| Date | Source | Type | Title | Author |
|---|---|---|---|---|
| Apr 30, 2024 | CISA | Alert | CISA Releases Three Industrial Control Systems Advisories These advisories provide timely information about current security issues, vulnerabilities, and exploits surrounding ICS. ICSA-24-121-01 Delta Electronics CNCSoft-G2 DOPSoft ICSA-24-016-01 SEW-EURODRIVE MOVITOOLS MotionStudio (Update A) ICSA-24-109-01 Unitronics Vision Legacy Series (Update A) This product is provided subject to this Notification and this Privacy & Use policy. | CISA |
| Apr 30, 2024 | CISA | ICS Advisory | ICSA-24-121-01: Delta Electronics CNCSoft-G2 DOPSoft (Update A) Successful exploitation of this vulnerability could allow an attacker to execute arbitrary code. | CISA |
| Apr 29, 2024 | CERT-EU | Advisory | 2024-037: Critical Vulnerability in PAN-OS software This vulnerability allows an unauthenticated remote attacker to execute arbitrary code as root on the affected device [1]. This vulnerability is being exploited in the wild, and proof-of-concepts have been publicly disclosed by third parties [4]. | CERT-EU |
| Apr 25, 2024 | CISA | Alert | CISA Releases Eight Industrial Control Systems Advisories These advisories provide timely information about current security issues, vulnerabilities, and exploits surrounding ICS. ICSA-24-116-01 Multiple Vulnerabilities in Hitachi Energy RTU500 Series ICSA-24-116-02 Hitachi Energy MACH SCM ICSA-24-116-03 Siemens RUGGEDCOM APE1808 Devices Configured with Palo Alto Networks Virtual NGFW ICSA-24-116-04 Honeywell Experion PKS, Experion LX, PlantCruise by Experion, Safety Manager, Safety Manager SC ICSA-23-1… | CISA |
| Apr 25, 2024 | CISA | ICS Advisory | ICSA-24-116-01: Hitachi Energy RTU500 Series Successful exploitation of these vulnerabilities could allow the attacker to upload or transfer files of dangerous types that can be automatically processed within the product's environment. | CISA |
| Apr 25, 2024 | CISA | ICS Advisory | ICSA-24-116-04: Honeywell Experion PKS, Experion LX, PlantCruise by Experion, Safety Manager, Safety Manager SC Successful exploitation of these vulnerabilities could disclose sensitive information, allow privilege escalation, or allow remote code execution. | CISA |
| Apr 25, 2024 | CISA | ICS Advisory | ICSA-24-116-03: Siemens RUGGEDCOM APE1808 devices configured with Palo Alto Networks Virtual NGFW Palo Alto Networks has published [1] information on CVE-2024-3400 in PAN-OS. This advisory addresses Siemens Industrial products affected by this vulnerability. Siemens has released a new version of Palo Alto Networks Virtual NGFW for RUGGEDCOM APE1808 and recommends to update to the latest version. Customers are advised to consult and implement the workarounds provided in Palo Alto Networks' upstream security notifications. [1] https://security.paloaltonetworks.com/CVE-2024-3400 | CISA |
| Apr 25, 2024 | CISA | ICS Advisory | ICSA-24-116-02: Hitachi Energy MACH SCM (Update A) Hitachi Energy is aware of LINQ query related vulnerabilities that affect MACH SCM product versions listed below. Authenticated malicious clients successfully exploiting these vulnerabilities could execute arbitrary code that an attacker otherwise does not have authorization to do. Please refer to the Recommended Immediate Actions for information about mitigation and remediation. | CISA |
| Apr 24, 2024 | CISA | Alert | Cisco Releases Security Updates Addressing ArcaneDoor, Vulnerabilities in Cisco Firewall Platforms Today, Cisco released security updates to address ArcaneDoor—exploitation of Cisco Adaptive Security Appliances (ASA) devices and Cisco Firepower Threat Defense (FTD) software. A cyber threat actor could exploit vulnerabilities ( CVE-2024-20353 , CVE-2024-20359 , CVE-2024-20358 ) to take control of an affected system. | CISA |
| Apr 24, 2024 | CERT-EU | Advisory | 2024-043: Vulnerabilities in Cisco ASA and FTD Software It is recommended upgrading affected products as soon as possible, and checking for possible compromise. The vulnerability CVE-2024-20353 [1], with a CVSS score of 8.6, allows an attacker to cause a DoS condition by sending a crafted HTTP request to the web server on a targeted device. | CERT-EU |
| Apr 23, 2024 | CISA | Alert | CISA Releases Two Industrial Control Systems Advisories These advisories provide timely information about current security issues, vulnerabilities, and exploits surrounding ICS. ICSA-24-051-03 Mitsubishi Electric Electrical Discharge Machines (Update A) ICSA-24-067-01 Chirp Systems Chirp Access (Update A) This product is provided subject to this Notification and this Privacy & Use policy. | CISA |
