ICS/OT - Security Ticks

Johnson Controls Patches Critical Vulnerability in Industrial Refrigeration Products

ICS, ICS/OT, Johnson Controls / SecurityTicks

Johnson Controls Patches Critical Vulnerability in Industrial Refrigeration Products 20/11/2023 at 17:31 By Eduard Kovacs Johnson Controls has patched a critical vulnerability that can be exploited to take complete control of Frick industrial refrigeration products. The post Johnson Controls Patches Critical Vulnerability in Industrial Refrigeration Products appeared first on SecurityWeek. This article is an excerpt […]

React to this headline:

Johnson Controls Patches Critical Vulnerability in Industrial Refrigeration Products Read More »

22 Energy Firms Hacked in Largest Coordinated Attack on Denmark’s Critical Infrastructure

critical infrastructure, Cyberwarfare, Denmark, Featured, ICS/OT / SecurityTicks

22 Energy Firms Hacked in Largest Coordinated Attack on Denmark’s Critical Infrastructure 14/11/2023 at 15:16 By Ionut Arghire Denmark’s SektorCERT association shares details on a coordinated attack against the country’s energy sector. The post 22 Energy Firms Hacked in Largest Coordinated Attack on Denmark’s Critical Infrastructure appeared first on SecurityWeek. This article is an excerpt

React to this headline:

22 Energy Firms Hacked in Largest Coordinated Attack on Denmark’s Critical Infrastructure Read More »

Russian Hackers Used Novel OT Attack to Disrupt Ukrainian Power Amid Mass Missile Strikes

Cyberwarfare, Featured, ICS, ICS malware, ICS/OT, Malware & Threats, Mandiant, Nation-State, OT, Russia, Sandworm, Ukraine / SecurityTicks

Russian Hackers Used Novel OT Attack to Disrupt Ukrainian Power Amid Mass Missile Strikes 09/11/2023 at 12:16 By Ryan Naraine Mandiant says Russia’s Sandworm hackers used a novel OT attack to cause power outages that coincided with mass missile strikes on critical infrastructure across Ukraine. The post Russian Hackers Used Novel OT Attack to Disrupt

React to this headline:

Russian Hackers Used Novel OT Attack to Disrupt Ukrainian Power Amid Mass Missile Strikes Read More »

Free Tool Helps Industrial Organizations Find OPC UA Vulnerabilities

free tool, ICS, ICS/OT, OPC / SecurityTicks

Free Tool Helps Industrial Organizations Find OPC UA Vulnerabilities 07/11/2023 at 18:04 By Eduard Kovacs A new free tool named OpalOPC helps industrial organizations find OPC UA misconfigurations and vulnerabilities. The post Free Tool Helps Industrial Organizations Find OPC UA Vulnerabilities appeared first on SecurityWeek. This article is an excerpt from SecurityWeek RSS Feed View

React to this headline:

Free Tool Helps Industrial Organizations Find OPC UA Vulnerabilities Read More »

Weapons Systems Provide Valuable Lessons for ICS/OT Security

ICS, ICS/OT, OT / SecurityTicks

Weapons Systems Provide Valuable Lessons for ICS/OT Security 26/10/2023 at 17:46 By SecurityWeek News Cybersecurity techniques and penetration testing used in the field of weapons systems can provide valuable lessons for ICS/OT security. The post Weapons Systems Provide Valuable Lessons for ICS/OT Security appeared first on SecurityWeek. This article is an excerpt from SecurityWeek RSS

React to this headline:

Weapons Systems Provide Valuable Lessons for ICS/OT Security Read More »

Day 3 of SecurityWeek’s 2023 ICS Cybersecurity Conference — Challenges and Solutions

ICS, ICS/OT, OT / SecurityTicks

Day 3 of SecurityWeek’s 2023 ICS Cybersecurity Conference — Challenges and Solutions 26/10/2023 at 17:46 By SecurityWeek News SecurityWeek’s 2023 ICS Cybersecurity Conference continues in Atlanta, with challenges and solutions the focus of Day 3. The post Day 3 of SecurityWeek’s 2023 ICS Cybersecurity Conference — Challenges and Solutions appeared first on SecurityWeek. This article

React to this headline:

Day 3 of SecurityWeek’s 2023 ICS Cybersecurity Conference — Challenges and Solutions Read More »

Mandiant Intelligence Chief Raises Alarm Over China’s ‘Volt Typhoon’ Hackers in US Critical Infrastructure

critical infrastructure, Featured, ICS/OT, Nation-State, Volt Typhoon / SecurityTicks

