Recent Posts
The Rise of GenAI-Generated Malware
The rise of artificial intelligence in recent years has brought incredible technological advancements to the cybersecurity landscape, as well as significant challenges. Over the past year, the...
XZ Utils Vulnerability Backdoor: How, What and Recommendations
The open-source community was rattled in late March with the discovery of a critical backdoor vulnerability in XZ Utils, a widely used open-source data compression utility available on almost all...
Critical Infrastructure’s Silent Threat: Part 3 - Protecting PLCs and Their Environment
Part 3: Protecting PLCs and Their Environment For many years, PLCs have been insecure by design. Several years into customizing and applying best practices from IT gave rise to secure protocols,...
Critical Infrastructure’s Silent Threat: Part 2 - Understanding PLCs
Part 2: Decoding the Complexity of PLCs In part one of this series we explained how Programmable Logic Controllers (PLCs) have become key targets for cyber security attacks due to their legacy...
Critical Infrastructure’s Silent Threat: Part 1 - The Invisible Enemy
Part 1: The Invisible Enemy Programmable Logic Controllers (PLCs) are an essential part of industrial manufacturing plants. They are widely used in industrial control systems (ICS) to automate...
The Rise of Iran-Sponsored Threat Actors
In mid-summer of 2022, Albania accused the Iranian government of targeting them with a series of major cyberattacks. The attacks, which targeted government servers and online portals, raised alarms...
Hospitals in the Crosshairs: The Alarming Rise of Ransomware Attacks in Healthcare
On a Sunday evening in late December, 2022 The Hospital for Sick Children in Toronto was hit with a ransomware attack that took down several vital hospital network systems and caused widespread...
Thwarting the Rise of Attack Frameworks with Post Exploitation Tools
The Cyber Kill Chain is a framework that outlines the stages of common cyberattacks and the points in the process at which attacks can be detected or intercepted. Developed by Lockheed Martin, this...
LockBit Ransomware Targets OT
What do Organizations Need to Know about LockBit? The first known ransomware attacks using what would come to be known as LockBit were reported back in 2019. Organizations that were infected with the...
ICS / OT Security News Update | SCADAfence - August 17
Our research team compiled the latest updates on newly announced CVEs, recent ransomware attacks including BlackCat & Luna, and IoT security news. They also offer analysis of the potential impacts...
ICS / OT Security News Update | SCADAfence - July 15
Our research team compiled the latest updates on newly announced CVEs, recent ransomware attacks and IoT security news. They also offer analysis of the potential impacts and their expert...
ICS / OT Security News Update | SCADAfence - June 22
Our research team compiled the latest updates on newly announced CVEs, recent ransomware attacks and IoT security news. They also offer analysis of the potential impacts and their expert...
Weekly ICS / OT Security News Digest | SCADAfence - May 10
Our research team has put together all of the most relevant news topics in the Ransomware and IoT security fields, as well as their impacts and their expert recommendations:
CISA's Top 15 Routinely Exploited Vulnerabilities: SCADAfence Customers Stay Protected
On April 27, the Cybersecurity and Infrastructure Security Agency (CISA), published a joint advisory in collaboration with CSA/NSA/FBI/ACSC and other cybersecurity authorities, providing details on...
INCONTROLLER / Pipedream: State-Sponsored Attack Tools Targeting Multiple ICS Systems
Dangerous New Malware Can Shut Down, Sabotage Industrial Sites
![Vulnerability Report: Rockwell PLC Unauthorized Code Injection [CVE-2022-1161, CVE-2022-1159]](https://6931155.fs1.hubspotusercontent-na1.net/hub/6931155/hubfs/RockwellPLC.png?width=450&name=RockwellPLC.png)
Vulnerability Report: Rockwell PLC Unauthorized Code Injection [CVE-2022-1161, CVE-2022-1159]
Two vulnerabilities in Rockwell programmable logic controllers and engineering workstation software have been disclosed. These vulnerabilities give attackers a way to modify automation processes and...
Your Weekly ICS / OT Security News Digest - March 31st
Our research team has put together all of the most relevant news topics in the ICS, IT, Ransomware & OT security fields, as well as their impacts and their expert recommendations:
