CVE-2021-44228-Log4j

在应用于生产系统之前，请先测试此内容。 使用方法 从以下发布页面下载最新包：https://github.com/VerveIndustrialProtection/CVE-2021-44228-Log4j/releases 然后将其导入站点并应用计算机订阅。 检测方法 每个支持的操作系统有三种可用的检测方法。在使用这些检测方法之前，了解它们之间的差异非常重要。 也就是说，所有检测方法的使用方式完全相同。您只需针对设备使用特定操作系统的检测 Fixlet 执行操作，然后使用通用 Warning- Fixlet 或用于分类信息的通用分析来查看结果。 所有检测方法都能正确地对...

The vulnerability of the TXOne StellarOne centralized control panel of the TXOne StellarProtect industrial protection system, related to access control deficiencies, allows attackers to increase their privileges.

The vulnerability of the TXOne StellarOne centralized control panel of the TXOne StellarProtect industrial protection device is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to increase their privileges remotely...

Cyber Intelligence Asia 2014: CERTs and Industrial Security

In March I spoke at Cyber Intelligence Asia 2014, where CERTs from most Asians countries were presented. The fact is that only a few CERTs are now dealing in some way with industrial security, ICS and SCADA matters. One of the best of those is CERT of Japan, which is doing a great job here, and...

Is It Time for Certified ICS Security Specialists?

The information security field is full of certifications – CompTIA, GIAC, CHE, ISC2 CISSP, CISM, with a vast number of areas and directions within these families. In the industrial space, the most “unsecured” enterprise sector compared to well-established information security practice in most...