ICS - Security Ticks

Critical Flaw in PTC License Server Can Allow Lateral Movement in Industrial Organizations

ICS, ICS/OT, PTC, vulnerability / SecurityTicks

Critical Flaw in PTC License Server Can Allow Lateral Movement in Industrial Organizations 2024-07-02 at 12:16 By Eduard Kovacs PTC has patched a critical vulnerability in the Creo Elements/Direct License Server that can be exploited for unauthenticated command execution. The post Critical Flaw in PTC License Server Can Allow Lateral Movement in Industrial Organizations appeared […]

React to this headline:

Critical Flaw in PTC License Server Can Allow Lateral Movement in Industrial Organizations Read More »

Gas Chromatograph Hacking Could Have Serious Impact: Security Firm

Emerson, ICS, ICS/OT / SecurityTicks

Gas Chromatograph Hacking Could Have Serious Impact: Security Firm 2024-06-27 at 15:36 By Eduard Kovacs Critical vulnerabilities have been found in an Emerson gas chromatograph and Claroty warns that attacks could have a serious impact. The post Gas Chromatograph Hacking Could Have Serious Impact: Security Firm appeared first on SecurityWeek. This article is an excerpt

React to this headline:

Gas Chromatograph Hacking Could Have Serious Impact: Security Firm Read More »

Siemens Sicam Vulnerabilities Could Facilitate Attacks on Energy Sector

energy, ICS, ICS/OT, Siemens, vulnerability / SecurityTicks

Siemens Sicam Vulnerabilities Could Facilitate Attacks on Energy Sector 2024-06-26 at 13:01 By Eduard Kovacs Several vulnerabilities patched recently in Siemens Sicam products could be exploited in attacks aimed at the energy sector. The post Siemens Sicam Vulnerabilities Could Facilitate Attacks on Energy Sector appeared first on SecurityWeek. This article is an excerpt from SecurityWeek

React to this headline:

Siemens Sicam Vulnerabilities Could Facilitate Attacks on Energy Sector Read More »

CISA Warns of PoC Exploit for Vulnerability in RAD SecFlow-2 Industrial Switch

ICS, ICS/OT / SecurityTicks

CISA Warns of PoC Exploit for Vulnerability in RAD SecFlow-2 Industrial Switch 2024-06-19 at 14:31 By Eduard Kovacs CISA has notified RAD after finding a PoC exploit targeting a high-severity vulnerability in an outdated industrial switch. The post CISA Warns of PoC Exploit for Vulnerability in RAD SecFlow-2 Industrial Switch appeared first on SecurityWeek. This

React to this headline:

CISA Warns of PoC Exploit for Vulnerability in RAD SecFlow-2 Industrial Switch Read More »

Rockwell Automation Patches High-Severity Vulnerabilities in FactoryTalk View SE

ICS, ICS/OT, Rockwell Automation, Vulnerabilities, vulnerability / SecurityTicks

Rockwell Automation Patches High-Severity Vulnerabilities in FactoryTalk View SE 2024-06-14 at 13:46 By Eduard Kovacs Rockwell Automation has patched three high-severity vulnerabilities in its FactoryTalk View SE HMI software. The post Rockwell Automation Patches High-Severity Vulnerabilities in FactoryTalk View SE appeared first on SecurityWeek. This article is an excerpt from SecurityWeek RSS Feed View Original

React to this headline:

Rockwell Automation Patches High-Severity Vulnerabilities in FactoryTalk View SE Read More »

ICS Patch Tuesday: Advisories Published by Siemens, Schneider Electric, Aveva, CISA

ICS, ICS Patch Tuesday, ICS/OT / SecurityTicks

ICS Patch Tuesday: Advisories Published by Siemens, Schneider Electric, Aveva, CISA 2024-06-12 at 12:16 By Eduard Kovacs Several ICS vendors released advisories on Tuesday to inform customers about vulnerabilities found in their industrial and OT products. The post ICS Patch Tuesday: Advisories Published by Siemens, Schneider Electric, Aveva, CISA appeared first on SecurityWeek. This article

React to this headline:

ICS Patch Tuesday: Advisories Published by Siemens, Schneider Electric, Aveva, CISA Read More »

Xona Raises $18 Million for OT Remote Access Platform

Cybersecurity Funding, funding, ICS, ICS/OT, Identity & Access, OT, remote access / SecurityTicks

