ICS/OT
Rockwell’s PowerMonitor is affected by critical vulnerabilities that can enable remote access to industrial systems for disruption or further attacks.
Hi, what are you looking for?
SecurityWeek
ICS/OT
The hackers published 5GB of data, including customer personal information and credentials for the RTKBase platform.
ICS/OT
A PowerShell script included in patch files appears to be triggering false positives by multiple security engines.
ICS/OT
Claroty researchers have analyzed the security of Vertiv UPS network cards and the Trane Tracer SC+ HVAC controller.
ICS/OT
In addition, Rockwell Automation announced some enhancements to its SecureOT cybersecurity solution for OT.
ICS/OT
Learn how to develop a holistic solution that provides you and your team the power to mitigate cyber threats effectively within your OT environment.
ICS/OT
EPA and CISA urge organizations in the water and wastewater systems sector to harden remote access to internet-exposed human-machine interfaces (HMIs).
ICS/OT
The Iranian threat group CyberAv3ngers has used custom-built malware named IOCONTROL to target IoT and OT devices in the US and Israel.
ICS/OT
December 2024 ICS Patch Tuesday brings advisories from CISA, as well as several major industrial automation companies.
ICS/OT
Cisco Talos has disclosed the details of apparently unpatched vulnerabilities in MC Technologies industrial routers and the GoCast BGP tool.
ICS/OT
Critical vulnerabilities patched by mySCADA in its myPRO HMI/SCADA product can allow remote and unauthenticated takeover of the system.
ICS/OT
Censys and Kaspersky publish ICS security reports looking into exposure to attacks and actual attacks suffered by industrial organizations.
ICS/OT
EPA flags security vulnerabilities in more than 300 drinking water systems that serve roughly 110 million individuals.
Artificial Intelligence
The framework recommends that AI developers evaluate potentially dangerous capabilities in their products, ensure their products align with “human-centric values” and protect users’ privacy.
ICS/OT
CISA, Schneider Electric, Siemens, and Rockwell Automation have released November 2024 Patch Tuesday security advisories.
ICS/OT
Georgia Tech researchers have developed PLCHound, an algorithm that uses AI to improve the identification of internet-exposed ICS.
ICS/OT
Hackers claim to have stolen sensitive information, including user data, after breaching Schneider Electric’s Jira system.
ICS/OT
Siemens and Rockwell Automation are taking steps to improve cybersecurity in industrial organizations, but getting customers to install security systems and upgrade ICS can...
Artificial Intelligence
GreyNoise Intelligence says an internal AI tool captured attempts to exploit critical vulnerabilities in commercial livestream IoT cameras.
ICS/OT
Armis raised an additional $200 million in funding at valuation of $4.2 billion as the company aims for an IPO.
ICS/OT
OT security firm targets CISOs with new solution described as a multi-layer machine learning process-oriented OT cybersecurity suite.
ICS/OT
Premier Industrial Cybersecurity Conference offers 80+ sessions and hands-on training to tackle critical infrastructure cyber threats.
ICS/OT
Critical and high-severity vulnerabilities that can lead to full device compromise have been found in mbNET.mini and Helmholz industrial routers.
ICS/OT
Palo Alto Networks has added new remote access, virtual patching and firewall capabilities to its OT Security solution.
Today’s attackers are no longer breaking in — they’re logging in. Join this live webinar as we break down the modern identity attack chain and examine how recent breaches exploited weaknesses in authentication, identity verification, and access management processes.
RegisterAI has accelerated both sides of the fight. Adversaries are weaponizing vulnerabilities faster, while defenders are racing to ship detections and configurations. Join this live webinar as we explore how to prove your controls actually hold against new threats, map your security maturity, and unite breach simulation with automated pentesting into a single, coordinated program.
RegisterExpert Insights
Security teams need more than visibility into AI applications, they need a repeatable framework for monitoring, investigating, and defending them in production.
(Joshua Goldfarb)
AI-driven development is not something organizations can or should block. But it must be governed.
(Danelle Au)
AI can help attackers generate malware, create malicious payloads, bypass simple security checks, and convert vague malicious intent into functional code.
(Etay Maor)
CISOs are now facing machine-speed attacks and asking, “How do I agent?” The industry must provide remediation at scale.
(Nadir Izrael)
As enterprises rush AI projects into production, security teams are increasingly being forced into reactive mode.
(Joshua Goldfarb)