| Apr 19, 2024 | CISA | Alert | Cisco Releases Security Advisories for Cisco Integrated Management Controller A remote cyber threat actor could exploit one of these vulnerabilities to take control of an affected system. Users and administrators are encouraged to review the following advisories and apply the necessary updates: Cisco Integrated Management Controller CLI Command Injection Vulnerability Cisco Integrated Management Controller Web-Based Management Interface Command Injection Vulnerability This product is provided subject to this Notification a… | CISA |
| Apr 18, 2024 | CISA | Alert | CISA and Partners Release Advisory on Akira Ransomware Today, CISA, the Federal Bureau of Investigation (FBI), Europol’s European Cybercrime Centre (EC3), and the Netherlands’ National Cyber Security Centre (NCSC-NL) released a joint Cybersecurity Advisory (CSA), #StopRansomware: Akira Ransomware , to disseminate known Akira ransomware tactics, techniques, and procedures (TTPs) and indicators of compromise (IOCs) identified through FBI investigations as recently as February 2024. | CISA, EC3, FBI, NCSC-NL |
| Apr 18, 2024 | CISA | Alert | CISA Releases Three Industrial Control Systems Advisories These advisories provide timely information about current security issues, vulnerabilities, and exploits surrounding ICS. ICSA-24-109-01 Unitronics Vision Series PLCs ICSA-21-287-03 Mitsubishi Electric MELSEC iQ-R Series (Update B) ICSA-21-250-01 Mitsubishi Electric MELSEC iQ-R Series (Update B) This product is provided subject to this Notification and this Privacy & Use policy. | CISA |
| Apr 18, 2024 | CISA | Alert | Oracle Releases Critical Patch Update Advisory for April 2024 A cyber threat actor could exploit some of these vulnerabilities to take control of an affected system. Users and administrators are encouraged to review the following Critical Patch Update Advisory and apply the necessary updates: This product is provided subject to this Notification and this Privacy & Use policy. | CISA |
| Apr 18, 2024 | CISA | Advisory | #StopRansomware: Akira Ransomware #StopRansomware: Akira Ransomware Actions for Organizations to Take Today to Mitigate Cyber Threats Related to Akira Prioritize remediating known exploited vulnerabilities. Enable and enforce phishing-resistant multifactor authentication (MFA). | CISA, DC3, EC3, FBI, HHS, NCSC-NL, OFAC |
| Apr 18, 2024 | CISA | ICS Advisory | ICSA-24-109-01: Unitronics Vision Legacy series (Update A) Successful exploitation of this vulnerability could allow an attacker to log in to the Remote HMI feature, where the PLC may be factory reset, stopped, and restarted. | CISA |
| Apr 18, 2024 | CERT-EU | Advisory | 2024-042: Vulnerability in Cisco Integrated Management Controller The vulnerability CVE-2024-20356 [2], with a CVSS score of 8.7, could allow an authenticated, remote attacker with Administrator-level privileges to perform command injection attacks on an affected system and elevate their privileges to root. This vulnerability is due to insufficient user input validation. | CERT-EU |
| Apr 17, 2024 | CERT-EU | Advisory | 2024-040: Vulnerabilities in Atlassian Products It is recommended updating as soon as possible prioritising internet facing instances. All the vulnerabilities, with CVSS scores ranging from 7.5 to 8.2, are caused by vulnerable dependencies used by Atlassian products. | CERT-EU |
| Apr 17, 2024 | CERT-EU | Advisory | 2024-041: Multiple Vulnerabilities in Ivanti Avalanche MDM The two critical security flaws, tracked as CVE-2024-24996 and CVE-2024-29204, with CVSS score of 9.8, were found in Avalanche’s WLInfoRailService and WLAvalancheService components [1]. They are both caused by heap-based buffer overflow weaknesses, which can let unauthenticated remote attackers execute arbitrary commands on vulnerable systems in low-complexity attacks that do not require user interaction [1]. | CERT-EU |
| Apr 16, 2024 | CERT-EU | Advisory | 2024-038: Critical vulnerabilities in Junos OS and Junos OS Evolved These vulnerabilities could allow remote attackers to execute arbitrary code, cause denial of service, or leak sensitive information. It is strongly advised to update affected systems to the latest versions to mitigate these risks. | CERT-EU |
