ICS - Security Ticks

Siemens Industrial Product Impacted by Exploited Palo Alto Firewall Vulnerability

ICS, ICS/OT, Palo Alto Networks, Siemens, Vulnerabilities / SecurityTicks

Siemens Industrial Product Impacted by Exploited Palo Alto Firewall Vulnerability 2024-04-23 at 14:02 By Eduard Kovacs Palo Alto Networks firewall vulnerability CVE-2024-3400, exploited as a zero-day, impacts a Siemens industrial product. The post Siemens Industrial Product Impacted by Exploited Palo Alto Firewall Vulnerability appeared first on SecurityWeek. This article is an excerpt from SecurityWeek RSS […]

React to this headline:

Siemens Industrial Product Impacted by Exploited Palo Alto Firewall Vulnerability Read More »

Organizations Informed of 10 Vulnerabilities in Rockwell Automation Products

ICS, ICS/OT, Rockwell Automation / SecurityTicks

Organizations Informed of 10 Vulnerabilities in Rockwell Automation Products 2024-03-27 at 15:01 By Eduard Kovacs In the past week Rockwell Automation addressed 10 vulnerabilities found in its FactoryTalk, PowerFlex and Arena Simulation products. The post Organizations Informed of 10 Vulnerabilities in Rockwell Automation Products appeared first on SecurityWeek. This article is an excerpt from SecurityWeek

React to this headline:

Organizations Informed of 10 Vulnerabilities in Rockwell Automation Products Read More »

Suspicious NuGet Package Harvesting Information From Industrial Systems

ICS, ICS malware, Malware, Malware & Threats / SecurityTicks

Suspicious NuGet Package Harvesting Information From Industrial Systems 2024-03-26 at 17:01 By Ionut Arghire A suspicious NuGet package likely targets developers working with technology from Chinese firm Bozhon. The post Suspicious NuGet Package Harvesting Information From Industrial Systems appeared first on SecurityWeek. This article is an excerpt from SecurityWeek RSS Feed View Original Source React

React to this headline:

Suspicious NuGet Package Harvesting Information From Industrial Systems Read More »

UK Government Releases Cloud SCADA Security Guidance

guidance, ICS, ICS/OT, SCADA / SecurityTicks

UK Government Releases Cloud SCADA Security Guidance 2024-03-19 at 01:02 By Eduard Kovacs UK’s NCSC releases security guidance for OT organizations considering migrating their SCADA solutions to the cloud. The post UK Government Releases Cloud SCADA Security Guidance appeared first on SecurityWeek. This article is an excerpt from SecurityWeek RSS Feed View Original Source React

React to this headline:

UK Government Releases Cloud SCADA Security Guidance Read More »

ICS Patch Tuesday: Siemens Ruggedcom Devices Impacted by 45 Fortinet Vulnerabilities

ICS, ICS Patch Tuesday, ICS/OT / SecurityTicks

ICS Patch Tuesday: Siemens Ruggedcom Devices Impacted by 45 Fortinet Vulnerabilities 2024-03-12 at 18:03 By Eduard Kovacs Siemens and Schneider Electric publish March 2024 Patch Tuesday advisories to inform customers about over 200 vulnerabilities. The post ICS Patch Tuesday: Siemens Ruggedcom Devices Impacted by 45 Fortinet Vulnerabilities appeared first on SecurityWeek. This article is an

React to this headline:

ICS Patch Tuesday: Siemens Ruggedcom Devices Impacted by 45 Fortinet Vulnerabilities Read More »

CISA’s OT Attack Response Team Understaffed: GAO

CISA, cyber workforce, Government, ICS, Incident Response / SecurityTicks

CISA’s OT Attack Response Team Understaffed: GAO 2024-03-12 at 15:46 By Eduard Kovacs GAO study finds that CISA does not have enough staff to respond to significant OT attacks in multiple locations at the same time. The post CISA’s OT Attack Response Team Understaffed: GAO appeared first on SecurityWeek. This article is an excerpt from

React to this headline:

CISA’s OT Attack Response Team Understaffed: GAO Read More »

Cisco Releases Open Source Backplane Traffic Visibility Tool for OT

Cisco, ICS, ICS/OT, Network Security, open source / SecurityTicks

Cisco Releases Open Source Backplane Traffic Visibility Tool for OT 2024-03-06 at 17:36 By Eduard Kovacs Cisco has released an open source PoC tool named Badgerboard designed for improved backplane network visibility for OT. The post Cisco Releases Open Source Backplane Traffic Visibility Tool for OT appeared first on SecurityWeek. This article is an excerpt

