MITRE has expanded the EMB3D Threat Model with essential mitigations to help organizations address threats to embedded devices.
The post MITRE Adds Mitigations to EMB3D Threat Model appeared first on SecurityWeek.
US, Allies Release Guidance on Securing OT Environments
New guidance provides information on how to create and maintain a secure operational technology (OT) environment.
The post US, Allies Release Guidance on Securing OT Environments appeared first on SecurityWeek.
Dragos Acquires Network Perception to Boost Visibility
OT security firm Dragos has acquired Network Perception to enhance its platform’s visibility, segmentation and compliance capabilities.
The post Dragos Acquires Network Perception to Boost Visibility appeared first on SecurityWeek.
Remote Code Execution, DoS Vulnerabilities Patched in OpenPLC
Critical and high-severity vulnerabilities that can be exploited for DoS attacks and remote code execution have been patched in OpenPLC.
The post Remote Code Execution, DoS Vulnerabilities Patched in OpenPLC appeared first on SecurityWeek.
Israeli Group Claims Lebanon Water Hack as CISA Reiterates Warning on Simple ICS Attacks
Unsophisticated methods can still be used to hack ICS/OT — even so, many cyberattack claims are likely exaggerated.
The post Israeli Group Claims Lebanon Water Hack as CISA Reiterates Warning on Simple ICS Attacks appeared first on SecurityWeek.
Automatic Tank Gauges Used in Critical Infrastructure Plagued by Critical Vulnerabilities
Bitsight finds critical vulnerabilities in several automatic tank gauge (ATG) products used in various critical infrastructure sectors.
The post Automatic Tank Gauges Used in Critical Infrastructure Plagued by Critical Vulnerabilities appeared first on SecurityWeek.
Unpatched Vulnerabilities Expose Riello UPSs to Hacking: Security Firm
Hackers can take control of Riello UPS devices by exploiting unpatched vulnerabilities, a cybersecurity company has warned.
The post Unpatched Vulnerabilities Expose Riello UPSs to Hacking: Security Firm appeared first on SecurityWeek.
ICS Patch Tuesday: Advisories Published by Siemens, Schneider, ABB, CISA
Two dozen ICS Patch Tuesday advisories have been published by Siemens, Schneider Electric, CISA and ABB.
The post ICS Patch Tuesday: Advisories Published by Siemens, Schneider, ABB, CISA appeared first on SecurityWeek.
Study Finds Excessive Use of Remote Access Tools in OT Environments
The excessive use of remote access tools in OT environments can increase the attack surface, complicate identity management, and hinder visibility.
The post Study Finds Excessive Use of Remote Access Tools in OT Environments appeared first on SecurityWeek.
Beckhoff TwinCAT/BSD Vulnerabilities Expose PLCs to Tampering, DoS Attacks
Beckhoff Automation has patched several vulnerabilities in its TwinCAT/BSD operating system for industrial PCs.
The post Beckhoff TwinCAT/BSD Vulnerabilities Expose PLCs to Tampering, DoS Attacks appeared first on SecurityWeek.