ICS Patch Tuesday: Advisories Published by Siemens, Rockwell, Mitsubishi Electric

May 15, 2024 at 06:36AM Major industrial control systems providers, including Siemens, Rockwell Automation, Mitsubishi Electric, and Johnson Controls, have issued Patch Tuesday advisories addressing vulnerabilities in their products. Siemens has published 15 advisories, addressing critical vulnerabilities in various products, while Rockwell Automation and Mitsubishi Electric also reported high-severity vulnerabilities. CISA has informed organizations about … Read more

ICS Network Controllers Open to Remote Exploit, No Patches Available

April 18, 2024 at 04:33PM CISA issued a security advisory warning of vulnerabilities in Unitronics Vision Series PLCs and Mitsubishi Electric MELSEC iQ-R CPUs. Unitronics PLCs store passwords in a recoverable format, leaving them open to cyberattacks. Mitsubishi CPUs transmit passwords in cleartext and have flaws that could compromise device access. The advisory recommends defensive … Read more

Nozomi Networks Raises $100 Million to Expand Industrial Cybersecurity Business

March 13, 2024 at 09:27AM Nozomi Networks, an industrial and IoT cybersecurity firm, secured $100 million in a Series E funding round, with total funds now exceeding $250 million. Mitsubishi Electric and Schneider Electric joined as investors. The funding will assist in scaling product development and supporting global go-to-market efforts. Nozomi has emphasized the potential … Read more

Mitsubishi Electric Factory Automation Flaws Expose Engineering Workstations

February 5, 2024 at 06:06PM Mitsubishi Electric identified high-severity authentication bypass and critical remote code execution vulnerabilities in several factory automation products. The impacted products include EZSocket, FR Configurator2, GT Designer3, GX and MT Works, MELSOFT Navigator, and MX. The company advised users to implement cybersecurity measures while it works on patches and released advisories … Read more