CISA Unveils advisories for Two Industrial Control Systems

CISA released two advisories about security issues for Industrial Control Systems (ICS) on July 25, 2024. These advisories offer important information about current vulnerabilities and exploits for ICS.

ICSA-24-207-01 Siemens SICAM Products:

• Uncategorized

Cisco released security updates for two critical security flaws

By infosecbulletin / Thursday , September 5 2024

CISCO released security updates for two critical security flaws impacting its smart Licensing Utility that could allow unauthenticated, remote attackers...

Read More

• Hot Topic

OpenBAS: Cutting-edge breach and attack simulation platform

By infosecbulletin / Wednesday , September 4 2024

OpenBAS is a platform that helps organizations to plan, schedule, and conduct crisis exercises, adversary simulations, and breach simulations. OpenBAS...

Read More

• Vulnerabilities

Critical Security Flaws Patched in Zyxel Networking Devices

By infosecbulletin / Wednesday , September 4 2024

Zyxel has released software updates to fix a serious security issue in certain access point (AP) and security router versions....

Read More

• Vulnerabilities

CVE-2024-38811: CEV In VMware Fusion Unveiled

By infosecbulletin / Tuesday , September 3 2024

VMware released a security advisory for a major vulnerability in the VMware Fusion product. This vulnerability could be exploited by...

Read More

• Cyber Attack
• Vulnerabilities

CERT-IN Warns Vulnerabilities in Palo Alto Networks applications

By infosecbulletin / Tuesday , September 3 2024

Indian Computer Emergency Response Team (CERT-IN) issued advisories about multiple vulnerabilities in various Palo Alto Networks applications. Attackers could exploit...

Read More

• International

How Malaysia’s Data Centre Industry Poised for Growth

By infosecbulletin / Tuesday , September 3 2024

Malaysia is quickly becoming a leading choice for investing in data centers. It aims to generate RM3.6 billion (US$781 million)...

Read More

• Cyber Attack

RansomHub exfiltrated data over 210 victims: US alert

By infosecbulletin / Tuesday , September 3 2024

US authorities have issued a cybersecurity advisory about a ransomware group called RansomHub. The group is thought to have stolen data...

Read More

• Vulnerabilities

Godzilla Fileless Backdoor Exploits Atlassian Confluence flaw

By infosecbulletin / Tuesday , September 3 2024

There is a new way to attack Atlassian Confluence using the vulnerability CVE-2023-22527. The Confluence Data Center and Server products...

Read More

• Cyber Attack

New Cicada ransomware targets VMware ESXi servers

By infosecbulletin / Tuesday , September 3 2024

The Cicada3301 ransomware is made in Rust and attacks Windows and Linux/ESXi hosts. Truesec researchers examined a version that targets...

Read More

• Uncategorized

Monday hits two UK bank apps causes outages

By infosecbulletin / Tuesday , September 3 2024

Lloyds Bank and Virgin Money's internet banking services were down on Monday, causing trouble for users to access and view...

Read More

Successful exploitation of these vulnerabilities could allow an attacker to perform an unauthorized password reset which could lead to privilege escalation and potential leak of information.

ICSA-24-207-02 Positron Broadcast Signal Processor: 

Successful exploitation of this vulnerability could allow an attacker to bypass authentication and access unauthorized protected areas of the application.

CISA encourages users and administrators to review the newly released ICS advisories for technical details and mitigations.