Ivanti has released a security update for an OS command injection vulnerability in Ivanti Cloud Services Appliance 4.6. Exploitation is limited, but users should upgrade to version 5.0 as CSA 4.6 is no longer supported.

CISA’s FY23 RVAs reveal common cyber weaknesses. Their new analysis and infographic map these vulnerabilities to the MITRE ATT&CK framework, showing how cyber threat actors exploit them. Network defenders, take note!

Siemens has released updates for SIMATIC RFID Readers to address vulnerabilities, including hidden functionality and improper access control. For the latest advisories, visit Siemens’ ProductCERT. Remember, folks, even your industrial gadgets need regular check-ups to avoid nasty surprises!

For the latest Siemens product vulnerabilities, CISA will no longer update advisories beyond January 10, 2023. Check Siemens’ ProductCERT Security Advisories for updates.

As of January 10, 2023, CISA will no longer update ICS security advisories for Siemens product vulnerabilities beyond the initial advisory. For the latest on Siemens vulnerabilities, visit Siemens’ ProductCERT Security Advisories. Remember, if you can’t secure your SCALANCE W700, it’s like leaving your front door open with a “Welcome Hackers” mat.

CISA will stop updating ICS security advisories for Siemens product vulnerabilities as of January 10, 2023. For the latest info, check Siemens’ ProductCERT Security Advisories.

Attention all ControlLogix and CompactLogix users: there’s a new vulnerability in town! With a CVSS score of 8.7, this flaw in Rockwell Automation devices could leave your systems as unresponsive as a Monday morning. Make sure to update your software or risk a factory reset headache!

View CSAF: Rockwell Automation’s 5015-U8IHFT I/O module has an improper input validation flaw, CVE-2024-45825, with a CVSS v4 score of 8.7. Exploitable remotely, it can cause a denial-of-service. Update to version 2.011 or follow best practices to mitigate risks.

CISA will stop updating ICS security advisories for Siemens product vulnerabilities beyond the initial advisory as of January 10, 2023. For the latest info, check Siemens’ ProductCERT Security Advisories. In short: if you want the scoop on vulnerabilities, Siemens is now your go-to, not CISA.

CISA will no longer update ICS security advisories for Siemens product vulnerabilities. For current details, consult Siemens’ ProductCERT Security Advisories.

CISA will stop updating ICS security advisories for Siemens product vulnerabilities after the initial notice. For the freshest scoop, check out Siemens’ ProductCERT Security Advisories.

Attention, defenders of the cyber realm! AutomationDirect’s DirectLogic H2-DM1E is under siege by session fixation and authentication bypass vulnerabilities. With a CVSS v4 score of 8.7, these weaknesses could allow an attacker to hijack sessions faster than you can say “network segmentation.” Upgrade to the BRX platform and keep the hackers at bay!

CISA will stop updating ICS security advisories for Siemens product vulnerabilities after the initial notification. For the latest updates, check Siemens’ ProductCERT Security Advisories.

As of January 10, 2023, CISA stops updating ICS security advisories for Siemens products. For the latest on Siemens SINUMERIK systems vulnerabilities, check Siemens’ ProductCERT Security Advisories.

Siemens has released updates for SIMATIC RFID Readers to address vulnerabilities, including hidden functionality and improper access control. For the latest advisories, visit Siemens’ ProductCERT. Remember, folks, even your industrial gadgets need regular check-ups to avoid nasty surprises!

CISA drops a quartet of ICS advisories, revealing the latest security plot twists in the world of Industrial Control Systems. Users and admins, grab your popcorn and review these bulletins for crucial details and mitigations!

CISA has added four new vulnerabilities to its Known Exploited Vulnerabilities Catalog, including CVE-2024-43491. These vulnerabilities are prime targets for cybercriminals, posing significant risks to federal enterprises.

Tune into the ISC Stormcast for Wednesday, September 11th, 2024, where we navigate cyber threats with the precision of a caffeinated squirrel on a power line. Get the latest updates and stay ahead of the game!

Baxter’s Connex Health Portal has a CVSS v3.1 score of 10.0 due to SQL Injection and Improper Access Control vulnerabilities. Hackers could remotely exploit these issues to mess with sensitive data or shut down databases faster than you can say “cybersecurity nightmare.”

Security vulnerabilities fixed in Thunderbird 128.2 include high-impact issues like CVE-2024-8394, which could cause a crash when aborting OTR chat verification, and CVE-2024-8385, involving WASM type confusion. Thunderbird users, update now to stay protected!