Cyberattack suspected of causing rocket-attack false alarms in Israel. Risk surface assessments. Fitness app’s geolocation feature may be a privacy and security risk.

Patch information.

The US Cybersecurity and Infrastructure Safety Company (CISA) Tuesday released six industrial management system (ICS) safety advisories, for Mitsubishi Electric MELSEC Q and L Series (with “mitigations for an Improper Useful resource Locking vulnerability in Mitsubishi Electrical MELSEC Q and L Collection CPUs”), JTEKT TOYOPUC (“mitigations for a Lacking Authentication for Crucial Perform vulnerability within the JTEKT TOYOPUC programmable logic controller”), Phoenix Contact Classic Line Controllers (“mitigations for an Inadequate Verification of Knowledge Authenticity vulnerability within the Phoenix Contact Basic Line Controllers”), Phoenix Contact ProConOS and MULTIPROG (addressing “an Inadequate Verification of Knowledge Authenticity vulnerability within the Phoenix Contact ProConOS and MULTIPROG software program improvement package”), Phoenix Contact Classic Line Industrial Controllers (“mitigations for a Lacking Authentication for Crucial Perform Inadequate Verification of Knowledge Authenticity vulnerability within the Phoenix Contact Basic Line Industrial Controllers), and, lastly, Siemens WinCC OA (with “mitigations for a Use of Consumer-side Authentication vulnerability within the Siemens SIMATIC WinCC OA software program administration platform”).

Comments

0 comments