Industrial Control Systems Cyber Emergency Response Team - News, Features, and Slideshows

News

• New malware program used in attacks against energy sector companies

  A new malware program is being used to do reconnaissance for targeted attacks against companies in the energy sector.

• Siemens patches critical flaws in industrial wireless gear

  Siemens released critical security patches for the firmware in its Ruggedcom WIN products which are used as broadband wireless base stations in industrial environments.

• Exploits for dangerous network time protocol vulnerabilities can compromise systems

  Remote code execution vulnerabilities in the standard implementation of the network time protocol (NTP) can be exploited by attackers to compromise servers, embedded devices and even critical infrastructure systems that run UNIX-like operating systems.

• Siemens patches critical SCADA flaws likely exploited in recent attacks

  Siemens released security updates for several of its SCADA (supervisory control and data acquisition) products for industrial environments, in order to fix critical vulnerabilities that may have been exploited in recent attacks.

• Attack campaign infects industrial control systems with BlackEnergy malware

  Since 2011 a group of attackers has been targeting companies that operate industrial control systems with a backdoor program called BlackEnergy.

• Public utility compromised after brute-force attack, DHS says

  A public utility in the U.S. was compromised after attackers took advantage of a weak password security system, according to a U.S. Department of Homeland Security team that studies cyberattacks against critical infrastructure.

• US warns of problems in Chinese SCADA software

  Two vulnerabilities found in industrial control system software made in China but used worldwide could be remotely exploited by attackers, according to a warning issued on Thursday by the U.S. Industrial Control Systems Cyber Emergency Response Team (ICS-CERT).