CISA Flags ICS Bugs in Baxter, Mitsubishi Products

September 6, 2024 at 04:11PM CISA warned about vulnerabilities in healthcare and manufacturing industries’ industrial control systems. Baxter’s Connex Health Portal had severe vulnerabilities, including unauthorized access and SQL injection, and Mitsubishi Electric’s MELSEC had denial-of-service vulnerabilities. CISA advised organizations to update their systems and minimize network exposure due to the increasing cyber threats facing … Read more

Manufacturing Sector Under Fire From Microsoft Credential Thieves

August 28, 2024 at 12:00PM A threat actor has targeted the manufacturing sector with spear-phishing emails, impersonating real companies like Periscope Holdings and R.S. Hughes. When clicked, the emails direct victims to a counterfeit Microsoft page to input their password, allowing the hacker to harvest credentials and potentially compromise sensitive data. BlueVoyant researchers advise monitoring … Read more

21 Vulnerabilities Discovered in Crucial IT-OT Connective Routers

November 14, 2023 at 02:41PM Researchers have discovered 21 vulnerabilities in a popular brand of industrial router commonly used in the medical and manufacturing sectors. These vulnerabilities range from design flaws like hardcoded credentials to how the device handles potentially malicious inputs. Attackers who exploit these vulnerabilities can bypass security measures and target critical devices … Read more

Royal Ransomware Possibly Rebranding After Targeting 350 Organizations Worldwide

November 14, 2023 at 09:27AM The Royal ransomware gang has targeted over 350 organizations worldwide, demanding over $275 million in ransom. The cybercriminals are potentially planning to rebrand their operation, according to the US cybersecurity agency CISA and the FBI. The gang has attacked entities in critical infrastructure, education, healthcare, and manufacturing sectors, demanding payments … Read more