ICS/OT New Project Analyzes and Catalogs Vendor Support for Secure PLC Coding A new project aims to make it easier for PLC programmers to implement secure coding practices by cataloging useful files and functions from each... Eduard KovacsOctober 25, 2023
ICS/OT Critical Infrastructure Stakeholders Gather for Day 2 of SecurityWeek’s 2023 ICS Cybersecurity Conference SecurityWeek’s 2023 ICS Cybersecurity Conference continues in Atlanta, as hundreds of industrial cybersecurity stakeholders gather for Day 2 of the annual industrial cybersecurity conference. SecurityWeek NewsOctober 25, 2023
ICS/OT Rockwell Automation Warns Customers of Cisco Zero-Day Affecting Stratix Switches Rockwell Automation has warned customers about the impact of the actively exploited Cisco IOS XE zero-day on its Stratix industrial switches. Eduard KovacsOctober 24, 2023
ICS/OT SecurityWeek’s 2023 ICS Cybersecurity Conference Kicks Off in Atlanta SecurityWeek’s 2023 ICS Cybersecurity Conference kicks off in Atlanta with presentations on a wide range of topics. SecurityWeek NewsOctober 24, 2023
Funding/M&A Rockwell Automation to Acquire ICS/OT Security Firm Verve Industrial Rockwell Automation agreed to acquire ICS/OT cybersecurity firm Verve Industrial Protection to expand its offerings. Eduard KovacsOctober 23, 2023
ICS/OT Critical Vulnerabilities Expose Weintek HMIs to Attacks Weintek has patched critical and high-severity vulnerabilities found in its cMT series HMIs by industrial cybersecurity firm TXOne. Eduard KovacsOctober 17, 2023
ICS/OT NSA Publishes ICS/OT Intrusion Detection Signatures and Analytics NSA has released Elitewolf, a repository of intrusion detection signatures and analytics for OT environments. Ionut ArghireOctober 17, 2023
ICS/OT Milesight Industrial Router Vulnerability Possibly Exploited in Attacks A vulnerability affecting Milesight industrial routers, tracked as CVE-2023-43261, may have been exploited in attacks. Eduard KovacsOctober 16, 2023
ICS/OT Unpatched Vulnerabilities Expose Yifan Industrial Routers to Attacks Industrial routers made by Chinese company Yifan are affected by several critical vulnerabilities that can expose organizations to attacks. Eduard KovacsOctober 12, 2023
ICS/OT Critical SOCKS5 Vulnerability in cURL Puts Enterprise Systems at Risk Flaw poses a direct threat to the SOCKS5 proxy handshake process in cURL and can be exploited remotely in some non-standard configurations. Ryan NaraineOctober 11, 2023
Government US Government Releases Security Guidance for Open Source Software in OT, ICS CISA, FBI, NSA, and US Treasury published new guidance on improving the security of open source software in OT and ICS. Ionut ArghireOctober 11, 2023
ICS/OT ICS Patch Tuesday: Siemens Ruggedcom Devices Affected by Nozomi Component Flaws ICS Patch Tuesday: Siemens and Schneider Electric release over a dozen advisories addressing more than 40 vulnerabilities. Eduard KovacsOctober 11, 2023