CISA unveils 25 new advisories for Industrial Control Systems

CISA issued 25 ICS advisories on September 12, 2024, detailing current security issues, vulnerabilities, and exploits in Industrial Control Systems.

ICSA-24-256-01 Siemens SINEMA Remote Connect Server
ICSA-24-256-02 Siemens SINUMERIK ONE, SINUMERIK 840D and SINUMERIK 828D
ICSA-24-256-03 Siemens User Management Component (UMC)
ICSA-24-256-04 Siemens SINUMERIK Systems
ICSA-24-256-05 Siemens Mendix Runtime
ICSA-24-256-06 Siemens Automation License Manager
ICSA-24-256-07 Siemens SIMATIC RFID Readers
ICSA-24-256-08 Siemens Industrial Products
ICSA-24-256-09 Siemens SIMATIC, SIPLUS, and TIM
ICSA-24-256-10 Siemens SINEMA
ICSA-24-256-11 Siemens Industrial Edge Management
ICSA-24-256-12 Siemens Tecnomatix Plant Simulation
ICSA-24-256-13 Siemens SCALANCE W700
ICSA-24-256-14 Siemens SIMATIC SCADA and PCS 7 Systems
ICSA-24-256-15 Siemens Industrial Products
ICSA-24-256-16 Siemens Third Party Component in SICAM and SITIPE Products
ICSA-24-256-17 AutomationDirect DirectLogic H2-DM1E
ICSA-24-256-18 Rockwell Automation ControlLogix/GuardLogix 5580 and CompactLogix/Compact GuardLogix 5380
ICSA-24-256-19 Rockwell Automation OptixPanel
ICSA-24-256-20 Rockwell Automation AADvance Trusted SIS Workstation
ICSA-24-256-21 Rockwell Automation 5015-U8IHFT
ICSA-24-256-22 Rockwell Automation FactoryTalk Batch View
ICSA-24-256-23 Rockwell Automation FactoryTalk View Site
ICSA-24-256-24 Rockwell Automation Pavilion8
ICSA-24-256-25 Rockwell Automation ThinManager

• Alert
• Vulnerabilities

Chrome 129 Released Fix with multiple Security Flaws

By infosecbulletin / Wednesday , September 18 2024

Google has released Chrome 129 for Windows, Mac, and Linux users. The update will be available gradually over the next...

Read More

• Cyber Attack
• Vulnerabilities

Broadcom fixed RCE bug in VMware vCenter Server

By infosecbulletin / Wednesday , September 18 2024

Broadcom has fixed a serious VMware vCenter Server vulnerability that allows attackers to execute remote code on unpatched servers through...

Read More

• Cyber Attack
• Vulnerabilities

Cybercriminal now misuse Microsoft Azure tool to steal data

By infosecbulletin / Wednesday , September 18 2024

Ransomware groups like BianLian and Rhysida use Microsoft's Azure Storage Explorer and AzCopy to steal data from hacked networks and...

Read More

• Vulnerabilities

Apple warns users to install iOS 18 to Fix 33 iPhone Vulnerabilities

By infosecbulletin / Tuesday , September 17 2024

Apple has released iOS 18, the latest update for iPhones and iPads. Along with new features, it mainly focuses on...

Read More

• Alert

CISA adds windows and whatsUp Gold vuls to its KEV

By infosecbulletin / Tuesday , September 17 2024

CISA has warned Microsoft Windows MSHTML Platform Spoofing Vulnerability and Progress WhatsUp Gold SQL Injection Vulnerability actively exploited security flaws,...

Read More

• Data Breach

Petroleum and Fuel Industry
FleetPanda exposes Nearly One Million Documents

By infosecbulletin / Tuesday , September 17 2024

Cybersecurity researcher Jeremiah Fowler found a non-password-protected database with 780,000 records from FleetPanda, a tech provider for dispatch management. The...

Read More

• Cyber Attack

DESCO faces cyber attack: Customers Data Breach

By infosecbulletin / Tuesday , September 17 2024

A recent dark web scan revealed that customer data from Dhaka Electric Supply Company Limited (DESCO) has been exposed. The...

Read More

• Cyber Attack
• Vulnerabilities

Alert! Google Fixes GCP Composer Flaw

By infosecbulletin / Monday , September 16 2024

Tenable Research found and fixed a remote code execution (RCE) vulnerability, called CloudImposer, in Google Cloud Platform (GCP). This flaw...

Read More

• National

CTF in Bangladesh: Unveiling Challenges, Opportunities and remedies

By infosecbulletin / Sunday , September 15 2024

In this article, we won’t dive too deep into the technical aspects of Capture The Flag (CTF) competitions. Instead, we...

Read More

• Uncategorized

Bitdefender blog post
Medusa target Fortinet flaw (CVE-2023-48788) for Ransomware Attacks

By infosecbulletin / Sunday , September 15 2024

A recent Bitdefender report reveals that Medusa is still actively attacking and has created a notable presence on both the...

Read More

CISA advises users and administrators to check the latest ICS advisories for technical information and solutions.