(U//FOUO) National Counterterrorism Center Weekly Report – September 8 to 15, 2015

VMWare Releases Security Update

Cisco Releases Security Updates

Possible September 11 Cyber Threats from Islamic State-Sympathetic Hacking Group – Updated September 16, 2015

Internet Systems Consortium Releases Security Updates for BIND

Advantech WebAccess Buffer Overflow Vulnerability (ICS-CERT Advisory 15-251-01) – Product Used in the Energy Sector – Updated September 15, 2015

Schneider Electric StruxureWare Building Expert Plaintext Credentials Vulnerability (ICS-CERT Advisory 15-258-01)

Advantech WebAccess Stack-Based Buffer Overflow Vulnerability (ICS-CERT Advisory 15-258-04) – Product Used in the Energy Sector

3S CODESYS Gateway Server Buffer Overflow Vulnerability (ICS-CERT Advisory 15-258-02) – Product Used in the Energy Sector

GE MDS PulseNet Vulnerabilities (ICS-CERT Advisory 15-258-03) – Products Used in the Water and Wastewater and Energy Sectors

September 15, 2015 WaterISAC Pro Update

Supply Chain Integrity: An Overview of the ICT Supply Chain Risks and Challenges, and a Vision for the Way Forward