ICS - Security Ticks

Ransomware Attacks on Industrial Orgs Increasingly Impact OT Systems: Survey

ICS, ICS/OT, OT, Ransomware / SecurityTicks

Ransomware Attacks on Industrial Orgs Increasingly Impact OT Systems: Survey 07/12/2023 at 15:01 By Eduard Kovacs Ransomware attacks aimed at industrial organizations are increasingly impacting OT systems, according to a Claroty report. The post Ransomware Attacks on Industrial Orgs Increasingly Impact OT Systems: Survey appeared first on SecurityWeek. This article is an excerpt from SecurityWeek […]

React to this headline:

Ransomware Attacks on Industrial Orgs Increasingly Impact OT Systems: Survey Read More »

Dragos Offering Free OT Cybersecurity Technology to Small US Utilities

Dragos, ICS, ICS/OT, OT / SecurityTicks

Dragos Offering Free OT Cybersecurity Technology to Small US Utilities 06/12/2023 at 17:46 By Eduard Kovacs The Dragos Community Defense Program is offering free OT cybersecurity software to small electric, water, and natural gas utilities in the US. The post Dragos Offering Free OT Cybersecurity Technology to Small US Utilities appeared first on SecurityWeek. This

React to this headline:

Dragos Offering Free OT Cybersecurity Technology to Small US Utilities Read More »

Unpatched Loytec Building Automation Flaws Disclosed 2 Years After Discovery

building, Featured, ICS, ICS/OT / SecurityTicks

Unpatched Loytec Building Automation Flaws Disclosed 2 Years After Discovery 05/12/2023 at 17:32 By Ionut Arghire The details of 10 unpatched Loytec building automation product vulnerabilities have been disclosed two years after their discovery. The post Unpatched Loytec Building Automation Flaws Disclosed 2 Years After Discovery appeared first on SecurityWeek. This article is an excerpt

React to this headline:

Unpatched Loytec Building Automation Flaws Disclosed 2 Years After Discovery Read More »

ICS at Multiple US Water Facilities Targeted by Hackers Affiliated With Iranian Government

Cyber Av3ngers, Cyberwarfare, Featured, ICS, ICS/OT, Iran, OT, Water / SecurityTicks

ICS at Multiple US Water Facilities Targeted by Hackers Affiliated With Iranian Government 04/12/2023 at 16:16 By Eduard Kovacs Security agencies say the Cyber Av3ngers group targeting ICS at multiple water facilities is affiliated with the Iranian government. The post ICS at Multiple US Water Facilities Targeted by Hackers Affiliated With Iranian Government appeared first

React to this headline:

ICS at Multiple US Water Facilities Targeted by Hackers Affiliated With Iranian Government Read More »

Breaches by Iran-Affiliated Hackers Spanned Multiple U.S. States, Federal Agencies Say

Featured, ICS, ICS/OT, SCADA / SecurityTicks

Breaches by Iran-Affiliated Hackers Spanned Multiple U.S. States, Federal Agencies Say 03/12/2023 at 07:01 By Associated Press The Municipal Water Authority of Aliquippa was just one of multiple organizations breached in the U.S. by Iran-linked “Cyber Av3ngers” hackers The post Breaches by Iran-Affiliated Hackers Spanned Multiple U.S. States, Federal Agencies Say appeared first on SecurityWeek.

React to this headline:

Breaches by Iran-Affiliated Hackers Spanned Multiple U.S. States, Federal Agencies Say Read More »

Congressmen Ask DOJ to Investigate Water Utility Hack, Warning It Could Happen Anywhere

Featured, ICS, ICS/OT, OT, SCADA, Water / SecurityTicks

Congressmen Ask DOJ to Investigate Water Utility Hack, Warning It Could Happen Anywhere 01/12/2023 at 21:32 By Associated Press Members of Congress asked the U.S. Justice Department to investigate how foreign hackers breached a water authority near Pittsburgh, prompting CISA to warn other water and sewage-treatment utilities that they may be vulnerable. The post Congressmen

React to this headline:

Congressmen Ask DOJ to Investigate Water Utility Hack, Warning It Could Happen Anywhere Read More »

Hackers Hijack Industrial Control System at US Water Utility

Featured, ICS, ICS/OT, Water / SecurityTicks

Hackers Hijack Industrial Control System at US Water Utility 27/11/2023 at 15:01 By Eduard Kovacs Municipal Water Authority of Aliquippa in Pennsylvania confirms that hackers took control of a booster station, but says no risk to drinking water or water supply. The post Hackers Hijack Industrial Control System at US Water Utility appeared first on

React to this headline:

