OT Security

Feds reverse order and reinstate FDA staff critical to medical device safety less than a week after firing them.

Threat actors with configuration page access to VersaLink printers with proper Lightweight Directory Access Protocol settings could enable IP address alterations and clear-text LDAP service credential compromise, according to Rapid7 researchers.

CISOs can no longer ignore the security of these often-outdated OT systems that if hacked, can bring an organization down.

Researchers at Akamai’s Security Intelligence and Response Team detected the malware leveraging a proof-of-concept exploit that was published in July 2024.

Threat actors have ramped up operational technology-targeted cyberattacks aimed at building automation systems, whose prevalence increased from 1% in 2023 to 9% in 2024, even if industrial automation protocols continue to account for a bulk of OT intrusions, recording an increase from 71% to 79% during the same period.

After inputting valid employee emails to infiltrate Starlink's admin panel hosted on a subarucs.com subdomain, threat actors could perform password resets, omit client-side overlay, and evade two-factor authentication to access the panel's features and determine different types of customer and vehicle information, including names, vehicle identification numbers, and location details.