SCADA intelligence
NIST has released a final practice guide providing reference architectures for securing remote access to operational technology within the water and wastewater sector.
Read the analysis →NIST has released a final practice guide providing reference architectures for secure remote access to operational technology within the water and wastewater sector, designed for utilities of varying sizes.
Read the analysis →A code injection vulnerability in Lantronix EDS5000 series device servers could allow root-level command execution via the username parameter, impacting serial-to-Ethernet connectivity in OT environments.
Read the analysis →A review of the NIST Special Publication (SP) 1339 Quick Start Guide, focusing on essential backup management priorities to reduce production downtime and safety risks in industrial environments.
Read the analysis →A vulnerability in Arista Extensible Operating System (EOS) could allow the incorrect decapsulation and forwarding of unexpected tunneled packets, potentially impacting network segmentation in industrial environments.
Read the analysis →NIST has released SP 1800-41 as a public draft, providing reference architectures and guidelines specifically for responding to and recovering from cyber attacks within manufacturing ICS environments.
Read the analysis →An analysis of a credential vulnerability in Rockwell Automation Studio 5000 and Logix controllers that could allow unauthorized application connections if network access is obtained.
Read the analysis →A missing authorization vulnerability (CVE-2023-52163) in the Digiever DS-2105 Pro could allow for command injection, impacting physical security and monitoring systems within industrial environments.
Read the analysis →CISA has added CVE-2018-4063 to its Known Exploited Vulnerabilities catalog, highlighting a flaw in Sierra Wireless AirLink ALEOS that allows authenticated users to upload executable code to the webserver.
Read the analysis →A critical vulnerability (CVE-2021-26828) in OpenPLC ScadaBR allows authenticated remote users to upload and execute arbitrary JSP files, potentially compromising the SCADA environment.
Read the analysis →Discuss your risks, priorities, and next steps for stronger safeguards.