Ransomware Group Claims Access to SCADA in Confusing UK Water Company Hack
A ransomware group has hit at least one water company in the United Kingdom, but there is some confusion over whose systems were actually breached.
Weaponized PLCs Can Hack Engineering Workstations in Attacks on Industrial Orgs
Researchers have shown how hackers could weaponize programmable logic controllers (PLCs) and use them to exploit engineering workstations running software from several major industrial automation companies.
Security Researchers Dig Deep Into Siemens Software Controllers
LAS VEGAS – BLACK HAT 2022 – A team of researchers from the Technion research university in Israel is conducting an analysis of Siemens software controllers and they are gradually identifying security issues.
OT Security Firm Warns of Safety Risks Posed by Alerton Building System Vulnerabilities
OT and IoT cybersecurity company SCADAfence has discovered potentially serious vulnerabilities in a widely used building management system made by Alerton, a brand of industrial giant Honeywell.
Number of Ransomware Attacks on Industrial Orgs Drops Following Conti Shutdown
The number of ransomware attacks on industrial organizations decreased from 158 in the first quarter of 2022 to 125 in the second quarter, and it may be — at least partially — a result of the Conti operation shutting down.
ICS Patch Tuesday: Siemens, Schneider Electric Fix Only 11 Vulnerabilities
Industrial giants Siemens and Schneider Electric have addressed less than a dozen vulnerabilities in their August 2022 Patch Tuesday advisories, far fewer than in most of the previous months.
FEMA Urges Patching of Emergency Alert Systems, But Some Flaws Remain Unfixed
The US Federal Emergency Management Agency (FEMA) has issued an advisory urging organizations to ensure that their emergency alert systems are patched, but a researcher says there are no patches for some of the vulnerabilities affecting these systems.
Securing Smart Cities from the Ground Up
Smart City network infrastructure demands a proactive approach to find vulnerabilities before hackers find them
Moxa NPort Device Flaws Can Expose Critical Infrastructure to Disruptive Attacks
Two potentially serious vulnerabilities that could allow threat actors to cause significant disruption have been found in a widely used industrial connectivity device made by Moxa.
The Taiwan-based industrial networking and automation solutions provider has addressed the flaws.
