1508 matches found
CISA Releases Final Binding Operational Directive on Developing a Vulnerability Disclosure Policy
The Cybersecurity and Infrastructure Security Agency CISA has released Binding Operational Directive BOD 20-01, Develop and Publish a Vulnerability Disclosure Policy VDP. BOD 20-01 requires each federal agency to publish a VDP. Publication of agency VDPs will make it easier for users to report...
The vulnerability of the NPort IAW5000A-I/O Series web server software lies in the lack of protection for service data, which allows attackers to disclose the protected information.
The vulnerability of the NPort IAW5000A-I/O Series web server software is related to the lack of protection for operational data. Exploiting this vulnerability can allow a malicious actor to disclose the protected information remotely...
A Hands-On Introduction to Mandiant's Approach to OT Red Teaming
Operational technology OT asset owners have historically considered red teaming of OT and industrial control system ICS networks to be too risky due to the potential for disruptions or adverse impact to production systems. While this mindset has remained largely unchanged for years, Mandiant's...
The vulnerability of InnoDB component in the Oracle MySQL Server database management system allows a hacker to gain unauthorized access to protected information.
The vulnerability of the InnoDB component in the Oracle MySQL Server database management system is related to the lack of protection for operational data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information using the MySQL...
The vulnerability of the “hidden mode” component of the LibreOffice office suite, which allows a hacker to gain access to confidential data
The vulnerability of the LibreOffice office suite is related to the lack of protection for operational data. Exploiting this vulnerability can allow a malicious actor to gain access to confidential information...
The vulnerability of the Core component of the Oracle VM VirtualBox software allows a hacker to gain unauthorized access to protected information.
The vulnerability of the Core component of the Oracle VM VirtualBox software lies in the lack of protection for operational data. Exploiting this vulnerability can allow an intruder to gain unauthorized access to protected information...
Podcast: Learning to ‘Speak the Language’ of OT Security Teams
Andrew Ginter, VP Industrial Security at Waterfall Security Solutions. Information technology IT and operational technology OT may have many of the same objectives – but too often they don’t see eye-to-eye when it comes to top priorities, said Andrew Ginter, VP Industrial Security at Waterfall...
dazzleUP - A Tool That Detects The Privilege Escalation Vulnerabilities Caused By Misconfigurations And Missing Updates In The Windows OS
A tool that detects the privilege escalation vulnerabilities caused by misconfigurations and missing updates in the Windows operating systems. dazzleUP detects the following vulnerabilities. Exploit Checks The first feature of dazzleUP is that it uses Windows Update Agent API instead of WMI like...
The vulnerability of Microsoft Office, Microsoft Word, and Microsoft SharePoint packages lies in the lack of protection for operational data, which allows attackers to gain unauthorized access to protected information.
The vulnerability of Microsoft Office, Microsoft Word, and Microsoft SharePoint lies in the lack of protection for operational data. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information through a specially created file...
Industrial VPN Flaws Could Let Attackers Target Critical Infrastructures
Cybersecurity researchers have discovered critical vulnerabilities in industrial VPN implementations primarily used to provide remote access to operational technology OT networks that could allow hackers to overwrite data, execute malicious code, and compromise industrial control systems ICS. A n...
The vulnerability of the centralized management system of McAfee Network Security Management (NSM) is related to the lack of protection for operational data, allowing attackers to gain unauthorized access to protected information.
The vulnerability of the centralized management system of McAfee Network Security Management NSM is related to the lack of protection for operational data. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information by executing specially created...
The vulnerability of the microprogrammed industrial Ethernet switch Moxa MGate 5105-MB-EIP lies in the lack of protection for operational data, allowing an intruder to gain unauthorized access to the protected information.
The vulnerability of the microprogrammed industrial Ethernet switch Moxa MGate 5105-MB-EIP lies in the lack of protection for operational data. Exploiting this vulnerability could allow an intruder to gain unauthorized access to protected information...
Unique Threats to Operational Technology and Cyber Physical Systems
In this latest episode of our Eye on Security podcast, I talk all about the world of operational technology OT and cyber physical systems with one of our foremost experts on the topic: Nathan Brubaker, Senior Manager of Analysis for Mandiant Threat Intelligence. Nathan kicked off our chat by...
Financially Motivated Actors Are Expanding Access Into OT: Analysis of Kill Lists That Include OT Processes Used With Seven Malware Families
Mandiant Threat Intelligence has researched and written extensively on the increasing financially motivated threat activity directly impacting operational technology OT networks. Some of this research is available in our previous blog posts on industrial post-compromise ransomware and FireEye's...
Siemens SIMATIC HMI Panels
1. EXECUTIVE SUMMARY CVSS v3 5.7 ATTENTION: Exploitable remotely/low skill level to exploit Vendor: Siemens Equipment: SIMATIC HMI Panels Vulnerability: Cleartext Transmission of Sensitive Information 2. RISK EVALUATION Successful exploitation of this vulnerability could allow an attacker to...
Podcast: Securing Railway Systems Against Hacks
Dr. Jesus Molina Railway systems are becoming increasingly digital – from digital signaling systems to remote monitoring functions – and this is opening the door for sophisticated bad actors to launch various malicious cyberattacks. Dr. Jesus Molina, director of Industrial IOT with Waterfall...
Beyond the Endpoint: Why Organizations are Choosing XDR for Holistic Detection and Response
The endpoint has long been a major focal point for attackers targeting enterprise IT environments. Yet increasingly, security bosses are being forced to protect data across the organization, whether it’s in the cloud, on IoT devices, in email, or on-premises servers. Attackers may jump from one...
The vulnerability of the command-line interface (CLI) of the Cisco Network Services Orchestrator software allows a hacker to disclose protected information.
The vulnerability of the command-line interface CLI of the Cisco Network Services Orchestrator software lies in the lack of protection for operational data. Exploiting this vulnerability can allow an attacker to disclose sensitive information that is supposed to be secure...
CVE-2020-12040
Sigma Spectrum Infusion System v's6.x model 35700BAX and Baxter Spectrum Infusion System Versions 8.x model 35700BAX2 at the application layer uses an unauthenticated clear-text communication channel to send and receive system status and operational data. This could allow an attacker that has...