Hackers Hijack Industrial Control System at US Water Utility Read More »

Johnson Controls Patches Critical Vulnerability in Industrial Refrigeration Products

ICS, ICS/OT, Johnson Controls / SecurityTicks

Johnson Controls Patches Critical Vulnerability in Industrial Refrigeration Products 20/11/2023 at 17:31 By Eduard Kovacs Johnson Controls has patched a critical vulnerability that can be exploited to take complete control of Frick industrial refrigeration products. The post Johnson Controls Patches Critical Vulnerability in Industrial Refrigeration Products appeared first on SecurityWeek. This article is an excerpt

React to this headline:

Johnson Controls Patches Critical Vulnerability in Industrial Refrigeration Products Read More »

ICS Patch Tuesday: 90 Vulnerabilities Addressed by Siemens and Schneider Electric

ICS, ICS Patch Tuesday, Uncategorized / SecurityTicks

ICS Patch Tuesday: 90 Vulnerabilities Addressed by Siemens and Schneider Electric 14/11/2023 at 17:31 By Eduard Kovacs Siemens and Schneider Electric’s Patch Tuesday advisories for November 2023 address 90 vulnerabilities affecting their products. The post ICS Patch Tuesday: 90 Vulnerabilities Addressed by Siemens and Schneider Electric appeared first on SecurityWeek. This article is an excerpt

React to this headline:

ICS Patch Tuesday: 90 Vulnerabilities Addressed by Siemens and Schneider Electric Read More »

Russian Hackers Used Novel OT Attack to Disrupt Ukrainian Power Amid Mass Missile Strikes

Cyberwarfare, Featured, ICS, ICS malware, ICS/OT, Malware & Threats, Mandiant, Nation-State, OT, Russia, Sandworm, Ukraine / SecurityTicks

Russian Hackers Used Novel OT Attack to Disrupt Ukrainian Power Amid Mass Missile Strikes 09/11/2023 at 12:16 By Ryan Naraine Mandiant says Russia’s Sandworm hackers used a novel OT attack to cause power outages that coincided with mass missile strikes on critical infrastructure across Ukraine. The post Russian Hackers Used Novel OT Attack to Disrupt

React to this headline:

Russian Hackers Used Novel OT Attack to Disrupt Ukrainian Power Amid Mass Missile Strikes Read More »

Free Tool Helps Industrial Organizations Find OPC UA Vulnerabilities

free tool, ICS, ICS/OT, OPC / SecurityTicks

Free Tool Helps Industrial Organizations Find OPC UA Vulnerabilities 07/11/2023 at 18:04 By Eduard Kovacs A new free tool named OpalOPC helps industrial organizations find OPC UA misconfigurations and vulnerabilities. The post Free Tool Helps Industrial Organizations Find OPC UA Vulnerabilities appeared first on SecurityWeek. This article is an excerpt from SecurityWeek RSS Feed View

React to this headline:

Free Tool Helps Industrial Organizations Find OPC UA Vulnerabilities Read More »

Weapons Systems Provide Valuable Lessons for ICS/OT Security

ICS, ICS/OT, OT / SecurityTicks

Weapons Systems Provide Valuable Lessons for ICS/OT Security 26/10/2023 at 17:46 By SecurityWeek News Cybersecurity techniques and penetration testing used in the field of weapons systems can provide valuable lessons for ICS/OT security. The post Weapons Systems Provide Valuable Lessons for ICS/OT Security appeared first on SecurityWeek. This article is an excerpt from SecurityWeek RSS

React to this headline:

Weapons Systems Provide Valuable Lessons for ICS/OT Security Read More »

Day 3 of SecurityWeek’s 2023 ICS Cybersecurity Conference — Challenges and Solutions

ICS, ICS/OT, OT / SecurityTicks

Day 3 of SecurityWeek’s 2023 ICS Cybersecurity Conference — Challenges and Solutions 26/10/2023 at 17:46 By SecurityWeek News SecurityWeek’s 2023 ICS Cybersecurity Conference continues in Atlanta, with challenges and solutions the focus of Day 3. The post Day 3 of SecurityWeek’s 2023 ICS Cybersecurity Conference — Challenges and Solutions appeared first on SecurityWeek. This article

React to this headline:

Day 3 of SecurityWeek’s 2023 ICS Cybersecurity Conference — Challenges and Solutions Read More »

New Project Analyzes and Catalogs Vendor Support for Secure PLC Coding

Featured, ICS, ICS/OT, open source, PLC / SecurityTicks

New Project Analyzes and Catalogs Vendor Support for Secure PLC Coding 25/10/2023 at 18:17 By Eduard Kovacs A new project aims to make it easier for PLC programmers to implement secure coding practices by cataloging useful files and functions from each vendor. The post New Project Analyzes and Catalogs Vendor Support for Secure PLC Coding

