The Zero Day Initiative (ZDI) has published advisories describing several unpatched vulnerabilities affecting Advantech’s WebAccess industrial automation SCADA/HMI product.
Researchers at vulnerability management company Outpost24 have identified a series of vulnerabilities that can be exploited by a remote attacker to take complete control...
Applied Risk, a company that specializes in securing industrial control systems (ICS), reported finding several serious vulnerabilities in products leveraging WirelessHART technology.
ICS-CERT revealed last week that Westermo industrial switches use the same hardcoded SSL private keys, allowing malicious actors to intercept communications and gain unauthorized...
Device security firm ForeScout Technologies said on Thursday that it has secured $76 million in additional funding that values the company at a cool...
Siemens has released firmware updates to address a reflected cross-site scripting (XSS) vulnerability affecting some of the company’s building automation products.
While analyzing a firmware update for Advantech’s EKI product, security firm Rapid7 identified a serious authentication bypass vulnerability and a possible backdoor account.
Researchers reported finding several serious vulnerabilities in Intel Security’s McAfee Application Control product, but the vendor has not released patches claiming they are low...
Most of oil and gas industry organizations have seen an increase in successful cyber-attacks over the past 12 months, a recent report from Tripwire,...
Many consumer-grade Internet of Things (IoT) products, such as Wi-Fi security web cameras, include security flaws that allow attackers to reprogram them and use...
Role of Malware in Ukrainian Power Outages AnalyzedBased on the available information, ICS security experts believe the malware involved in the recent attacks targeting...
With unapproved AI tools entrenched in daily workflows, experts say it’s time to shift from monitoring to managing Shadow AI use across the enterprise.
Noteworthy stories that might have slipped under the radar: 4chan hacked, auto-reboot security feature coming to Android, Iranian administrator of Nemesis charged in US.