FrostyGoop Malware Decoded
Security researchers have identified a malware targeting the widely-used Modbus industrial communication protocol was responsible for more than 600 apartment buildings in Ukraine losing heat for two days in January.…
Industrial Control Systems and Vulnerability Management Process
The evolving cyber threat landscape requires organizations to strengthen their ability to identify, analyze, and evaluate cyber risks before they evolve into security incidents. Threat actors are exploiting the known…
Rockwell Automation Critical RCE Bug
Infrastructure operators have been warned of a critical remote code execution flaw discovered in a type of communications equipment commonly used across multiple industries. The US CISA issued an alert…
CISA Warns on Vulnerabilities ICS and SCADA Softwares
The US CISA has published seven advisories last week covering vulnerabilities in ICS and SCADA software from multiple vendors. Some of the flaws are rated critical and two of them…
Siemens Security patches July 2022
Siemens has released numerous advisories that has 46 vulnerabilities affecting the company’s products. Two advisories are for flaws that have been rated critical with a CVSS score of 10. Three critical…
CodeSys Critical Vulnerabilities Patched
Codesys released patches for nearly a dozen vulnerabilities discovered in the company’s products. The industrial automation software solutions are used by largest ICS manufacturers, and vulnerabilities affecting Codesys products can impact…
Icefall Vulnerabilities – Challenge to OT
Several vulnerabilities have been discovered in operational technology products that open the door to various types of hacking, dubbed as Icefall the vulnerabilities are caused by insecure-by-design practices in OT.…
HID Mercury – Zero Day Bugs
Researchers have revealed numerous zero-day bugs in Carrier’s LenelS2 access control panels that could enable attackers to physically access nominally secure facilities. The devices are manufactured by HID Mercury, popular…