React to this headline:

New Project Analyzes and Catalogs Vendor Support for Secure PLC Coding Read More »

Critical Infrastructure Stakeholders Gather for Day 2 of SecurityWeek’s 2023 ICS Cybersecurity Conference

Featured, ICS, ICS/OT / SecurityTicks

Critical Infrastructure Stakeholders Gather for Day 2 of SecurityWeek’s 2023 ICS Cybersecurity Conference 25/10/2023 at 16:31 By SecurityWeek News SecurityWeek’s 2023 ICS Cybersecurity Conference continues in Atlanta, as hundreds of industrial cybersecurity stakeholders gather for Day 2 of the annual industrial cybersecurity conference. The post Critical Infrastructure Stakeholders Gather for Day 2 of SecurityWeek’s 2023

React to this headline:

Critical Infrastructure Stakeholders Gather for Day 2 of SecurityWeek’s 2023 ICS Cybersecurity Conference Read More »

Rockwell Automation Warns Customers of Cisco Zero-Day Affecting Stratix Switches

Cisco, ICS, ICS/OT, Rockwell Automation / SecurityTicks

Rockwell Automation Warns Customers of Cisco Zero-Day Affecting Stratix Switches 24/10/2023 at 22:01 By Eduard Kovacs Rockwell Automation has warned customers about the impact of the actively exploited Cisco IOS XE zero-day on its Stratix industrial switches. The post Rockwell Automation Warns Customers of Cisco Zero-Day Affecting Stratix Switches appeared first on SecurityWeek. This article

React to this headline:

Rockwell Automation Warns Customers of Cisco Zero-Day Affecting Stratix Switches Read More »

Rockwell Automation to Acquire ICS/OT Security Firm Verve Industrial

Acquisition, Funding/M&A, ICS, ICS/OT, Industrial, OT, Rockwell Automation / SecurityTicks

Rockwell Automation to Acquire ICS/OT Security Firm Verve Industrial 23/10/2023 at 21:49 By Eduard Kovacs Rockwell Automation agreed to acquire ICS/OT cybersecurity firm Verve Industrial Protection to expand its offerings. The post Rockwell Automation to Acquire ICS/OT Security Firm Verve Industrial appeared first on SecurityWeek. This article is an excerpt from SecurityWeek RSS Feed View

React to this headline:

Rockwell Automation to Acquire ICS/OT Security Firm Verve Industrial Read More »

Critical Vulnerabilities Expose Weintek HMIs to Attacks

HMI, ICS, ICS/OT / SecurityTicks

Critical Vulnerabilities Expose Weintek HMIs to Attacks 17/10/2023 at 16:32 By Eduard Kovacs Weintek has patched critical and high-severity vulnerabilities found in its cMT series HMIs by industrial cybersecurity firm TXOne. The post Critical Vulnerabilities Expose Weintek HMIs to Attacks appeared first on SecurityWeek. This article is an excerpt from SecurityWeek RSS Feed View Original

React to this headline:

Critical Vulnerabilities Expose Weintek HMIs to Attacks Read More »

NSA Publishes ICS/OT Intrusion Detection Signatures and Analytics

ICS, ICS/OT, NSA, OT / SecurityTicks

NSA Publishes ICS/OT Intrusion Detection Signatures and Analytics 17/10/2023 at 14:16 By Ionut Arghire NSA has released Elitewolf, a repository of intrusion detection signatures and analytics for OT environments. The post NSA Publishes ICS/OT Intrusion Detection Signatures and Analytics appeared first on SecurityWeek. This article is an excerpt from SecurityWeek RSS Feed View Original Source

React to this headline:

NSA Publishes ICS/OT Intrusion Detection Signatures and Analytics Read More »

Milesight Industrial Router Vulnerability Possibly Exploited in Attacks

Featured, ICS, ICS/OT / SecurityTicks

Milesight Industrial Router Vulnerability Possibly Exploited in Attacks 16/10/2023 at 15:33 By Eduard Kovacs A vulnerability affecting Milesight industrial routers, tracked as CVE-2023-4326, may have been exploited in attacks. The post Milesight Industrial Router Vulnerability Possibly Exploited in Attacks appeared first on SecurityWeek. This article is an excerpt from SecurityWeek RSS Feed View Original Source

React to this headline:

Milesight Industrial Router Vulnerability Possibly Exploited in Attacks Read More »