the Russian Sandworm group. The post Recently Patched GE Cimplicity Vulnerabilities Reminiscent of Russian ICS Attacks appeared first on SecurityWeek.

React to this headline:

Recently Patched GE Cimplicity Vulnerabilities Reminiscent of Russian ICS Attacks Read More »

Honeywell DCS Platform Vulnerabilities Can Facilitate Attacks on Industrial Organizations

ICS/OT / SecurityTicks

Honeywell DCS Platform Vulnerabilities Can Facilitate Attacks on Industrial Organizations 13/07/2023 at 19:31 By Eduard Kovacs Cybersecurity company Armis has identified several vulnerabilities in Honeywell ICS products that could expose industrial organizations to attacks. The post Honeywell DCS Platform Vulnerabilities Can Facilitate Attacks on Industrial Organizations appeared first on SecurityWeek. This article is an excerpt

React to this headline:

Honeywell DCS Platform Vulnerabilities Can Facilitate Attacks on Industrial Organizations Read More »

APT Exploit Targeting Rockwell Automation Flaws Could Threaten Critical Infrastructure

exploit, Featured, ICS, ICS/OT, Malware & Threats, Rockwell Automation, Vulnerabilities / SecurityTicks

APT Exploit Targeting Rockwell Automation Flaws Could Threaten Critical Infrastructure 13/07/2023 at 13:32 By Eduard Kovacs Two Rockwell Automation product vulnerabilities have been used for a new exploit by an APT group that could use it to target critical infrastructure. The post APT Exploit Targeting Rockwell Automation Flaws Could Threaten Critical Infrastructure appeared first on

React to this headline:

APT Exploit Targeting Rockwell Automation Flaws Could Threaten Critical Infrastructure Read More »

ICS Patch Tuesday: Siemens, Schneider Electric Fix 50 Vulnerabilities

ICS/OT / SecurityTicks

ICS Patch Tuesday: Siemens, Schneider Electric Fix 50 Vulnerabilities 11/07/2023 at 19:04 By Eduard Kovacs ICS Patch Tuesday: Siemens and Schneider Electric release nine new security advisories and fix 50 vulnerabilities in their industrial products. The post ICS Patch Tuesday: Siemens, Schneider Electric Fix 50 Vulnerabilities appeared first on SecurityWeek. This article is an excerpt

React to this headline:

ICS Patch Tuesday: Siemens, Schneider Electric Fix 50 Vulnerabilities Read More »

Honeywell Boosting OT Cybersecurity Offering With Acquisition of SCADAfence

Acquisition, Funding/M&A, Honeywell, ICS/OT, OT, SCADA / SecurityTicks

Honeywell Boosting OT Cybersecurity Offering With Acquisition of SCADAfence 10/07/2023 at 17:17 By Eduard Kovacs Industrial giant Honeywell wants to extend its OT cybersecurity portfolio with the acquisition of Israel-based OT/IoT security firm SCADAfence. The post Honeywell Boosting OT Cybersecurity Offering With Acquisition of SCADAfence appeared first on SecurityWeek. This article is an excerpt from

React to this headline:

Honeywell Boosting OT Cybersecurity Offering With Acquisition of SCADAfence Read More »

Vulnerabilities in PiiGAB Product Could Expose Industrial Organizations to Attacks

ICS/OT / SecurityTicks

Vulnerabilities in PiiGAB Product Could Expose Industrial Organizations to Attacks 07/07/2023 at 16:31 By Eduard Kovacs Potentially serious vulnerabilities discovered by researchers in a PiiGAB product could expose industrial organizations to remote hacker attacks. The post Vulnerabilities in PiiGAB Product Could Expose Industrial Organizations to Attacks appeared first on SecurityWeek. This article is an excerpt

React to this headline:

Vulnerabilities in PiiGAB Product Could Expose Industrial Organizations to Attacks Read More »

Security Firm Finds Over 130k Internet-Exposed Photovoltaic Diagnostics Systems

exposed, ICS/OT / SecurityTicks

Security Firm Finds Over 130k Internet-Exposed Photovoltaic Diagnostics Systems 07/07/2023 at 16:31 By Ionut Arghire Cyble has discovered more than 130,000 Photovoltaic monitoring and diagnostic solutions exposed to the internet. The post Security Firm Finds Over 130k Internet-Exposed Photovoltaic Diagnostics Systems appeared first on SecurityWeek. This article is an excerpt from SecurityWeek RSS Feed View

React to this headline:

Security Firm Finds Over 130k Internet-Exposed Photovoltaic Diagnostics Systems Read More »

Exploited Solar Power Product Vulnerability Could Expose Energy Organizations to Attacks

ICS/OT, Vulnerabilities / SecurityTicks

Exploited Solar Power Product Vulnerability Could Expose Energy Organizations to Attacks 05/07/2023 at 17:02 By Eduard Kovacs An actively exploited vulnerability in the Contec SolarView solar power monitoring product can expose hundreds of energy organizations to attacks. The post Exploited Solar Power Product Vulnerability Could Expose Energy Organizations to Attacks appeared first on SecurityWeek. This

React to this headline:

Exploited Solar Power Product Vulnerability Could Expose Energy Organizations to Attacks Read More »

In Other News: Hospital Infected via USB Drive, EU Cybersecurity Rules, Free Security Tools

Government, ICS/OT, In Other News, Vulnerabilities / SecurityTicks

In Other News: Hospital Infected via USB Drive, EU Cybersecurity Rules, Free Security Tools 30/06/2023 at 17:46 By SecurityWeek News Weekly cybersecurity news roundup that provides a summary of noteworthy stories that might have slipped under the radar for the week of June 26, 2023. The post In Other News: Hospital Infected via USB Drive,

React to this headline:

In Other News: Hospital Infected via USB Drive, EU Cybersecurity Rules, Free Security Tools Read More »

DOE CIO Talks to SecurityWeek About Cybersecurity, Digital Transformation

digital transformation, Government, ICS/OT / SecurityTicks

DOE CIO Talks to SecurityWeek About Cybersecurity, Digital Transformation 29/06/2023 at 16:47 By Kevin Townsend SecurityWeek talks to Ann Dunkin, CIO at the Department of Energy, about cybersecurity and digital transformation. The post DOE CIO Talks to SecurityWeek About Cybersecurity, Digital Transformation appeared first on SecurityWeek. This article is an excerpt from SecurityWeek RSS Feed

React to this headline:

DOE CIO Talks to SecurityWeek About Cybersecurity, Digital Transformation Read More »