You are here

Home » Cybersecurity

Cybersecurity

Multiple Vulnerabilities in Pulse Secure VPN

The CERT Coordination Center (CERT/CC) has released information on multiple vulnerabilities affecting Pulse Secure Virtual Private Network (VPN). An attacker could exploit these vulnerabilities to take control of an affected system. These vulnerabilities have been targeted by advanced persistent threat (APT) actors. The DHS Cybersecurity and Infrastructure Security Agency (CISA) encourages users and administrators to review the resources for more information and to apply the necessary updates.

Oracle Releases October 2019 Security Bulletin

Oracle has released its Critical Patch Update for October 2019 to address 219 vulnerabilities across multiple products. A remote attacker could exploit some of these vulnerabilities to take control of an affected system. The DHS Cybersecurity and Infrastructure Security Agency (CISA) encourages users and administrators to review the Oracle October 2019 Critical Patch Update and apply the necessary updates.

Still Struggling with Passwords – SecureIT. with Stronger Passwords

It is no secret that passwords alone are not the best method to safeguard our digital assets, especially weak passwords. Password hygiene is a leading topic any time of year, but as NCSAM continues it is a good time for another reminder for organizations to do better to protect data they are entrusted. Password security firm LastPass recently published its’ 3rd Annual Global Password Security Report which highlights how employees’ continued poor password habits weaken the overall organizational security posture.

Siemens SIMATIC WinCC and PCS7 (Update C) (ICSA-19-192-02) – Product Used in the Water and Wastewater and Energy Sectors

October 10, 2019

CISA has updated this advisory with additional information on affected products and mitigation measures. Read the update at CISA.

September 10, 2019

The NCCIC has updated this advisory with additional details on the affected products and mitigation measures. Read the advisory at CISA.

August 13, 2019

Siemens SIMATIC PCS 7, WinCC, TIA Portal (Update D) (ICSA-19-134-08) – Products Used in the Water and Wastewater and Energy Sectors

October 10, 2019

CISA has updated this advisory with additional details on the affected products and mitigation measures. Read the advisory at CISA.

September 10, 2019

The NCCIC has updated this advisory with additional details on the affected products and mitigation measures. Read the advisory at CISA.

August 13, 2019

Siemens Industrial Products Local Privilege Escalation Vulnerability (Update I) (ICS-CERT Advisory 16-313-02) – Product Used in Energy and Water and Wastewater Systems Sectors

October 10, 2019

CISA has updated this advisory with additional information on affected products and mitigation measures. Read the update at CISA.

January 28, 2018

ICS-CERT has updated this advisory with additional details on affected products and mitigation measures. ICS-CERT.

June 20, 2017

Tags: 
ics-cert siemens

Make the Most Out of National Cybersecurity Awareness Month with Free Resources from DHS

As part of National Cybersecurity Awareness Month (NCSAM), the U.S. Department of Homeland Security has recently released a variety of new resources to raise awareness and provide partners with the information and tools to enhance cybersecurity at the home and in the workplace. These resources include guides that pertain to this year’s NCSAM theme of “Own IT. Secure IT.

ACSC Releases Small Business Cybersecurity Guide

The Australian Cyber Security Centre (ACSC) has released a cybersecurity guide for small businesses. The guide provides checklists to help small business protect themselves against common cybersecurity incidents. The ACSC also has a suite of other resources for small businesses, including “step-by-step” guides for backing up and restoring a computer and turning on automatic updates and “quick wins” documents for portable device and website security. For these resources, refer to the Small Business Cyber Security suite at cyber.gov.au. 

iTerm2 Vulnerability

The CERT Coordination Center (CERT/CC) has released information on a vulnerability (CVE-2019-9535) affecting iTerm2, a macOS terminal emulator. An attacker could exploit this vulnerability to take control of an affected system.

Siemens SIMATIC, SINUMERIK, and PROFINET IO (Update D) (ICSA-18-079-02) – Products Used in the Water and Wastewater and Energy Sectors

October 8, 2019

CISA has updated this advisory with additional information on affected products and mitigation measures. Read the advisory at CISA.

May 14, 2019

The NCCIC has updated this advisory with additional information on the technical details of the vulnerability and mitigation measures. Read the advisory at NCCIC/ICS-CERT.

Tags: 
ics-cert siemens

Pages

Subscribe to Cybersecurity