Siemens and Rockwell Tackle Industrial Cybersecurity, but Face Customer Hesitation 

November 4, 2024 at 05:07AM Siemens and Rockwell Automation are enhancing cybersecurity for industrial organizations, yet face challenges in encouraging customers to install security systems and upgrade their Industrial Control Systems (ICS). **Meeting Takeaways:** 1. **Collaboration on Cybersecurity**: Siemens and Rockwell Automation are actively working together to enhance cybersecurity measures in industrial organizations. 2. **Challenges … Read more

Sailing the Seven Seas Securely from Port to Port – OT Access Security for Ships and Cranes

October 28, 2024 at 07:26AM Operational Technology (OT) security is crucial for marine vessels and port operators, as digitalization leads to new security challenges. SSH’s PrivX OT Edition addresses these issues by providing secure, centralized remote access management for critical systems, enhancing safety, compliance, and operational efficiency while mitigating cyber risks across the maritime industry. … Read more

Honeywell and Google Cloud to Accelerate Auto Operations With AI Agents for the Industrial Sector

October 22, 2024 at 05:23PM Honeywell and Google Cloud announced a collaboration to enhance industrial operations using AI, integrating Honeywell Forge data with Google’s Gemini AI platform. This partnership aims to improve maintenance costs, productivity, and workforce training, with initial solutions set for release in 2025, addressing labor shortages in the industrial sector. ### Key … Read more

Remote Code Execution, DoS Vulnerabilities Patched in OpenPLC

September 26, 2024 at 11:13AM Cisco Talos disclosed critical and high-severity vulnerabilities in OpenPLC, an open source programmable logic controller designed for industrial automation and research. These can be exploited for DoS attacks and remote code execution using specially crafted EtherNet/IP requests. The vulnerabilities were patched on September 17, and users are advised to update … Read more

SCADA Market Is Set to Reach $18.7B by 2031

September 12, 2024 at 02:35PM The press release highlights that global SCADA (Supervisory Control and Data Acquisition) market is driven by the adoption of automated technologies, Industry 5.0, and growing emphasis on industrial automation. Although initial investment requirements and cyberattack risks pose challenges, the market is expected to grow, with networked SCADA systems leading the … Read more

Critical Vulnerability in Honeywell Virtual Controller Allows Remote Code Execution

May 22, 2024 at 07:42AM Claroty disclosed vulnerabilities in Honeywell’s Control Edge Unit Operations Controller found by its researchers. The vulnerabilities in the ControlEdge Virtual UOC industrial automation controller include a critical severity issue allowing arbitrary code execution without authentication, and a medium-severity absolute path traversal issue. Honeywell promptly issued patches and advisories regarding the … Read more

Organizations Informed of 10 Vulnerabilities in Rockwell Automation Products 

March 27, 2024 at 08:48AM Rockwell Automation released three security advisories identifying a total of 10 vulnerabilities in its FactoryTalk, PowerFlex, and Arena Simulation software. CISA also issued advisories to organizations, warning about these vulnerabilities. The flaws include high-severity code execution vulnerabilities and one security issue without patches. Exploitation requires user interaction. Stephen Ford has … Read more

Rockwell Automation Hires Stephen Ford as Chief Information Security Officer

March 13, 2024 at 12:45PM Stephen Ford has joined Rockwell Automation as VP and Chief Information Security Officer. With prior experience at McKesson Corporation, HP, and academic institutions, Ford holds a bachelor’s degree in computer science, an MBA from Prairie View A&M University, and a master’s degree from Harvard University. He will report to Chris … Read more

Unpatched Rapid SCADA Vulnerabilities Expose Industrial Organizations to Attacks

January 18, 2024 at 11:12AM The Rapid SCADA open source industrial automation platform has seven unpatched vulnerabilities, including critical and high severity ones, allowing hackers to access sensitive industrial systems, execute arbitrary code, and compromise administrator passwords. The developers have not responded to notifications or requests for comment, leaving organizations vulnerable to potential attacks. Based … Read more

Locking down Industrial Control Systems

November 30, 2023 at 03:53AM Global industrial automation spending hit $172.26 billion in 2022, with expected annual growth of 10.5% through 2030. As ICS deployments surge, security risks follow. SANS offers comprehensive ICS security training and resources to bolster defenses against these emerging threats, as per CISA’s call for collective cyber-defense action. Meeting Takeaways: 1. … Read more