Tag: operational technology
-
The Register: Here’s what happens if you don’t layer network security – or remove unused web shells
Source URL: https://www.theregister.com/2024/11/22/cisa_red_team_exercise/ Source: The Register Title: Here’s what happens if you don’t layer network security – or remove unused web shells Feedly Summary: TL;DR: Attackers will break in and pwn you, as a US government red team demonstrated The US Cybersecurity and Infrastructure Agency often breaks into critical organizations’ networks – with their permission,…
-
Alerts: CISA Releases Insights from Red Team Assessment of a U.S. Critical Infrastructure Sector Organization
Source URL: https://www.cisa.gov/news-events/alerts/2024/11/21/cisa-releases-insights-red-team-assessment-us-critical-infrastructure-sector-organization Source: Alerts Title: CISA Releases Insights from Red Team Assessment of a U.S. Critical Infrastructure Sector Organization Feedly Summary: Today, CISA released Enhancing Cyber Resilience: Insights from CISA Red Team Assessment of a U.S. Critical Infrastructure Sector Organization in coordination with the assessed organization. This cybersecurity advisory details lessons learned and key…
-
Hacker News: Drinking water systems for 26M Americans face high cybersecurity risks
Source URL: https://www.scworld.com/news/drinking-water-systems-for-26m-americans-face-high-cybersecurity-risks Source: Hacker News Title: Drinking water systems for 26M Americans face high cybersecurity risks Feedly Summary: Comments AI Summary and Description: Yes Summary: The report by the EPA’s Office of Inspector General highlights alarming cybersecurity vulnerabilities in U.S. drinking water systems, affecting around 26.6 million Americans. The lack of an incident reporting…
-
Alerts: CISA Releases Nineteen Industrial Control Systems Advisories
Source URL: https://www.cisa.gov/news-events/alerts/2024/11/14/cisa-releases-nineteen-industrial-control-systems-advisories Source: Alerts Title: CISA Releases Nineteen Industrial Control Systems Advisories Feedly Summary: CISA released nineteen Industrial Control Systems (ICS) advisories on November 14, 2024. These advisories provide timely information about current security issues, vulnerabilities, and exploits surrounding ICS. ICSA-24-319-01 Siemens RUGGEDCOM CROSSBOW ICSA-24-319-02 Siemens SIPORT ICSA-24-319-03 Siemens OZW672 and OZW772 Web Server…
-
Alerts: CISA Releases Five Industrial Control Systems Advisories
Source URL: https://www.cisa.gov/news-events/alerts/2024/11/12/cisa-releases-five-industrial-control-systems-advisories Source: Alerts Title: CISA Releases Five Industrial Control Systems Advisories Feedly Summary: CISA released five Industrial Control Systems (ICS) advisories on November 12, 2024. These advisories provide timely information about current security issues, vulnerabilities, and exploits surrounding ICS. ICSA-24-317-01 Subnet Solutions PowerSYSTEM Center ICSA-24-317-02 Hitachi Energy TRO600 ICSA-24-317-03 Rockwell Automation FactoryTalk View…
-
The Register: China’s Volt Typhoon reportedly breached Singtel in ‘test-run’ for US telecom attacks
Source URL: https://www.theregister.com/2024/11/06/chinas_volt_typhoon_breached_singtel/ Source: The Register Title: China’s Volt Typhoon reportedly breached Singtel in ‘test-run’ for US telecom attacks Feedly Summary: Alleged intrusion spotted in June Chinese government cyberspies Volt Typhoon reportedly breached Singapore Telecommunications over the summer as part of their ongoing attacks against critical infrastructure operators.… AI Summary and Description: Yes Summary: The…
-
Cloud Blog: Cloud CISO Perspectives: 10 ways to make cyber-physical systems more resilient
Source URL: https://cloud.google.com/blog/products/identity-security/cloud-ciso-perspectives-10-ways-to-make-cyber-physical-systems-more-resilient/ Source: Cloud Blog Title: Cloud CISO Perspectives: 10 ways to make cyber-physical systems more resilient Feedly Summary: Welcome to the second Cloud CISO Perspectives for October 2024. Today, Anton Chuvakin, senior security consultant for our Office of the CISO, offers 10 leading indicators to improve cyber-physical systems, guided by our analysis of…
-
The Register: Two simple give-me-control security bugs found in Optigo network switches used in critical manufacturing
Source URL: https://www.theregister.com/2024/10/02/cisa_optigo_switch_flaws/ Source: The Register Title: Two simple give-me-control security bugs found in Optigo network switches used in critical manufacturing Feedly Summary: Poor use of PHP include() strikes again Two trivial but critical security holes have been found in Optigo’s Spectra Aggregation Switch, and so far no patch is available.… AI Summary and Description:…
-
Alerts: ASD’s ACSC, CISA, FBI, NSA, and International Partners Release Guidance on Principles of OT Cybersecurity for Critical Infrastructure Organizations
Source URL: https://www.cisa.gov/news-events/alerts/2024/10/01/asds-acsc-cisa-fbi-nsa-and-international-partners-release-guidance-principles-ot-cybersecurity Source: Alerts Title: ASD’s ACSC, CISA, FBI, NSA, and International Partners Release Guidance on Principles of OT Cybersecurity for Critical Infrastructure Organizations Feedly Summary: Today, the Australian Signals Directorate’s Australian Cyber Security Centre (ASD’s ACSC)—in partnership with CISA, U.S. government and international partners—released the guide Principles of Operational Technology Cybersecurity. This guidance…
-
Alerts: Threat Actors Continue to Exploit OT/ICS through Unsophisticated Means
Source URL: https://www.cisa.gov/news-events/alerts/2024/09/25/threat-actors-continue-exploit-otics-through-unsophisticated-means Source: Alerts Title: Threat Actors Continue to Exploit OT/ICS through Unsophisticated Means Feedly Summary: CISA continues to respond to active exploitation of internet-accessible operational technology (OT) and industrial control systems (ICS) devices, including those in the Water and Wastewater Systems (WWS) Sector. Exposed and vulnerable OT/ICS systems may allow cyber threat actors to…