Mandiant Intelligence Chief Raises Alarm Over China’s ‘Volt Typhoon’ Hackers in US Critical Infrastructure 25/10/2023 at 19:17 By Ryan Naraine Mandiant’s Chief analyst urges critical infrastructure defenders to work on finding and removing traces of Volt Typhoon, a Chinese government-backed hacking team caught in a series of eyebrow-raising attacks against targets in Guam and the

React to this headline:

Mandiant Intelligence Chief Raises Alarm Over China’s ‘Volt Typhoon’ Hackers in US Critical Infrastructure Read More »

New Project Analyzes and Catalogs Vendor Support for Secure PLC Coding

Featured, ICS, ICS/OT, open source, PLC / SecurityTicks

New Project Analyzes and Catalogs Vendor Support for Secure PLC Coding 25/10/2023 at 18:17 By Eduard Kovacs A new project aims to make it easier for PLC programmers to implement secure coding practices by cataloging useful files and functions from each vendor. The post New Project Analyzes and Catalogs Vendor Support for Secure PLC Coding

React to this headline:

New Project Analyzes and Catalogs Vendor Support for Secure PLC Coding Read More »

Critical Infrastructure Stakeholders Gather for Day 2 of SecurityWeek’s 2023 ICS Cybersecurity Conference

Featured, ICS, ICS/OT / SecurityTicks

Critical Infrastructure Stakeholders Gather for Day 2 of SecurityWeek’s 2023 ICS Cybersecurity Conference 25/10/2023 at 16:31 By SecurityWeek News SecurityWeek’s 2023 ICS Cybersecurity Conference continues in Atlanta, as hundreds of industrial cybersecurity stakeholders gather for Day 2 of the annual industrial cybersecurity conference. The post Critical Infrastructure Stakeholders Gather for Day 2 of SecurityWeek’s 2023

React to this headline:

Critical Infrastructure Stakeholders Gather for Day 2 of SecurityWeek’s 2023 ICS Cybersecurity Conference Read More »

Rockwell Automation Warns Customers of Cisco Zero-Day Affecting Stratix Switches

Cisco, ICS, ICS/OT, Rockwell Automation / SecurityTicks

Rockwell Automation Warns Customers of Cisco Zero-Day Affecting Stratix Switches 24/10/2023 at 22:01 By Eduard Kovacs Rockwell Automation has warned customers about the impact of the actively exploited Cisco IOS XE zero-day on its Stratix industrial switches. The post Rockwell Automation Warns Customers of Cisco Zero-Day Affecting Stratix Switches appeared first on SecurityWeek. This article

React to this headline:

Rockwell Automation Warns Customers of Cisco Zero-Day Affecting Stratix Switches Read More »

Rockwell Automation to Acquire ICS/OT Security Firm Verve Industrial

Acquisition, Funding/M&A, ICS, ICS/OT, Industrial, OT, Rockwell Automation / SecurityTicks

Rockwell Automation to Acquire ICS/OT Security Firm Verve Industrial 23/10/2023 at 21:49 By Eduard Kovacs Rockwell Automation agreed to acquire ICS/OT cybersecurity firm Verve Industrial Protection to expand its offerings. The post Rockwell Automation to Acquire ICS/OT Security Firm Verve Industrial appeared first on SecurityWeek. This article is an excerpt from SecurityWeek RSS Feed View

React to this headline:

Rockwell Automation to Acquire ICS/OT Security Firm Verve Industrial Read More »

Critical Vulnerabilities Expose Weintek HMIs to Attacks

HMI, ICS, ICS/OT / SecurityTicks

Critical Vulnerabilities Expose Weintek HMIs to Attacks 17/10/2023 at 16:32 By Eduard Kovacs Weintek has patched critical and high-severity vulnerabilities found in its cMT series HMIs by industrial cybersecurity firm TXOne. The post Critical Vulnerabilities Expose Weintek HMIs to Attacks appeared first on SecurityWeek. This article is an excerpt from SecurityWeek RSS Feed View Original

React to this headline:

Critical Vulnerabilities Expose Weintek HMIs to Attacks Read More »

NSA Publishes ICS/OT Intrusion Detection Signatures and Analytics

ICS, ICS/OT, NSA, OT / SecurityTicks

NSA Publishes ICS/OT Intrusion Detection Signatures and Analytics 17/10/2023 at 14:16 By Ionut Arghire NSA has released Elitewolf, a repository of intrusion detection signatures and analytics for OT environments. The post NSA Publishes ICS/OT Intrusion Detection Signatures and Analytics appeared first on SecurityWeek. This article is an excerpt from SecurityWeek RSS Feed View Original Source

React to this headline:

NSA Publishes ICS/OT Intrusion Detection Signatures and Analytics Read More »