| Apr 16, 2024 | CISA | ICS Advisory | ICSA-24-107-01: Measuresoft ScadaPro Successful exploitation of this vulnerability could allow an attacker to escalate their privileges from unprivileged to SYSTEM privileges. | CISA |
| Apr 16, 2024 | CISA | ICS Advisory | ICSA-24-107-02: Electrolink FM/DAB/TV Transmitter Successful exploitation of these vulnerabilities could allow an attacker to obtain full system access, keep the device from transmitting, escalate privileges, change credentials, and execute arbitrary code. | CISA |
| Apr 16, 2024 | CISA | ICS Advisory | ICSA-24-107-04: RoboDK RoboDK Successful exploitation of this vulnerability could result in an attacker crashing the program through heap-based buffer overflow. | CISA |
| Apr 16, 2024 | CISA | Alert | CISA Releases Four Industrial Control Systems Advisories These advisories provide timely information about current security issues, vulnerabilities, and exploits surrounding ICS. ICSA-24-107-01 Measuresoft ScadaPro ICSA-24-107-02 Electrolink FM/DAB/TV Transmitter ICSA-24-107-03 Rockwell Automation ControlLogix and GuardLogix This product is provided subject to this Notification and this Privacy & Use policy. | CISA |
| Apr 16, 2024 | CISA | ICS Advisory | ICSA-24-107-03: Rockwell Automation ControlLogix and GuardLogix (Update A) Successful exploitation of this vulnerability could allow an attacker to cause a major nonrecoverable fault (MNRF) resulting in the product to become unavailable. | CISA |
| Apr 15, 2024 | CISA | Alert | Joint Guidance on Deploying AI Systems Securely Provide methodologies and controls to protect, detect, and respond to malicious activity against AI systems and related data and services. This product is provided subject to this Notification and this Privacy & Use policy. | CISA, FBI, NSA |
| Apr 12, 2024 | CISA | Alert | Palo Alto Networks Releases Guidance for Vulnerability in PAN-OS, CVE-2024-3400 Palo Alto Networks has reported active exploitation of this vulnerability in the wild. CISA has also added this vulnerability to its Known Exploited Vulnerabilities Catalog . | CISA |
| Apr 12, 2024 | CISA | Alert | Citrix Releases Security Updates for XenServer and Citrix Hypervisor XenServer and Citrix Hypervisor Security Update for CVE-2023-46842, CVE-2024-2201 and CVE-2024-31142 This product is provided subject to this Notification and this Privacy & Use policy. | CISA |
| Apr 12, 2024 | CISA | Alert | Juniper Networks Releases Security Bulletin for Multiple Juniper Products Juniper Networks released security updates to address multiple vulnerabilities in Junos OS, Junos OS Evolved, Paragon Active Assurance and Junos OS: EX4300 Series. A cyber threat actor could exploit some of these vulnerabilities to cause a denial-of-service condition . Users and administrators are encouraged to review Juniper’s Support Portal and apply the necessary updates. | CISA |
| Apr 11, 2024 | CISA | ICS Advisory | ICSA-24-102-08: Siemens OPC Foundation Local Discovery Server Affecting Siemens Products A vulnerability was identified in OPC Foundation Local Discovery Server which also affects Siemens products that could allow an attacker to escalate privileges under certain circumstances. Siemens has released new versions for several affected products and recommends to update to the latest versions. Siemens recommends specific countermeasures for products where fixes are not, or not yet available. | CISA |
| Apr 11, 2024 | CISA | Alert | Compromise of Sisense Customer Data Reset credentials and secrets potentially exposed to, or used to access, Sisense services. Investigate—and report to CISA —any suspicious activity involving credentials potentially exposed to, or used to access, Sisense services. | CISA |
| Apr 11, 2024 | CERT-EU | Advisory | 2024-036: Vulnerabilities in Fortinet products It is recommended upgrading affected software as soon as possible. ThevulnerabilityCVE-2023-45590[2],withaCVSSscoreof9.4,isduetoanimpropercontrol of generation of code. | CERT-EU |
| Apr 11, 2024 | CISA | ICS Advisory | ICSA-24-102-01: Siemens SIMATIC S7-1500 TM MFP Multiple vulnerabilities have been identified in the additional GNU/Linux subsystem of the SIMATIC S7-1500 TM MFP V1.1. Siemens is preparing fix versions and recommends specific countermeasures for products where fixes are not, or not yet available. | CISA |
| Apr 11, 2024 | CISA | Alert | CISA Releases Nine Industrial Control Systems Advisories These advisories provide timely information about current security issues, vulnerabilities, and exploits surrounding ICS. ICSA-24-102-01 Siemens SIMATIC S7-1500 ICSA-24-102-02 Siemens SIMATIC WinCC ICSA-24-102-03 Siemens RUGGEDCOM APE1808 before V11.0. | CISA |
