SCADA

North Korea-Linked Covellite APT group stopped targeting organizations in the U.S.North Korea-Linked Covellite APT group stopped targeting organizations in the U.S.

North Korea-Linked Covellite APT group stopped targeting organizations in the U.S.

A North Korea-linked APT group, tracked by experts at industrial cybersecurity firm Dragos as Covellite, has stopped targeting US organizations. Anyway, the group,…

7 years ago
Xenotime, Threat actors Behind Triton Malware broadens its activitiesXenotime, Threat actors Behind Triton Malware broadens its activities

Xenotime, Threat actors Behind Triton Malware broadens its activities

The threat actor behind the Triton malware (aka Trisis, Xenotime, and HatMan) is now targeting organizations worldwide and safety systems. The attackers are…

7 years ago
Schneider Electric Development Tools InduSoft Web Studio and InTouch Machine Edition are affected by a critical buffer flawSchneider Electric Development Tools InduSoft Web Studio and InTouch Machine Edition are affected by a critical buffer flaw

Schneider Electric Development Tools InduSoft Web Studio and InTouch Machine Edition are affected by a critical buffer flaw

Researchers at Tenable have disclosed technical details and a PoC code for a critical remote code execution vulnerability affecting Schneider…

7 years ago
Researchers discovered several flaws that expose electrical substations to hackResearchers discovered several flaws that expose electrical substations to hack

Researchers discovered several flaws that expose electrical substations to hack

The ICS-CERT and Siemens published are warning organizations of security flaws in Siemens devices (SIPROTEC 4, SIPROTEC Compact, and Reyrolle…

7 years ago
Mobile App Flaws of SCADA ICS Systems Could Allow Hackers To Target Critical InfrastructureMobile App Flaws of SCADA ICS Systems Could Allow Hackers To Target Critical Infrastructure

Mobile App Flaws of SCADA ICS Systems Could Allow Hackers To Target Critical Infrastructure

IOACTIVE researchers warn that critical infrastructure mobile applications are being developed without secure coding compliance that could allow hackers to…

7 years ago
Flaws in Siemens Building Automation Controllers open to hack. Fix them asapFlaws in Siemens Building Automation Controllers open to hack. Fix them asap

Flaws in Siemens Building Automation Controllers open to hack. Fix them asap

Siemens has released a firmware update that addresses two vulnerabilities in its BACnet Field Panel building automation controllers. This week…

8 years ago
Dragonfly 2.0: the sophisticated attack group is back with destructive purposesDragonfly 2.0: the sophisticated attack group is back with destructive purposes

Dragonfly 2.0: the sophisticated attack group is back with destructive purposes

While the first Dragonfly campaigns appear to have been a more reconnaissance phase, the Dragonfly 2.0 campaign seems to have destructive…

8 years ago
ICS Companies Are Worried About Cybersecurity, But Are They Worried About the Right Things?ICS Companies Are Worried About Cybersecurity, But Are They Worried About the Right Things?

ICS Companies Are Worried About Cybersecurity, But Are They Worried About the Right Things?

Companies operating Industrial Control Systems (ICS) have a special set of challenges to deal with. Which is the state of…

8 years ago
Experts spotted Industroyer ICS Malware and linked it to Ukraine Power OutageExperts spotted Industroyer ICS Malware and linked it to Ukraine Power Outage

Experts spotted Industroyer ICS Malware and linked it to Ukraine Power Outage

Researchers at antivirus firm ESET have discovered a new strain of malware, dubbed Industroyer, that appears to have been designed…

8 years ago
Still problems for Schneider Electric, Schneider Modicon TM221CE16R has a hardcoded passwordStill problems for Schneider Electric, Schneider Modicon TM221CE16R has a hardcoded password

Still problems for Schneider Electric, Schneider Modicon TM221CE16R has a hardcoded password

The firmware running on the Schneider Modicon TM221CE16R (Firmware 1.3.3.3) has a hardcoded password, and there is no way to…

8 years ago