Milesight Industrial Router Vulnerability Possibly Exploited in Attacks

Featured, ICS, ICS/OT / SecurityTicks

Milesight Industrial Router Vulnerability Possibly Exploited in Attacks 16/10/2023 at 15:33 By Eduard Kovacs A vulnerability affecting Milesight industrial routers, tracked as CVE-2023-4326, may have been exploited in attacks. The post Milesight Industrial Router Vulnerability Possibly Exploited in Attacks appeared first on SecurityWeek. This article is an excerpt from SecurityWeek RSS Feed View Original Source

React to this headline:

Milesight Industrial Router Vulnerability Possibly Exploited in Attacks Read More »

Unpatched Vulnerabilities Expose Yifan Industrial Routers to Attacks

ICS, ICS/OT, router, Vulnerabilities, vulnerability / SecurityTicks

Unpatched Vulnerabilities Expose Yifan Industrial Routers to Attacks 12/10/2023 at 14:46 By Eduard Kovacs Industrial routers made by Chinese company Yifan are affected by several critical vulnerabilities that can expose organizations to attacks. The post Unpatched Vulnerabilities Expose Yifan Industrial Routers to Attacks appeared first on SecurityWeek. This article is an excerpt from SecurityWeek RSS

React to this headline:

Unpatched Vulnerabilities Expose Yifan Industrial Routers to Attacks Read More »

Critical SOCKS5 Vulnerability in cURL Puts Enterprise Systems at Risk

Curl, CVE-2023-38545, ICS/OT, libcurl, memory corruption, Supply Chain Security, Vulnerabilities / SecurityTicks

Critical SOCKS5 Vulnerability in cURL Puts Enterprise Systems at Risk 11/10/2023 at 19:01 By Ryan Naraine Flaw poses a direct threat to the SOCKS5 proxy handshake process in cURL and can be exploited remotely in some non-standard configurations. The post Critical SOCKS5 Vulnerability in cURL Puts Enterprise Systems at Risk appeared first on SecurityWeek. This

React to this headline:

Critical SOCKS5 Vulnerability in cURL Puts Enterprise Systems at Risk Read More »

US Government Releases Security Guidance for Open Source Software in OT, ICS

Government, guidance, ICS, ICS/OT, open source, OT, Supply Chain Security / SecurityTicks

US Government Releases Security Guidance for Open Source Software in OT, ICS 11/10/2023 at 17:02 By Ionut Arghire CISA, FBI, NSA, and US Treasury published new guidance on improving the security of open source software in OT and ICS. The post US Government Releases Security Guidance for Open Source Software in OT, ICS appeared first

React to this headline:

US Government Releases Security Guidance for Open Source Software in OT, ICS Read More »

ICS Patch Tuesday: Siemens Ruggedcom Devices Affected by Nozomi Component Flaws

ICS, ICS Patch Tuesday, ICS/OT / SecurityTicks

ICS Patch Tuesday: Siemens Ruggedcom Devices Affected by Nozomi Component Flaws 11/10/2023 at 13:48 By Eduard Kovacs ICS Patch Tuesday: Siemens and Schneider Electric release over a dozen advisories addressing more than 40 vulnerabilities. The post ICS Patch Tuesday: Siemens Ruggedcom Devices Affected by Nozomi Component Flaws appeared first on SecurityWeek. This article is an

React to this headline:

ICS Patch Tuesday: Siemens Ruggedcom Devices Affected by Nozomi Component Flaws Read More »

SecurityWeek to Host 2023 ICS Cybersecurity Conference October 23-26 in Atlanta

ICS/OT / SecurityTicks

SecurityWeek to Host 2023 ICS Cybersecurity Conference October 23-26 in Atlanta 10/10/2023 at 17:02 By Mike Lennon SecurityWeek will host its 2023 Industrial Control Systems (ICS) Cybersecurity Conference from October 23 – 26, 2023 at the InterContinental Atlanta Buckhead. The post SecurityWeek to Host 2023 ICS Cybersecurity Conference October 23-26 in Atlanta appeared first on SecurityWeek. This

React to this headline:

SecurityWeek to Host 2023 ICS Cybersecurity Conference October 23-26 in Atlanta Read More »

BlackBerry to Split Cybersecurity, IoT Business Units

BlackBerry, Cylance, Endpoint Security, ICS/OT, IoT Security / SecurityTicks

BlackBerry to Split Cybersecurity, IoT Business Units 05/10/2023 at 19:02 By Ryan Naraine BlackBerry plans to split its cybersecurity and IOT (Internet of Things) businesses and pursue an IPO for the IOT unit early next year. The post BlackBerry to Split Cybersecurity, IoT Business Units appeared first on SecurityWeek. This article is an excerpt from

React to this headline:

BlackBerry to Split Cybersecurity, IoT Business Units Read More »