| Apr 11, 2024 | CISA | Alert | CISA Issues Emergency Directive 24-02: Mitigating the Significant Risk from Nation-State Compromise of Microsoft Corporate Email System Today, CISA publicly issued Emergency Directive (ED) 24-02 to address the recent campaign by Russian state-sponsored cyber actor Midnight Blizzard to exfiltrate email correspondence of Federal Civilian Executive Branch (FCEB) agencies through a successful compromise of Microsoft corporate email accounts. | CISA |
| Apr 11, 2024 | CISA | ICS Advisory | ICSA-24-102-02: Siemens SIMATIC WinCC A vulnerability in the login dialog box of SIMATIC WinCC could allow a local attacker to cause a denial of service condition in the runtime of the SCADA system. Siemens has released new versions for the affected products and recommends to update to the latest versions. | CISA |
| Apr 11, 2024 | CISA | ICS Advisory | ICSA-24-102-03: Siemens RUGGEDCOM APE1808 Palo Alto Networks has published [1] information on vulnerabilities in PAN-OS. This advisory lists the related Siemens Industrial products affected by these vulnerabilities. Siemens is preparing updates and recommends specific countermeasures for products where updates are not, or not yet available. Customers are advised to consult and implement the workarounds provided in Palo Alto Networks' upstream security notifications. [1] https://security.paloaltonetworks.com/?version=10.2.2&product=PAN-OS | CISA |
| Apr 11, 2024 | CISA | ICS Advisory | ICSA-24-102-09: Rockwell Automation 5015-AENFTXT (Update A) Successful exploitation of this vulnerability could allow an attacker to crash the device and impact availability for the affected system. | CISA |
| Apr 11, 2024 | CISA | ICS Advisory | ICSA-24-102-04: Siemens RUGGEDCOM APE1808 Palo Alto Networks has published [1] information on vulnerabilities in PAN-OS. This advisory lists the related Siemens Industrial products affected by these vulnerabilities. Siemens has released a new version of Palo Alto Networks Virtual NGFW for RUGGEDCOM APE1808 and recommends to update to the latest version. Customers are advised to consult and implement the workarounds provided in Palo Alto Networks' upstream security notifications. [1] https://security.paloaltonetworks.com/ | CISA |
| Apr 11, 2024 | CISA | ICS Advisory | ICSA-24-102-07: Siemens SINEC NMS SINEC NMS before V2.0 SP2 is affected by multiple vulnerabilities. Siemens has released an update for SINEC NMS and recommends to update to the latest version. | CISA |
| Apr 11, 2024 | CISA | ICS Advisory | ICSA-24-102-06: Siemens Parasolid Parasolid is affected by out of bounds read, stack exhaustion and null pointer dereference vulnerabilities that could be triggered when the application reads files in X_T format. If a user is tricked to open a malicious file with the affected applications, an attacker could leverage the vulnerability to perform remote code execution in the context of the current process. Siemens has released new versions for the affected products and recommends to update to the latest versions. | CISA |
| Apr 11, 2024 | CISA | ICS Advisory | ICSA-24-102-05: Siemens Scalance W1750D The SCALANCE W1750D devices contain multiple vulnerabilities that could allow an attacker to exploit buffer overflow and information disclosure vulnerabilities which could lead to information disclosure or unauthenticated remote code execution. Siemens has released new versions for the affected products and recommends to update to the latest versions. | CISA |
| Apr 10, 2024 | CERT-EU | Advisory | 2024-035: Critical Vulnerability in Rust on Windows This flaw allows command injection attacks via crafted batch file executions with untrusted arguments. It is recommended updating as soon as possible, prioritising assets running code (or one of its dependencies) which executes batch files with untrusted arguments [1]. | CERT-EU |
| Apr 10, 2024 | CERT-EU | Advisory | 2024-034: Multiple Vulnerabilities in Microsoft Products OnApril9,2024,Microsoftaddressed150vulnerabilitiesinitsApril2024PatchTuesdayupdate [1], including 67 remote code execution (RCE) vulnerabilities and 2 zero-days exploited in It is recommended applying updates as soon as possible on affected products. | CERT-EU |