React to this headline:

Cisco Releases Open Source Backplane Traffic Visibility Tool for OT Read More »

Cyber Insights 2024: OT, ICS and IIoT

CyberInsights2024, ICS, ICS/OT, Industrial Cybersecurity, SCADA / SecurityTicks

Cyber Insights 2024: OT, ICS and IIoT 2024-03-06 at 15:32 By Kevin Townsend In an age of increasing geopolitical tensions caused by actual wars, and the threat of Chinese action against Taiwan, OT is a target that cannot be ignored by nation states. The post Cyber Insights 2024: OT, ICS and IIoT appeared first on

React to this headline:

Cyber Insights 2024: OT, ICS and IIoT Read More »

Zeek Security Tool Vulnerabilities Allow ICS Network Hacking

Featured, ICS, ICS/OT / SecurityTicks

Zeek Security Tool Vulnerabilities Allow ICS Network Hacking 2024-03-05 at 14:02 By Eduard Kovacs Vulnerabilities in a plugin for the Zeek network security monitoring tool can be exploited in attacks aimed at ICS environments. The post Zeek Security Tool Vulnerabilities Allow ICS Network Hacking appeared first on SecurityWeek. This article is an excerpt from SecurityWeek

React to this headline:

Zeek Security Tool Vulnerabilities Allow ICS Network Hacking Read More »

Remote Stuxnet-Style Attack Possible With Web-Based PLC Malware: Researchers

Featured, ICS, ICS malware, ICS/OT, Malware & Threats, PLC / SecurityTicks

Remote Stuxnet-Style Attack Possible With Web-Based PLC Malware: Researchers 2024-03-04 at 14:18 By Eduard Kovacs Researchers demonstrate that remote Stuxnet-style attacks are possible against many modern PLCs using web-based malware. The post Remote Stuxnet-Style Attack Possible With Web-Based PLC Malware: Researchers appeared first on SecurityWeek. This article is an excerpt from SecurityWeek RSS Feed View

React to this headline:

Remote Stuxnet-Style Attack Possible With Web-Based PLC Malware: Researchers Read More »

Volt Typhoon Seen Exfiltrating Sensitive OT Data

Dragos, ICS, ICS/OT, Volt Typhoon / SecurityTicks

Volt Typhoon Seen Exfiltrating Sensitive OT Data 2024-02-20 at 16:16 By Eduard Kovacs Volt Typhoon and two other threat groups that emerged in 2023 can pose a serious threat to ICS/OT, according to industrial cybersecurity firm Dragos. The post Volt Typhoon Seen Exfiltrating Sensitive OT Data appeared first on SecurityWeek. This article is an excerpt

React to this headline:

Volt Typhoon Seen Exfiltrating Sensitive OT Data Read More »

Mitsubishi Electric Factory Automation Flaws Expose Engineering Workstations

ICS, ICS/OT / SecurityTicks

Mitsubishi Electric Factory Automation Flaws Expose Engineering Workstations 2024-02-05 at 20:02 By Eduard Kovacs Critical and high-severity Mitsubishi Electric Factory Automation vulnerabilities can allow privileged access to engineering workstations. The post Mitsubishi Electric Factory Automation Flaws Expose Engineering Workstations appeared first on SecurityWeek. This article is an excerpt from SecurityWeek RSS Feed View Original Source

React to this headline:

Mitsubishi Electric Factory Automation Flaws Expose Engineering Workstations Read More »

Podcast: Palo Alto Networks Talks IT/OT Convergence

ICS, ICS/OT, Industrial, Palo Alto Networks, SCADA / SecurityTicks

Podcast: Palo Alto Networks Talks IT/OT Convergence 2024-01-31 at 19:47 By SecurityWeek News SecurityWeek interviews Del Rodillas, Senior Director of Product Management at Palo Alto Networks, about the integration of IT and OT in the ICS threat landscape. The post Podcast: Palo Alto Networks Talks IT/OT Convergence appeared first on SecurityWeek. This article is an excerpt

React to this headline:

Podcast: Palo Alto Networks Talks IT/OT Convergence Read More »

Westermo Switch Vulnerabilities Can Facilitate Attacks on Industrial Organizations