Xona Raises $18 Million for OT Remote Access Platform 2024-06-11 at 13:16 By Eduard Kovacs OT zero trust user access platform provider Xona has raised $18 million, which brings its total investment to $32 million. The post Xona Raises $18 Million for OT Remote Access Platform appeared first on SecurityWeek. This article is an excerpt

React to this headline:

Xona Raises $18 Million for OT Remote Access Platform Read More »

Cisco Finds 15 Vulnerabilities in AutomationDirect PLCs

ICS, ICS/OT, SCADA / SecurityTicks

Cisco Finds 15 Vulnerabilities in AutomationDirect PLCs 2024-06-10 at 14:46 By Eduard Kovacs Cisco Talos researchers have found over a dozen vulnerabilities in AutomationDirect PLCs, including flaws that could be valuable to attackers. The post Cisco Finds 15 Vulnerabilities in AutomationDirect PLCs appeared first on SecurityWeek. This article is an excerpt from SecurityWeek RSS Feed

React to this headline:

Cisco Finds 15 Vulnerabilities in AutomationDirect PLCs Read More »

Rockwell Automation Urges Customers to Disconnect ICS From Internet

ICS, ICS/OT, Rockwell Automation / SecurityTicks

Rockwell Automation Urges Customers to Disconnect ICS From Internet 2024-05-22 at 17:02 By Eduard Kovacs Rockwell Automation is concerned about internet-exposed ICS due to heightened geopolitical tensions and adversarial cyber activity globally. The post Rockwell Automation Urges Customers to Disconnect ICS From Internet appeared first on SecurityWeek. This article is an excerpt from SecurityWeek RSS

React to this headline:

Rockwell Automation Urges Customers to Disconnect ICS From Internet Read More »

Critical Vulnerability in Honeywell Virtual Controller Allows Remote Code Execution

Honeywell, ICS, ICS/OT, vulnerability / SecurityTicks

Critical Vulnerability in Honeywell Virtual Controller Allows Remote Code Execution 2024-05-22 at 14:46 By Eduard Kovacs Claroty shows how Honeywell ControlEdge Virtual UOC vulnerability can be exploited for unauthenticated remote code execution. The post Critical Vulnerability in Honeywell Virtual Controller Allows Remote Code Execution appeared first on SecurityWeek. This article is an excerpt from SecurityWeek

React to this headline:

Critical Vulnerability in Honeywell Virtual Controller Allows Remote Code Execution Read More »

ICS Patch Tuesday: Advisories Published by Siemens, Rockwell, Mitsubishi Electric

ICS, ICS Patch Tuesday, ICS/OT / SecurityTicks

ICS Patch Tuesday: Advisories Published by Siemens, Rockwell, Mitsubishi Electric 2024-05-15 at 13:31 By Eduard Kovacs Several ICS vendors released advisories on Tuesday to inform customers about vulnerabilities found in their products. The post ICS Patch Tuesday: Advisories Published by Siemens, Rockwell, Mitsubishi Electric appeared first on SecurityWeek. This article is an excerpt from SecurityWeek

React to this headline:

ICS Patch Tuesday: Advisories Published by Siemens, Rockwell, Mitsubishi Electric Read More »

Russian Hackers Target Industrial Systems in North America, Europe

CISA, ICS, ICS/OT, Russia / SecurityTicks

Russian Hackers Target Industrial Systems in North America, Europe 2024-05-02 at 15:16 By Eduard Kovacs Government agencies are sharing recommendations following attacks claimed by pro-Russian hacktivists on ICS/OT systems. The post Russian Hackers Target Industrial Systems in North America, Europe appeared first on SecurityWeek. This article is an excerpt from SecurityWeek RSS Feed View Original

React to this headline:

Russian Hackers Target Industrial Systems in North America, Europe Read More »

Honeywell: USB Malware Attacks on Industrial Orgs Becoming More Sophisticated

Honeywell, ICS, ICS/OT, report / SecurityTicks

Honeywell: USB Malware Attacks on Industrial Orgs Becoming More Sophisticated 2024-04-29 at 17:01 By Eduard Kovacs An analysis conducted by Honeywell shows that much of the USB-borne malware targeting industrial organizations can still cause OT disruption. The post Honeywell: USB Malware Attacks on Industrial Orgs Becoming More Sophisticated appeared first on SecurityWeek. This article is

React to this headline:

Honeywell: USB Malware Attacks on Industrial Orgs Becoming More Sophisticated Read More »

Siemens Industrial Product Impacted by Exploited Palo Alto Firewall Vulnerability

