OT Security

CISA – Cybersecurity and Infrastructure Security Agency displaye

Critical Infrastructure Security

Patch/Configuration Management

News

Alerts for flaws in industrial control systems include Siemens, Aveva


<ul class="wp-block-list">
<li>You got a Bad box, again</li>


<li>Cameras are expose to the Internet</li>


<li>EU and connected devices</li>


<li>Hydrophobia</li>


<li>NVRAM variables</li>


<li>Have you heard about IGEL Linux?</li>


<li>SSH and more NVRAM</li>


<li>AI skeptics are nuts, and AI doesn't make you more efficient</li>


<li>Trump Cybersecurity orders</li>


<li>I think I can root my Pixel 6</li>


<li>Decentralized Wordpres plugin manager</li>


<li>Threat actor naming conventions</li>


<li>I have the phone number linked to your Google account</li>


<li>Fortinet flaws exploited in ransomeware attacks (and how lack of information sharing is killing us)</li>


<li>retiring floppy disks</li>


<li>fault injection for the masses</li>


<li>there is no defender</li>


<li>AI blackmails</li>
</ul>


<body><ul><li>You got a Bad box, again</li><li>Cameras are expose to the Internet</li><li>EU and connected devices</li><li>Hydrophobia</li><li>NVRAM variables</li><li>Have you heard about IGEL Linux?</li><li>SSH and more NVRAM</li><li>AI skeptics are nuts, and AI doesn't make you more efficient</li><li>Trump Cybersecurity orders</li><li>I think I can root my Pixel 6</li><li>Decentralized Wordpres plugin manager</li><li>Threat actor naming conventions</li><li>I have the phone number linked to your Google account</li><li>Fortinet flaws exploited in ransomeware attacks (and how lack of information sharing is killing us)</li><li>retiring floppy disks</li><li>fault injection for the masses</li><li>there is no defender</li><li>AI blackmails</li></ul></body>

Featured image for {“vendor”:”ppworks”,”type”:”segment”,”id”:”13896″} podcast from PPWorks

Supply chain

Government Regulations

UEFI Vulnerabilities Galore  – PSW #878

Road map of blue location pin icon symbol or gps travel route navigation marker and transportation place pointer direction street sign on city background with transport destination way. 3D render.

Vulnerability Management

Brief

CISA: Significant flaws impacting SinoTrack GPS devices

<body>Vixen Panda, NPM, Roundcube, IoT, 4Chan, Josh Marpet, and more on the Security Weekly News.</body>

<body><p>Vixen Panda, NPM, Roundcube, IoT, 4Chan, Josh Marpet, and more on the Security Weekly News.</p></body>

Featured image for {“vendor”:”ppworks”,”type”:”segment”,”id”:”13926″} podcast from PPWorks

API security

Vixen Panda, NPM, Roundcube, IoT, 4Chan, Josh Marpet, and more… – SWN #484

<body>CISA has been championing Secure by Design principles. Many of the principles are universal, like adopting MFA and having opinionated defaults that reduce the need for hardening guides. Matthew Rogers talks about how the approach to Secure by Design has to be tailored for Operational Technology (OT) systems. These systems have strict requirements on safety and many of them rely on protocols that are four (or more!) decades old. He explains how the considerations in this space go far beyond just memory safety concerns.</body>

<body><p>CISA has been championing Secure by Design principles. Many of the principles are universal, like adopting MFA and having opinionated defaults that reduce the need for hardening guides. Matthew Rogers talks about how the approach to Secure by Design has to be tailored for Operational Technology (OT) systems. These systems have strict requirements on safety and many of them rely on protocols that are four (or more!) decades old. He explains how the considerations in this space go far beyond just memory safety concerns.</p></body>


<ul class="wp-block-list">
<li><a rel="noopener" target="_blank" href="https://www.cisa.gov/sites/default/files/2025-01/joint-guide-secure-by-demand-priority-considerations-for-ot-owners-and-operators-508c_0.pdf">https://www.cisa.gov/sites/default/files/2025-01/joint-guide-secure-by-demand-priority-considerations-for-ot-owners-and-operators-508c_0.pdf</a></li>


<li><a rel="noopener" target="_blank" href="https://www.youtube.com/watch?v=vHSXu1P4ZTo">https://www.youtube.com/watch?v=vHSXu1P4ZTo</a></li>
</ul>


<body><ul><li><a rel="noreferrer noopener" target="_blank" href="https://www.cisa.gov/sites/default/files/2025-01/joint-guide-secure-by-demand-priority-considerations-for-ot-owners-and-operators-508c_0.pdf">https://www.cisa.gov/sites/default/files/2025-01/joint-guide-secure-by-demand-priority-considerations-for-ot-owners-and-operators-508c_0.pdf</a></li><li><a rel="noreferrer noopener" target="_blank" href="https://www.youtube.com/watch?v=vHSXu1P4ZTo">https://www.youtube.com/watch?v=vHSXu1P4ZTo</a></li></ul></body>

OT Security

Alerts for flaws in industrial control systems include Siemens, Aveva

UEFI Vulnerabilities Galore – PSW #878

CISA: Significant flaws impacting SinoTrack GPS devices

Vixen Panda, NPM, Roundcube, IoT, 4Chan, Josh Marpet, and more… – SWN #484

Bringing CISA’s Secure by Design Principles to OT Systems – Matthew Rogers – ASW #334

Why companies must solve the IT/OT challenge

TBK DVRs targeted by updated Mirai botnet

Fast Five

Selected by the SC Media Editorial team every Tuesday.