Security CERT Global
- CISA Releases Guidance on Single Sign-On (SSO) Adoption for Small and Medium-Sized Businesses: (SMBs)
- CAREL Boss-Mini
- Westermo L210-F2G
- Yokogawa CENTUM
- CISA Releases Three Industrial Control Systems Advisories
- Vulnérabilité dans Spring Cloud Function (20 juin 2024)
- Multiples vulnérabilités dans SonicWall SonicOS (20 juin 2024)
- Multiples vulnérabilités dans les produits Moxa (20 juin 2024)
- CERT-SE:s veckobrev v.25
- We're trying to cure cancer, why would anyone attack us?
- Cyber Europe tests the EU Cyber Preparedness in the Energy Sector
- JVN: 横河電機製CENTUM CAMSログサーバーにおける不十分なアクセス権設定の脆弱性
- お知らせ：標準から学ぶICSセキュリティ - #7 ICSコンポーネントに対するセキュリティ要件
- JVN: 複数のトレンドマイクロ製品における複数の脆弱性
- JVN: RAD Data Communications製SecFlow-2におけるパストラバーサルの脆弱性
- Multiples vulnérabilités dans les produits Atlassian (19 juin 2024)
- 🇬🇧 Malicious activities linked to the Nobelium intrusion set (19 juin 2024)
- Multiples vulnérabilités dans Moodle (19 juin 2024)
- Multiples vulnérabilités dans Google Chrome (19 juin 2024)
- 🇬🇧 Malicious activities linked to the Nobelium intrusion set (19 juin 2024)
- Multiples vulnérabilités dans Juniper Secure Analytics (19 juin 2024)
- Multiple vulnerabilities in multiple Trend Micro products
- JVN: Androidアプリ「ZOZOTOWN」におけるアクセス制限不備の脆弱性
- JVN: WordPress用プラグインSiteGuard WP Pluginにおける変更したログインパスが漏えいする脆弱性
- WordPress plugin "SiteGuard WP Plugin" may leak the customized path to the login page
- "ZOZOTOWN" App for Android fails to restrict custom URL schemes properly
- Weekly Report: GitLabに複数の脆弱性
- Weekly Report: 東芝テック製および沖電気製複合機（MFP）に複数の脆弱性
- Weekly Report: 複数のMozilla製品に脆弱性
- Weekly Report: 複数のマイクロソフト製品に脆弱性
- Weekly Report: IPCOMのWAF機能にサービス運用妨害（DoS）の脆弱性
- Weekly Report: Fortinet製FortiOSにスタックベースのバッファーオーバーフローの脆弱性
- Kritiska sårbarheter påverkar VMware vCenter Server
- Multiples vulnérabilités dans les produits VMware (18 juin 2024)
- CISA Releases One Industrial Control Systems Advisory
- PoC-udnyttelse tilgængelig for fejl i Ivanti Endpoint Manager
- TZCERT-SU-24-0632 (SUSE Security Update)
- TZCERT-SU-24-0636 (Chrome Security Update)
- TZCERT-SU-24-0630 (Dell Security Update)
- TZCERT-SU-24-0635 (Microsoft Security Update)
- TZCERT-SU-24-0637 (Mageia Security Update)
- TZCERT-SU-24-0638 (Palo Alto Security Update)
- TZCERT-SU-24-0633 (Adobe Security Update)
- TZCERT-SU-24-0634 (Oracle Linux Security Update)
- TZCERT-SU-24-0631 (Mozilla Security Update)
- TZCERT-SU-24-0639 (Cisco Security Update)
- VMware advarer om to kritiske vCenter-fejl
- Ny Linux malware styres gennem emojis
- Multiple vulnerabilities in Ricoh Streamline NX PC Client
- Multiple vulnerabilities in ID Link Manager and FUJITSU Software TIME CREATOR
IT-OT collaboration needs context and increased visibility –
IT-OT collaboration needs context and increased visibility – Information technology (IT) and operational technology (OT) are continuing the process of […]
Secure design principles: Guides for the design of Cyber Secure systems: Security design principles and virtualisation
Secure design principles:Guides for the design of Cyber Secure systems:Security design principles and virtualisationhttps://www.ncsc.gov.uk/collection/cyber-security-design-principles/examples/study-virtualisationicssecurity, infosec, cybersecurity, criticalinfrastructure, IndustrialControlSystems, virtualisation
Secure design principles: Guides for the design of Cyber Secure systems: Design principles and Operational Technology
Secure design principles:Guides for the design of Cyber Secure systems:Design principles and Operational Technologyhttps://www.ncsc.gov.uk/collection/cyber-security-design-principles/examples/study-operational-techicssecurity, infosec, cybersecurity, criticalinfrastructure, IndustrialControlSystems, OT
Cybersecurity Capability Maturity Model (C2M2) Program
Cybersecurity Capability Maturity Model (C2M2) Programhttps://www.energy.gov/ceser/activities/cybersecurity-critical-energy-infrastructure/energy-sector-cybersecurity-0 icssecurity, infosec, cybersecurity, criticalinfrastructure, IndustrialControlSystems
Strategic Efficiency Consortium Security Intelligence Data Platform: Work Flow + Content Map – Jan 2019
SEC Industrial Security Intelligence Data Platform Work Flow SEC Industrial Security Intelligence Data Platform Content Map Updated Jan 2019 Document: […]
SEC Industrial Security Intelligence Data Platform 2019 Document
Strategic Efficiency Consortium Platform Work Flow Content Map Updated for 2019. SEC Industrial Security Intelligence Data Platform 2019 Document Document: […]
Strategic Efficiency Consortium Security Intelligence Reading and References – SEC Report
Reading and References Competitive Intelligence – CI For Beginners Part 1: Insight Work “Intelligence is a set […]
SEC Threat Intelligence as a Critical Organizational Need – SEC Report
The critical need for an evidence based, automated, holistic approach of the threat landscape. These are challenging times […]
SEC Security Data Services – SEC Report
This service is specifically designed to deliver well defined deliverables into critical intelligence demands of our client. These […]