Latest ICS news

Microsoft pulls fix for Outlook bug behind ICS security alerts

Microsoft reversed the fix for an Outlook bug causing erroneous security warnings after installing December 2023 security updates
- Sergiu Gatlan
- April 23, 2024
- 05:50 PM
- 0
Microsoft fixes Outlook security alerts bug caused by December updates

Microsoft has fixed an issue that triggers erroneous Outlook security alerts when opening .ICS calendar files after installing the December 2023 Outlook Desktop security updates
- Sergiu Gatlan
- April 04, 2024
- 03:14 PM
- 0
Microsoft Outlook December updates trigger ICS security alerts

Microsoft is investigating an issue that triggers Outlook security alerts when trying to open .ICS calendar files after installing December 2023 Patch Tuesday Office security updates.
- Sergiu Gatlan
- February 05, 2024
- 05:03 PM
- 2
Russian hackers switch to LOTL technique to cause power outage

Russian state hackers have evolved their methods for breaching industrial control systems by adopting living-off-the-land techniques that enable reaching the final stage of the attack quicker and with less resources
- Ionut Ilascu
- November 09, 2023
- 06:12 AM
- 0
Researchers warn of 100,000 industrial control systems exposed online

About 100,000 industrial control systems (ICS) were found on the public web, exposed to attackers probing them for vulnerabilities and at risk of unauthorized access. Among them are power grids, traffic light systems, security and water systems.
- Bill Toulas
- October 04, 2023
- 01:35 PM
- 0
Rockwell warns of new APT RCE exploit targeting critical infrastructure

Rockwell Automation says a new remote code execution (RCE) exploit linked to an unnamed Advanced Persistent Threat (APT) group could be used to target unpatched ControlLogix communications modules commonly used in manufacturing, electric, oil and gas, and liquified natural gas industries.
- Sergiu Gatlan
- July 14, 2023
- 02:52 PM
- 0
New Russian-linked CosmicEnergy malware targets industrial systems

Mandiant security researchers have discovered a new OT known as CosmicEnergy that targets operational technology (OT), raising concerns about potential disruptions to electric power systems worldwide.
- Sergiu Gatlan
- May 25, 2023
- 11:27 AM
- 0
NSA shares guidance to help secure OT/ICS critical infrastructure

The National Security Agency (NSA) and CISA have issued guidance on how to secure operational technology (OT) and industrial control systems (ICSs) part of U.S. critical infrastructure.
- Sergiu Gatlan
- September 22, 2022
- 02:49 PM
- 1
Password recovery tool infects industrial systems with Sality malware

A threat actor is infecting industrial control systems (ICS) to create a botnet through password "cracking" software for programmable logic controllers (PLCs).
- Bill Toulas
- July 15, 2022
- 01:46 PM
- 0
Icefall: 56 flaws impact thousands of exposed industrial devices

A security report has been published on a set of 56 vulnerabilities that are collectively called Icefall and affect operational technology (OT) equipment used in various critical infrastructure environments.
- Bill Toulas
- June 21, 2022
- 07:20 AM
- 0
Hackers earn $400K for zero-day ICS exploits demoed at Pwn2Own

Pwn2Own Miami 2022 has ended with competitors earning $400,000 for 26 zero-day exploits (and several bug collisions) targeting ICS and SCADA products demoed during the contest between April 19 and April 21.
- Sergiu Gatlan
- April 21, 2022
- 02:07 PM
- 0
US warns of govt hackers targeting industrial control systems

A joint cybersecurity advisory issued by CISA, NSA, FBI, and the Department of Energy (DOE) warns of government-backed hacking groups being able to hijack multiple industrial devices using a new ICS-focused malware toolkit.
- Sergiu Gatlan
- April 13, 2022
- 01:53 PM
- 0
LockBit, Conti most active ransomware targeting industrial sector

Ransomware attacks extended into the industrial sector last year to such a degree that this type of incident became the number one threat in the industrial sector.
- Ionut Ilascu
- February 23, 2022
- 05:48 AM
- 0
‘Anomalous’ spyware stealing credentials in industrial firms

Researchers have uncovered several spyware campaigns that target industrial enterprises, aiming to steal email account credentials and conduct financial fraud or resell them to other actors.
- Bill Toulas
- January 20, 2022
- 04:29 PM
- 0
CISA: BadAlloc impacts critical infrastructure using BlackBerry QNX

CISA today warned that IoT and OT security flaws known as BadAlloc impact BlackBerry's QNX Real Time Operating System (RTOS) used by critical infrastructure organizations.
- Sergiu Gatlan
- August 17, 2021
- 02:16 PM
- 0
Microsoft releases Azure Defender for IoT in public preview

Microsoft announced today that Azure Defender for IoT, its agentless security solution for networked IoT and Operational Technology (OT) devices, has entered public preview.
- Sergiu Gatlan
- October 16, 2020
- 01:01 PM
- 0
Industrial VPN vulnerabilities put critical infrastructure at risk

Security researchers analyzing popular remote access solutions used for industrial control systems (ICS) found multiple vulnerabilities that could let unauthenticated attackers execute arbitrary code and breach the environment.
- Ionut Ilascu
- July 28, 2020
- 11:32 AM
- 0
New Actors Attack Industrial Control Systems, Old Ones Mature

Industrial control systems (ICS) across the world have become a larger target in 2019 as researchers discovered new threat actors attacking this sector while old ones have evolved and expanded their operations.
- Ionut Ilascu
- February 20, 2020
- 07:49 AM
- 0
Pwn2Own Hacking Event Expands to Industrial Control Systems

The Pwn2Own hacking competition that will take place in Miami South Beach in January 2020 will also include popular Industrial Control Systems (ICS) software for the first time.
- Sergiu Gatlan
- October 28, 2019
- 09:07 AM
- 0
Lyceum/Hexane Threat Group Uses Common Hacking Tactics

A recently reported threat group focusing on critical infrastructure organizations in the Middle East uses simple techniques to compromise victims and deploy post-intrusion tools.
- Ionut Ilascu
- August 27, 2019
- 10:46 AM
- 0