Posts for category: ICS Weekly Executive Summaries

Cybersecurity Incident Costing Energy Service Provider Tens of Millions

Executive Summary One of the world’s largest oil service providers, Halliburton, is still recovering from a cybersecurity incident which occurred on August 24th. [1] Although the full extent of ...

New Functionality Revealed for Palo Alto Networks OT Cybersecurity Solutions

Executive Summary During SecurityWeek’s ICS Cybersecurity Conference in October Palo Alto Networks showcased many new features being added to their operational technology (OT) solutions allowing ...

Critical Vulnerabilities Found in Industrial Routers

Executive Summary On October 15, 2024, CERT@VDE released an advisory for a vulnerable industrial router produced by MB Connect Line. [3] The mbNET.mini router, produced by MB Connect Line, is a VPN ...

Vulnerabilities Discovered on Elvaco M-Bus Metering Gateway CMe3100

Executive Summary Four vulnerabilities have been identified with Elvaco’s M-Bus Metering Gateway CMe3100. The vulnerabilities found could allow attackers to take control of admin accounts, execute ...

Schneider Electric Data Center Expert Advisory

Executive Summary The Cybersecurity and Infrastructure Security Agency (CISA) released an advisory for the Data Center Expert on October 15th. The Data Center Expert is an industrial control system ...

FrostyGoop the New Addition to ICS Specific Malware

Executive Summary The Stuxnet attack in 2010 is the first known instance of specialized industrial control system (ICS) malware being used to cripple industry within a major nation state. Fourteen ...

Critical Vulnerabilities Uncovered in Automatic Tank Gauges

Executive Summary Bitsight TRACE, a security and research intelligence team, recently uncovered critical vulnerabilities found within several automatic tank gauging systems (ATGs) across multiple ...

CyberAv3ngers Compromise Unitronics PLCs

Executive Summary The water and wastewater sector plays a crucial role in health and public safety, as it is responsible for delivering clean drinking water and properly treating wastewater for ...

Delta Electronics InfraSuite Device Master

Executive summary On Tuesday, November 28, 2023, the Cybersecurity and Infrastructure Security Agency (CISA) released an industrial control system advisory (ICSA-23-331-01) regarding multiple ...

General Electric MiCOM S1 Agile Vulnerability

Executive summary On Tuesday, November 07, 2023, the Cybersecurity and Infrastructure Security Agency (CISA) released an industrial control system advisory  (ICSA-23-311-01) regarding a ...