15 November 2017
Vendors Confirm That Industrial Solutions Are Vulnerable to KRACK Attacks
Several companies, including Cisco, Rockwell Automation, Sierra Wireless, ABB and Siemens, have reported vulnerabilities in their industrial devices. The vendors are preparing updates to close these vulnerabilities and will release the patches as they are ready.
09 November 2017
New Botnet Recruits IoT Devices Across the Globe
The Reaper IoT botnet includes about 10-20 thousand infected devices, with some of these devices possibly being used by industrial enterprises, hospitals, railway terminals and airports
26 October 2017
Bad Rabbit, Brother of [Ex]Petr
Kaspersky Lab experts believe that the same threat actor is behind ExPetr and Bad Rabbit
25 October 2017
US-CERT Reports APT Attack on Critical Infrastructure
US-CERT has published a report on a targeted (APT) attack on government entities and organizations in energy, nuclear, aviation and other sectors. The attackers were interested in documents on industrial processes in targeted organizations.
18 October 2017
WPA2 Vulnerabilities Can Be Used to Attack Industrial Systems
On October 16, information on critical vulnerabilities in the WPA2 protocol, which enable attackers to bypass protection and listen to Wi-Fi traffic, was disclosed. Comments from Kaspersky Lab ICS CERT experts
15 September 2017
MITRE Grants Kaspersky Lab CVE Numbering Authority (CNA) Status
The MITRE Corporation has recognized Kaspersky Lab as an authority in the area of vulnerabilities, granting the company the CVE Numbering Authority (CNA) status.
15 September 2017
New Attack Vector Affecting Bluetooth Devices
Researches from Armis Labs have identified a new attack vector, dubbed BlueBorne, that endangers mobile, desktop and IoT operating systems, including Android, iOS, Windows, and Linux.
13 September 2017
IBM Security Report on Cyber Security Risks in the Energy and Utilities Sector
IBM X-Force has published a report on cyber security risks in the energy and utilities sector.
07 September 2017
New Wave of Cyberattacks in the Energy Sector of Europe and North America
Symantec has published a report on new cyberattacks targeting the energy sector in Europe and North America.
07 September 2017
Closing an XXE Vulnerability in Siemens Industrial Solutions
US ICS-СERT has published an advisory on fixes for a vulnerability in Siemens industrial products using the Discovery Service of the OPC UA protocol stack.