CISA, ICS, ICS/OT / SecurityTicks

Westermo Switch Vulnerabilities Can Facilitate Attacks on Industrial Organizations 2024-01-26 at 15:18 By Eduard Kovacs CISA informs organizations that Westermo Lynx switches are affected by eight vulnerabilities and some devices are reportedly exposed to the internet. The post Westermo Switch Vulnerabilities Can Facilitate Attacks on Industrial Organizations appeared first on SecurityWeek. This article is an

React to this headline:

Westermo Switch Vulnerabilities Can Facilitate Attacks on Industrial Organizations Read More »

Nozomi Unveils Wireless Security Sensor for OT, IoT Environments

ICS, ICS/OT, IoT, IoT Security / SecurityTicks

Nozomi Unveils Wireless Security Sensor for OT, IoT Environments 2024-01-26 at 12:16 By Eduard Kovacs Nozomi Networks extends its offering with Guardian Air, a security sensor designed to help organizations detect wireless threats in OT and IoT. The post Nozomi Unveils Wireless Security Sensor for OT, IoT Environments appeared first on SecurityWeek. This article is

React to this headline:

Nozomi Unveils Wireless Security Sensor for OT, IoT Environments Read More »

Unpatched Rapid SCADA Vulnerabilities Expose Industrial Organizations to Attacks

ICS, ICS/OT, SCADA, Vulnerabilities, vulnerability / SecurityTicks

Unpatched Rapid SCADA Vulnerabilities Expose Industrial Organizations to Attacks 2024-01-18 at 18:16 By Eduard Kovacs Seven vulnerabilities found in Rapid SCADA could be exploited to gain access to sensitive industrial systems, but they remain unpatched. The post Unpatched Rapid SCADA Vulnerabilities Expose Industrial Organizations to Attacks appeared first on SecurityWeek. This article is an excerpt

React to this headline:

Unpatched Rapid SCADA Vulnerabilities Expose Industrial Organizations to Attacks Read More »

Siemens, Schneider Electric Release First ICS Patch Tuesday Advisories of 2024

ICS, ICS Patch Tuesday, ICS/OT / SecurityTicks

Siemens, Schneider Electric Release First ICS Patch Tuesday Advisories of 2024 2024-01-09 at 20:02 By Eduard Kovacs Industrial giants Siemens and Schneider Electric publish a total of 7 new security advisories addressing 22 vulnerabilities. The post Siemens, Schneider Electric Release First ICS Patch Tuesday Advisories of 2024 appeared first on SecurityWeek. This article is an

React to this headline:

Siemens, Schneider Electric Release First ICS Patch Tuesday Advisories of 2024 Read More »

Bosch Nutrunner Vulnerabilities Could Aid Hacker Attacks Against Automotive Production Lines

Featured, ICS, ICS/OT, IoT, IoT Security, vulnerability / SecurityTicks

Bosch Nutrunner Vulnerabilities Could Aid Hacker Attacks Against Automotive Production Lines 2024-01-09 at 16:01 By Eduard Kovacs Hackers can take complete control of Bosch Rexroth nutrunners, installing ransomware or altering settings to cause financial impact and brand damage. The post Bosch Nutrunner Vulnerabilities Could Aid Hacker Attacks Against Automotive Production Lines appeared first on SecurityWeek.

React to this headline:

Bosch Nutrunner Vulnerabilities Could Aid Hacker Attacks Against Automotive Production Lines Read More »

States and Congress Wrestle With Cybersecurity After Iran Attacks Small Town Water Utilities

Featured, ICS, ICS/OT, Water / SecurityTicks

States and Congress Wrestle With Cybersecurity After Iran Attacks Small Town Water Utilities 2024-01-03 at 00:16 By Associated Press The hacking of a municipal water plant is prompting new warnings from U.S. security officials at a time when governments are wrestling with how to harden water utilities against cyberattacks. The post States and Congress Wrestle

React to this headline:

States and Congress Wrestle With Cybersecurity After Iran Attacks Small Town Water Utilities Read More »

CISA Urges Manufacturers to Eliminate Default Passwords After Recent ICS Attacks

CISA, ICS, ICS/OT, password / SecurityTicks

CISA Urges Manufacturers to Eliminate Default Passwords After Recent ICS Attacks 18/12/2023 at 19:17 By Eduard Kovacs CISA is advising device makers to stop relying on customers to change default passwords following attacks targeting water sector ICS. The post CISA Urges Manufacturers to Eliminate Default Passwords After Recent ICS Attacks appeared first on SecurityWeek. This

React to this headline:

CISA Urges Manufacturers to Eliminate Default Passwords After Recent ICS Attacks Read More »