ICS Patch Tuesday: Advisories Published by Siemens, Rockwell, Mitsubishi Electric

May 15, 2024 at 06:36AM Major industrial control systems providers, including Siemens, Rockwell Automation, Mitsubishi Electric, and Johnson Controls, have issued Patch Tuesday advisories addressing vulnerabilities in their products. Siemens has published 15 advisories, addressing critical vulnerabilities in various products, while Rockwell Automation and Mitsubishi Electric also reported high-severity vulnerabilities. CISA has informed organizations about … Read more

Johnson Controls says ransomware attack cost $27 million, data stolen

January 31, 2024 at 10:00AM Johnson Controls International confirmed a ransomware attack in September 2023, costing the company $27 million and resulting in a data breach. Dark Angels ransomware gang stole over 27 TB of data and demanded a $51 million ransom. Johnson Controls expects costs to rise as they investigate the stolen data. They … Read more

Johnson Controls Patches Critical Vulnerability in Industrial Refrigeration Products

November 20, 2023 at 09:33AM Johnson Controls has released patches for a critical vulnerability found in some of its industrial refrigeration products. The flaw, known as CVE-2023-4804, could allow unauthorized access to debug features. Impacted products include control panels used in the food and beverage industry worldwide. The patches fix the vulnerability that could potentially … Read more