Critical Buffer Overflow Found in Savannah lwIP SMTP Client v2.2.1
A critical buffer overflow vulnerability in Savannah lwIP SMTP client v2.2.1 allows remote code execution and device crashes, impacting critical infrastructure devices.
Tag
#Critical Infrastructure
19 results in the archive.
Warlock ransomware exploits SharePoint in water and telecom attacks
The China-linked Warlock ransomware group exploited SharePoint vulnerabilities to gain initial access in attacks against water utilities, telecom providers, regional governments, and universities, underscoring ongoing risks to critical infrastructure and public sector organizations.
Critical Vulnerabilities Found in Armatura One Affecting Access Control Systems
Critical vulnerabilities in Armatura LLC's Armatura One expose access control systems to unauthorized access and arbitrary code execution risks.
FBI & CISA Warn on Risks of Third-Party ICS Integrators in Critical Infrastructure
The FBI and CISA issued guidance for critical infrastructure operators on managing cybersecurity risks posed by third-party industrial control system integrators, emphasizing access control and risk assessments.
CenterPoint Energy Confirms Customer Data Stolen in Cyberattack
CenterPoint Energy confirmed a breach where attackers exfiltrated customers' personal data, emphasizing the ongoing threats faced by critical utility providers.
Critical Vulnerabilities Discovered in mySCADA myPRO Manager
Two critical vulnerabilities in mySCADA myPRO Manager allow unauthenticated attackers to access privileged management functions and send arbitrary SMS via connected GSM modems, affecting versions through 2.1.
296K IoT Botnet, 100+ Water Systems Targeted, New SharePoint RCE Chain
A large IoT botnet impacting nearly 300,000 devices, attacks on over 100 water systems, and a novel SharePoint remote code execution vulnerability highlight a growing threat to critical infrastructure and enterprise environments.
Critical Vulnerabilities Found in Ebyte NE2-D11 Firmware
Multiple critical vulnerabilities in Ebyte NE2-D11 devices allow unauthorized administrative access, data exposure, and operational disruption, affecting critical infrastructure controls.
US Sanctions Iran-Linked Hackers Behind Critical Infrastructure Breaches
The US Department of the Treasury imposed sanctions on Iranian cyber actors involved in attacks targeting critical infrastructure to disrupt their financial networks.
Active Cyber Threat Targets Siemens S7 PLCs Using AI-Generated Exploits
US government agencies warn of an active cyber threat exploiting Siemens S7 Series programmable logic controllers using AI-assisted scripts, risking critical infrastructure disruption and safety.
Critical Vulnerabilities Found in Johnson Controls Airwall Affecting Sensitive Data
Two medium-to-high severity vulnerabilities in Johnson Controls Airwall could allow attackers to decrypt sensitive data and read arbitrary files, impacting critical infrastructure security.
Critical RCE Vulnerability Found in Siemens Siveillance Video
Siemens patched a critical remote code execution vulnerability in multiple versions of its Siveillance Video Management Servers that threatens critical infrastructure.
#StopRansomware: Emerging Gunra Ransomware Threat
Gunra ransomware, a double-extortion RaaS exploiting VPN and RDP vulnerabilities, threatens government and critical infrastructure with data encryption and leaks.
North Carolina Ports Hit by Cyberattack Disrupting Operations
The North Carolina Ports Authority confirmed a cyberattack on IT systems at multiple ports causing operational delays and highlighting risks to critical infrastructure.
Critical Vulnerabilities Found in ABB Ability Zenon IIoT Services with MongoDB
High-severity vulnerabilities in ABB Ability Zenon IIoT services using MongoDB 4.2 allow unauthorized access, denial of service, and potential data compromise.
Coordinated Cyberattack Disrupts 30+ Minnesota Water Systems
A coordinated cyberattack targeted operational technology at over 30 Minnesota community water systems in late July, causing outages and communication disruptions.
Swiss Rail Firm Stadler Rejects $12.3M Ransom Demand After Cyberattack
Swiss rail manufacturer Stadler Rail faced a ransomware attack by the Everest gang targeting a shared supplier data exchange platform, refusing a $12.3 million ransom demand.
Critical Authentication Bypass in Tycon Systems TPDIN-Monitor-WEB2
A critical authentication bypass vulnerability in Tycon Systems TPDIN-Monitor-WEB2 allows unauthenticated attackers full administrative control, risking critical infrastructure disruptions.
Russian FSB Exploits Vulnerable Routers in Critical Infrastructure Sectors
Russian state-sponsored hackers from FSB Center 16 are exploiting poorly configured routers in critical infrastructure worldwide, heightening operational risks.