Security CERT Global
- CISA Releases Guidance on Single Sign-On (SSO) Adoption for Small and Medium-Sized Businesses: (SMBs)
- CAREL Boss-Mini
- Westermo L210-F2G
- Yokogawa CENTUM
- CISA Releases Three Industrial Control Systems Advisories
- Vulnérabilité dans Spring Cloud Function (20 juin 2024)
- Multiples vulnérabilités dans SonicWall SonicOS (20 juin 2024)
- Multiples vulnérabilités dans les produits Moxa (20 juin 2024)
- CERT-SE:s veckobrev v.25
- We're trying to cure cancer, why would anyone attack us?
- Cyber Europe tests the EU Cyber Preparedness in the Energy Sector
- JVN: 横河電機製CENTUM CAMSログサーバーにおける不十分なアクセス権設定の脆弱性
- お知らせ:標準から学ぶICSセキュリティ - #7 ICSコンポーネントに対するセキュリティ要件
- JVN: 複数のトレンドマイクロ製品における複数の脆弱性
- JVN: RAD Data Communications製SecFlow-2におけるパストラバーサルの脆弱性
- Multiples vulnérabilités dans les produits Atlassian (19 juin 2024)
- 🇬🇧 Malicious activities linked to the Nobelium intrusion set (19 juin 2024)
- Multiples vulnérabilités dans Moodle (19 juin 2024)
- Multiples vulnérabilités dans Google Chrome (19 juin 2024)
- 🇬🇧 Malicious activities linked to the Nobelium intrusion set (19 juin 2024)
- Multiples vulnérabilités dans Juniper Secure Analytics (19 juin 2024)
- Multiple vulnerabilities in multiple Trend Micro products
- JVN: Androidアプリ「ZOZOTOWN」におけるアクセス制限不備の脆弱性
- JVN: WordPress用プラグインSiteGuard WP Pluginにおける変更したログインパスが漏えいする脆弱性
- WordPress plugin "SiteGuard WP Plugin" may leak the customized path to the login page
- "ZOZOTOWN" App for Android fails to restrict custom URL schemes properly
- Weekly Report: GitLabに複数の脆弱性
- Weekly Report: 東芝テック製および沖電気製複合機(MFP)に複数の脆弱性
- Weekly Report: 複数のMozilla製品に脆弱性
- Weekly Report: 複数のマイクロソフト製品に脆弱性
- Weekly Report: IPCOMのWAF機能にサービス運用妨害(DoS)の脆弱性
- Weekly Report: Fortinet製FortiOSにスタックベースのバッファーオーバーフローの脆弱性
- Kritiska sårbarheter påverkar VMware vCenter Server
- Multiples vulnérabilités dans les produits VMware (18 juin 2024)
- CISA Releases One Industrial Control Systems Advisory
- PoC-udnyttelse tilgængelig for fejl i Ivanti Endpoint Manager
- TZCERT-SU-24-0632 (SUSE Security Update)
- TZCERT-SU-24-0636 (Chrome Security Update)
- TZCERT-SU-24-0630 (Dell Security Update)
- TZCERT-SU-24-0635 (Microsoft Security Update)
- TZCERT-SU-24-0637 (Mageia Security Update)
- TZCERT-SU-24-0638 (Palo Alto Security Update)
- TZCERT-SU-24-0633 (Adobe Security Update)
- TZCERT-SU-24-0634 (Oracle Linux Security Update)
- TZCERT-SU-24-0631 (Mozilla Security Update)
- TZCERT-SU-24-0639 (Cisco Security Update)
- VMware advarer om to kritiske vCenter-fejl
- Ny Linux malware styres gennem emojis
- Multiple vulnerabilities in Ricoh Streamline NX PC Client
- Multiple vulnerabilities in ID Link Manager and FUJITSU Software TIME CREATOR
MGS+ ICS Security Report May 2017
MGS+ ICS Security Report May 2017: Editor Picks: News Intelligence Alerts Report
ABB buys B&R to help it challenge Siemens in industrial automation
Swiss engineering group ABB (ABBN.S) has bought Austrian industrial automation company Bernecker & Rainer, a move that fits in with its strategy of expanding its products to better challenge German rival Siemens (SIEGn.DE) on the factory floor.
Source: http://www.reuters.com/article/us-abb-rainer-idUSKBN1760DW
Taking cybersecurity a step further with attribute-based access control
2016 was a rough year not only for enterprises but also for federal agencies when it comes to cyberattacks. These attacks weren’t just occurring in the United States, but all around the globe.
Source: https://federalnewsradio.com/commentary/2017/04/taking-cybersecurity-step-attribute-based-access-controls/
How legacy industrial equipment is vulnerable to attack
With legacy industrial equipment facing a growing number of threats when connected to the internet, how can plants ensure the safety of their devices?
Source: http://www.information-age.com/legacy-industrial-equipment-vulnerable-attack-123465162/
This AI System Can Steal Code to Make Itself Smarter
While Artificial Intelligence systems continue to improve, one AI is doing that in a unique way. Microsoft and the University of Cambridge partnered on DeepCoder, a deep learning AI meant to mimic the learning patterns found in the human brain.
Source: http://interestingengineering.com/ai-system-can-steal-code-to-make-itself-smarter/
Powering-up Digital Transformation in Industrial Sectors
Why is it that when Forrester polled global enterprises, 83% of energy respondents and 74% of respondents in manufacturing put digital transformation at the top of their business priorities? It’s because business and IT decision makers in both sectors see digital transformation as the path to growth and innovation.
Source: http://www.securityweek.com/powering-digital-transformation-industrial-sectors
Energy facility cyber incidents rose nearly a third last year, DHS says
Homeland Security received reports of 59 cyber incidents at energy facilities last year, up nearly a third from the year before.
Source: http://fuelfix.com/blog/2017/03/22/energy-facility-cyber-incidents-rose-nearly-a-third-last-year-dhs-says/
Don’t Worry About ‘Cyber Pearl Harbor,’ But Hackers Are Already Targeting Our Critical Infrastructure
Cyber defenders still don’t understand the real threats that the power grid, energy plants and other critical infrastructure face.
Source: https://motherboard.vice.com/en_us/article/kbykyx/dont-worry-about-cyber-pearl-harbor-but-hackers-are-already-targeting-our-critical-infrastructure
Schneider Electric and Accenture Build a Digital Services Factory to Speed Development of Industrial IoT
New capability aims to reduce time between product ideation and market launch from three years to less than eight months
Source: http://www.stockhouse.com/news/press-releases/2017/04/26/schneider-electric-and-accenture-build-a-digital-services-factory-to-speed
Hackers increase attacks on energy sector computers
Reports released this past week by U.S. security officials and private cybersecurity researchers suggest hacking of energy facility computers is on the rise, and happens far more often than the public assumes. The Department of Homeland Security said it received reports of 59 cyber incidents at energy facilities last year, up nearly a third from the year before.
Source: http://www.houstonchronicle.com/business/article/Hackers-increase-attacks-on-energy-sector-11026522.php?cmpid=twitter-premium