Over 100 Flaws Expose Buildings to Hacker Attacks
A researcher has discovered over 100 vulnerabilities in building management and access control systems from four major vendors. An attacker can exploit these flaws...
SCADA / ICS
NIST Working on Industrial IoT Security Guide for Energy Companies
The U.S. National Institute of Standards and Technology (NIST), through its National Cybersecurity Center of Excellence (NCCoE), this week announced that it’s working on...
Several Vulnerabilities Found in GE Power Meter Software
The GE Communicator software is affected by several vulnerabilities, including the presence of hardcoded credentials and privilege escalation flaws, ICS-CERT revealed last week. GE...
TSA Lacks Cybersecurity Expertise to Manage Pipeline Security Program: Report
Audit Finds Weaknesses in TSA’s Pipeline Security Program Management The U.S. Department of Homeland Security’s (DHS) Transportation Security Administration (TSA) needs to address weaknesses...
Cybercrime / Cyberwarfare / Management & Strategy / NEWS & INDUSTRY / Risk Management / SCADA / ICS / Virus & Threats / Vulnerabilities
DoS Attack Blamed for U.S. Grid Disruptions: Report
A denial-of-service (DoS) attack has been blamed for disruptions to electrical grid operations in the United States. According to the National Energy Technology Laboratory’s...
Cisco Finds Serious Flaws in Sierra Wireless AirLink Devices
Cisco’s Talos research and intelligence group on Thursday disclosed the details of nearly a dozen vulnerabilities uncovered in Sierra Wireless AirLink devices, including serious...
NIST Tool Finds Errors in Complex Safety-Critical Software
The U.S. National Institute of Standards and Technology (NIST) this week announced that updates to its Automated Combinatorial Testing for Software (ACTS) research toolkit...
Special-Purpose Vehicle Maker Aebi Schmidt Hit by Malware
Swiss-based special-purpose vehicle maker Aebi Schmidt informed customers and business partners on Thursday that some of its operations may be disrupted as a result...
Third Party Ecosystems Make Industrial IoT the Perfect Storm of Risk and Reward
Organizations Must Understand Their Environments and React Immediately When Something is Amiss The risk created by the proliferation of industrial IoT (IIoT) is rising,...
Rockwell Controller Flaw Allows Hackers to Redirect Users to Malicious Sites
A serious vulnerability affecting some of Rockwell Automation’s MicroLogix and CompactLogix programmable logic controllers (PLCs) can be exploited by a remote attacker to redirect...