ICS, ICS/OT, Palo Alto Networks, Siemens, Vulnerabilities / SecurityTicks

Siemens Industrial Product Impacted by Exploited Palo Alto Firewall Vulnerability 2024-04-23 at 14:02 By Eduard Kovacs Palo Alto Networks firewall vulnerability CVE-2024-3400, exploited as a zero-day, impacts a Siemens industrial product. The post Siemens Industrial Product Impacted by Exploited Palo Alto Firewall Vulnerability appeared first on SecurityWeek. This article is an excerpt from SecurityWeek RSS

React to this headline:

Siemens Industrial Product Impacted by Exploited Palo Alto Firewall Vulnerability Read More »

Organizations Informed of 10 Vulnerabilities in Rockwell Automation Products

ICS, ICS/OT, Rockwell Automation / SecurityTicks

Organizations Informed of 10 Vulnerabilities in Rockwell Automation Products 2024-03-27 at 15:01 By Eduard Kovacs In the past week Rockwell Automation addressed 10 vulnerabilities found in its FactoryTalk, PowerFlex and Arena Simulation products. The post Organizations Informed of 10 Vulnerabilities in Rockwell Automation Products appeared first on SecurityWeek. This article is an excerpt from SecurityWeek

React to this headline:

Organizations Informed of 10 Vulnerabilities in Rockwell Automation Products Read More »

Suspicious NuGet Package Harvesting Information From Industrial Systems

ICS, ICS malware, Malware, Malware & Threats / SecurityTicks

Suspicious NuGet Package Harvesting Information From Industrial Systems 2024-03-26 at 17:01 By Ionut Arghire A suspicious NuGet package likely targets developers working with technology from Chinese firm Bozhon. The post Suspicious NuGet Package Harvesting Information From Industrial Systems appeared first on SecurityWeek. This article is an excerpt from SecurityWeek RSS Feed View Original Source React

React to this headline:

Suspicious NuGet Package Harvesting Information From Industrial Systems Read More »

UK Government Releases Cloud SCADA Security Guidance

guidance, ICS, ICS/OT, SCADA / SecurityTicks

UK Government Releases Cloud SCADA Security Guidance 2024-03-19 at 01:02 By Eduard Kovacs UK’s NCSC releases security guidance for OT organizations considering migrating their SCADA solutions to the cloud. The post UK Government Releases Cloud SCADA Security Guidance appeared first on SecurityWeek. This article is an excerpt from SecurityWeek RSS Feed View Original Source React

React to this headline:

UK Government Releases Cloud SCADA Security Guidance Read More »

ICS Patch Tuesday: Siemens Ruggedcom Devices Impacted by 45 Fortinet Vulnerabilities

ICS, ICS Patch Tuesday, ICS/OT / SecurityTicks

ICS Patch Tuesday: Siemens Ruggedcom Devices Impacted by 45 Fortinet Vulnerabilities 2024-03-12 at 18:03 By Eduard Kovacs Siemens and Schneider Electric publish March 2024 Patch Tuesday advisories to inform customers about over 200 vulnerabilities. The post ICS Patch Tuesday: Siemens Ruggedcom Devices Impacted by 45 Fortinet Vulnerabilities appeared first on SecurityWeek. This article is an

React to this headline:

ICS Patch Tuesday: Siemens Ruggedcom Devices Impacted by 45 Fortinet Vulnerabilities Read More »

CISA’s OT Attack Response Team Understaffed: GAO

CISA, cyber workforce, Government, ICS, Incident Response / SecurityTicks

CISA’s OT Attack Response Team Understaffed: GAO 2024-03-12 at 15:46 By Eduard Kovacs GAO study finds that CISA does not have enough staff to respond to significant OT attacks in multiple locations at the same time. The post CISA’s OT Attack Response Team Understaffed: GAO appeared first on SecurityWeek. This article is an excerpt from

React to this headline:

CISA’s OT Attack Response Team Understaffed: GAO Read More »

Cisco Releases Open Source Backplane Traffic Visibility Tool for OT

Cisco, ICS, ICS/OT, Network Security, open source / SecurityTicks

Cisco Releases Open Source Backplane Traffic Visibility Tool for OT 2024-03-06 at 17:36 By Eduard Kovacs Cisco has released an open source PoC tool named Badgerboard designed for improved backplane network visibility for OT. The post Cisco Releases Open Source Backplane Traffic Visibility Tool for OT appeared first on SecurityWeek. This article is an excerpt

React to this headline:

Cisco Releases Open Source Backplane Traffic Visibility Tool for OT Read More »