Industrial Control Systems

  

US Cyber Command Russia stand-down: Strategic diplomacy or security gamble?

Like any high-stakes gamble, Defense Secretary Pete’s Hegseth’s recent move on Russia only makes sense if it works.SCM feed for

  

Nearly $31M stolen in Uranium Finance crypto heists sequestered

The DeFi protocol’s attackers were associated with Tornado Cash transactions and cross-chain swaps.SCM feed for Endpoint/Device SecurityRead More

  

Military, government sectors face escalating APT attacks

Intrusions conducted by APTs were noted by Group-IB to rise by 58% in 2024.SCM feed for Endpoint/Device SecurityRead More

  

Report: CISA vulnerabilities catalog monitored by ransomware gangs

Ransomware operations have exploited 28% of security flaws in the catalog in attacks last year.SCM feed for Endpoint/Device SecurityRead More

  

Data breach liability strains cyber execs, says SolarWinds CISO

SolarWinds CISO Tim Brown discussed the topic at the CyberLawCon Conference.SCM feed for Endpoint/Device SecurityRead More

  

Data broker banned by California over failure to register

Background Alert has been shut down by the California Privacy Protection Agency for three years.SCM feed for Endpoint/Device SecurityRead More

  

Geopolitics, AI, and generational shifts: Three key trends reshaping the future of cyber leadership

In a post for the World Economic Forum (WEF), three key trends have been identified as shaping the… The post

  

VS Code theme with nearly 4M installs removed due to security ‘red flags’

The removal of the free Material Theme was met with controversy as its developer disputed the allegations.SCM feed for Endpoint/Device

  

A Siemens Teamcenter sérülékenysége lehetővé teszi a fiókok átvételét (CVE-2025-23363)

A Siemens Teamcenter termékéletciklus-kezelő (PLM) szoftverben található magas súlyosságú sérülékenység (CVE-2025-23363) lehetővé teszi a támadók számára, hogy ellopják a felhasználók

  

A Silver Fox APT a Philips DICOM eszközöket is célba veszi

Az egészségügy volt az egyik leginkább célzott kritikus infrastruktúra ágazat 2023-ban és 2024-ben is. Az egészségügyi intézményeket ért támadások közül

  

Modat researchers reveal massive AMS vulnerabilities, putting critical industries at cyber risk

Researchers from Modat detailed a significant global security risk stemming from misconfigured and inadequately secured access management systems… The post

  

12K hardcoded API keys and passwords found in public LLM training data

Criminals use LLMJacking to abuse stolen API keys to GenAI services by selling the access to third parties.SCM feed for

  

6 Cybersecurity Considerations When Configuring Industrial IoT Devices

Integrating industrial internet of things (IIoT) technology into industrial settings is the logical next step for facility managers. It improves

  

Black Basta leak exposes critical ransomware tactics and internal strife, revealing attack patterns

KELA researchers reported that the Black Basta leak revealed critical patterns used by ransomware operators to infiltrate corporate… The post

  

Farm and Food Cybersecurity Act reintroduced to protect food supply chain from cyber threats

U.S. lawmakers from the Senate and House of Representatives have reintroduced the Farm and Food Cybersecurity legislation that… The post

  

Windows CE OS flaws pose risk to industrial systems, medical settings

Security pros urge teams at industrial sites to air-gap legacy Windows CE systems immediately.SCM feed for Endpoint/Device SecurityRead More

  

Az OT-ban is használt Windows CE OS sérülékenységei (1.rész)

A Claroty kutatási részlege, a Team82 új eredményeket tett közzé, mely szerint biztonsági kockázatokat tártak fel a Windows CE operációs