1914 matches found
CISA Malcolm
RECOMMENDED PRACTICES CISA recommends users take defensive measures to minimize the risk of exploitation of these vulnerabilities. Minimize network exposure for all control system devices and/or systems, ensuring they are not accessible from the internet. Locate control system networks and...
Poster: Towards Selecting Threat Appropriate Industrial Intrusion Detection Systems
As the threat landscape against industrial control systems is dynamic, effective security requires detection strategies capable of timely reactions to these evolving threat situations. To address this problem, we propose the idea of a counter-threat intelligence sharing based mechanism to select...
CVE-2026-87020
creationtimestamp| type| source ---|---|--- 2026-09-10 16:15:27+00:00| seen| https://www.cisa.gov/news-events/ics-medical-advisories/icsma-26-253-02 2026-09-10 20:01:51+00:00| seen| https://bsky.app/profile/cyfar.ca/post/3mv6ts5ifxy2y...
CVE-2026-38058
creationtimestamp| type| source ---|---|--- 2026-09-10 16:15:24+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-26-183-01...
CVE-2026-81824
creationtimestamp| type| source ---|---|--- 2026-09-10 16:15:10+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-26-253-01...
CVE-2026-81823
creationtimestamp| type| source ---|---|--- 2026-09-10 16:15:07+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-26-253-01 2026-09-11 04:02:58+00:00| seen| https://bsky.app/profile/cyfar.ca/post/3mv7ooi23as2g...
CVE-2026-81822
creationtimestamp| type| source ---|---|--- 2026-09-10 16:15:05+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-26-253-01 2026-09-11 04:02:58+00:00| seen| https://bsky.app/profile/cyfar.ca/post/3mv7ooi23as2g...
CVE-2026-81821
creationtimestamp| type| source ---|---|--- 2026-09-10 16:15:03+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-26-253-01 2026-09-11 04:02:58+00:00| seen| https://bsky.app/profile/cyfar.ca/post/3mv7ooi23as2g...
CVE-2026-38056
creationtimestamp| type| source ---|---|--- 2026-09-10 16:07:33+00:00| seen| https://bsky.app/profile/cyfar.ca/post/3mv6gp7bwml2q 2026-09-10 16:15:12+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-26-183-01 2026-09-11 16:07:58+00:00| seen|...
CVE-2026-82578
creationtimestamp| type| source ---|---|--- 2026-09-10 16:05:49+00:00| seen| https://bsky.app/profile/cyfar.ca/post/3mv6gm3rxy52o 2026-09-10 16:15:33+00:00| seen| https://www.cisa.gov/news-events/ics-medical-advisories/icsma-26-253-01...
icalendar-events-cli (2.0.1), ics-query (>=0.5.19, <=0.5.25) potentially affected by CVE-2026-55099 via icalendar (>=7.1.0, <=7.1.2)
icalendar PYPI version =7.1.0, =0.5.19, =0.5.25 Source cves: CVE-2026-55099 Source advisory: OSV:PYSEC-2026-3851...
PT-2026-89045
News: Schneider Electric, Siemens, and Aveva ship ICS Patch Tuesday. Worst new hit: Modicon M580 auth CVE-2026-3869 CVSS 9.2. Siemens flags critical Reyrolle 7SR5, OIS, Industrial Edge bugs. OT owners: patch controllers now. https://t.co/TT7I5NW8Ee...
CVE-2026-72983
Use after free in Windows Internet Connection Sharing ICS allows an unauthorized attacker to execute code over a network...
CVE-2026-72964
Missing authentication for critical function in Windows Internet Connection Sharing ICS allows an authorized attacker to perform tampering locally...
EUVD-2026-73677
Missing authentication for critical function in Windows Internet Connection Sharing ICS allows an authorized attacker to perform tampering locally...
CVE-2026-72964
CVE-2026-72964 is a missing authentication vulnerability in Windows Internet Connection Sharing (ICS) . An attacker with low-level local privileges can tamper with critical ICS functions, resulting in a high integrity impact without affecting confidentiality or availability. The CVSS 3.1 score is...
EUVD-2026-73256
Use after free in Windows Internet Connection Sharing ICS allows an unauthorized attacker to execute code over a network...
CVE-2026-72983
CVE-2026-72983 is a use-after-free vulnerability in Windows Internet Connection Sharing (ICS) that allows an unauthorized remote attacker to achieve remote code execution over the network. The CVSS 3.1 score is 9.8 (Critical) with no privileges or user interaction required. CISA's SSVC assessment...
CVE-2026-72926
CVE-2026-72926 is a use-after-free vulnerability in Windows Internet Connection Sharing (ICS) that allows an authorized attacker to achieve local privilege elevation . The CVSS v3.1 score is 7.0 (HIGH) with a local attack vector, high complexity, and low privileges required; impact is rated high ...