ICS/OT
Researchers have identified hundreds of high severity vulnerabilities in a healthcare product from Philips. The vendor has released software updates that address the issues.
Hi, what are you looking for?
SecurityWeek
Government
The White House’s new executive order 14420 widens scrutiny of industrial control systems over cyber sabotage concerns.
ICS/OT
The agency has released guidance on reducing internet exposure in the wake of the recent Iran-linked hacker attacks.
ICS/OT
Hands-on Cyber Attack Methods course returns to SecurityWeek’s ICS Cybersecurity Conference, October 6–8 at the W Nashville.
ICS/OT
The attack caused real-world operational disruption and raised concerns about the resilience of Britain’s distributed energy infrastructure and the potential for repeatable attacks.
ICS/OT
GE and Microsoft unveiled a new partnership this week that will make GE’s Predix platform for the Industrial Internet available on Microsoft’s Azure cloud...
Cybersecurity Funding
Industrial cyber security startup Indegy announced on Wednesday that it has raised $12 million in a Series A round of financing led by Vertex...
Cyberwarfare
Endpoint security firm SentinelOne has found and analyzed the dropper framework of the Furtim malware discovered in May. It describes this as the mother...
ICS/OT
Over the past few years, industrial control systems (ICS) components have proven to be increasingly vulnerable and more frequently accessible from the Internet, which...
ICS/OT
A researcher has discovered several vulnerabilities in Sierra Wireless industrial gateways, but the vendor will not address the issues because the products are approaching...
ICS/OT
Researchers have discovered two vulnerabilities in Siemens’ SICAM Power Automation System (PAS). The vendor has patched one of the flaws and is currently working...
ICS/OT
The first chunk of actual sky recently slammed into the ground with a resounding thud.
ICS/OT
A report published on Tuesday by Trend Micro analyzes cyber threats faced by the mining industry and the motivations of different types of actors...
ICS/OT
Germany-based time and frequency synchronization solutions provider Meinberg has released firmware updates for several of its NTP time servers to address three high severity...
ICS/OT
Taiwan-based industrial automation company Advantech has updated its WebAccess product to address a couple of vulnerabilities that could allow attackers to execute arbitrary code...
ICS/OT
Despite a growing number of attacks on industrial control systems (ICS), organizations are falling behind on security improvements and in many cases they refuse...
ICS/OT
Schneider Electric has released a software update for its Pelco Digital Sentry video management solution to address a high severity vulnerability that allows attackers...
ICS/OT
Internet of Things (IoT) devices are becoming an increasingly important part of enterprise environments, yet companies continue to fail at securing them properly, a...
ICS/OT
Symantec Expands IoT Security Portfolio to Connected Cars
ICS/OT
Siemens has released firmware and software updates to address a couple of vulnerabilities affecting some of the company’s SIMATIC industrial automation products.
ICS/OT
Trihedral Engineering, a Canada-based company that specializes in developing software for SCADA systems, has patched several remotely exploitable vulnerabilities in its VTScada product.
ICS/OT
General Electric has released firmware updates for several of its MultiLink series switches to address a critical vulnerability that hackers could exploit to gain...
ICS/OT
Security testing firm IOActive recently surveyed 129 security professionals on the security of Internet of Things devices at its IOAsis San Francisco 2016 event March...
ICS/OT
FireEye has come across a mysterious piece of malware that appears to be designed to target industrial control systems (ICS), but which could just...
Join as speakers examine the various components of ASM strategy, the push to mandate continuous asset visibility and inventory tools, and the use of red-teaming, bug bounties and pen-tests in modern security programs.
RegisterIn this live webinar, learn how to define your minimum viable business, identify the systems it depends on, measure actual recovery time against business requirements, and present the gaps to the board as measurable risk.
RegisterExpert Insights
For twenty-five years, "data" in security meant logs and events. But logs are a lossy representation of reality.
(Danelle Au)
Organizations must distinguish identity verification, authentication and threat detection, or risk successfully authenticating the attackers they are trying to stop.
(Torsten George)
Silent patches can become exploit intelligence for attackers while leaving defenders without the context needed to prioritize risk.
(Tod Beardsley)
The skills that get a CISO hired are rarely the skills they are judged on later. Most security leaders are stuck in that gap. Closing it is the real job.
(Sravish Sridhar)
As AI dramatically shortens the time from vulnerability disclosure to exploitation, enterprises must look beyond patching to reduce application risk.
(Joshua Goldfarb)