| Apr 9, 2024 | CISA | Alert | CISA Releases One Industrial Control Systems Advisory These advisories provide timely information about current security issues, vulnerabilities, and exploits surrounding ICS. ICSA-24-100-01 SUBNET PowerSYSTEM Server and Substation Server This product is provided subject to this Notification and this Privacy & Use policy. | CISA |
| Apr 9, 2024 | CISA | Alert | Adobe Releases Security Updates for Multiple Products A cyber threat actor could exploit some of these vulnerabilities to take control of an affected system. Users and administrators are encouraged to review the following Adobe Security Bulletins and apply the necessary updates: This product is provided subject to this Notification and this Privacy & Use policy. | CISA |
| Apr 9, 2024 | CISA | Alert | Microsoft Releases April 2024 Security Updates Microsoft released security updates to address vulnerabilities in multiple products. A cyber threat actor could exploit some of these vulnerabilities to take control of an affected system. Users and administrators are encouraged to review the following and apply the necessary updates: Microsoft Security Update Guide for April This product is provided subject to this Notification and this Privacy & Use policy. | CISA, JPCERT/CC |
| Apr 9, 2024 | CISA | Alert | Fortinet Releases Security Updates for Multiple Products A cyber threat actor could exploit some of these vulnerabilities to take control of an affected system. FR-IR-23-345 FortiClientMac - Lack of configuration file validation FG-IR-23-493 FortiOS & FortiProxy - Administrator cookie leakage FG-IR-23-087 FortiClient Linux - Remote Code Execution due to dangerous nodejs configuration This product is provided subject to this Notification and this Privacy & Use policy. | CISA |
| Apr 9, 2024 | NSA | Guidance | CSI: Advancing Zero Trust Maturity Throughout the Data Pillar This cybersecurity information sheet (CSI) provides recommendations for maturing data security and enforcing access to data at rest and in transit, ensuring that only those with authorization can access the data. It further discusses how these capabilities integrate into a comprehensive Zero Trust (ZT) framework, as described in Embracing a Zero Trust Security Model. | CISA, NSA |
| Apr 9, 2024 | CISA | ICS Advisory | ICSA-24-100-01: SUBNET PowerSYSTEM Server and Substation Server Successful exploitation of the vulnerabilities in components used by PowerSYSTEM Server 2021 and Substation Server 2021 could allow privilege escalation, denial of service, or arbitrary code execution. | CISA |
| Apr 4, 2024 | CERT-EU | Advisory | 2024-033: Multiple Vulnerabilities in Ivanti Connect Secure Thevulnerability trackedasCVE-2024-21894isa severeflawinvolvinga heapoverflowin the IPSec component, enabling RCE and DoS without user interaction. Ivanti also fixed additional vulnerabilities [2] potentially leading to DoS attacks [1]. 22.5R1.3, 22.5R2.4, 22.6R2.3, 9.1R14.6, 9.1R15.4, 9.1R16.4, 9.1R17.4 and 9.1R18.5. | CERT-EU |
| Apr 4, 2024 | CISA | Alert | Ivanti Releases Security Update for Ivanti Connect Secure and Policy Secure Gateways Ivanti has released security updates to address vulnerabilities in all supported versions (9.x and 22.x) of Ivanti Connect Secure and Policy Secure gateways. A cyber threat actor could exploit one of these vulnerabilities to take control of an affected system. | CISA |
| Apr 4, 2024 | CISA | ICS Advisory | ICSA-24-095-02: Schweitzer Engineering Laboratories SEL 700 series relays Successful exploitation of this vulnerability could allow an attacker to make modifications or cause a denial-of-service condition. | CISA |
| Apr 4, 2024 | CISA | ICS Advisory | ICSA-24-095-01: Hitachi Energy Asset Suite 9 Successful exploitation of this vulnerability could allow an attacker to use an authentication anomaly to successfully invoke the REST service. | CISA |
| Apr 4, 2024 | CISA | Alert | CISA Releases Two Industrial Control Systems Advisories These advisories provide timely information about current security issues, vulnerabilities, and exploits surrounding ICS. ICSA-24-095-02 Schweitzer Engineering Laboratories SEL This product is provided subject to this Notification and this Privacy & Use policy. | CISA |
| Apr 2, 2024 | CERT-EU | Advisory | 2024-032: Critical Vulnerability in XZ Utils XZ Utils is a data compression software and may be present in Linux distributions. The malicious code may allow a Threat Actor, with the right authentication key, to achieve gated pre-auth RCE on affected systems. [1] It is recommended downgrading XZ Utils to a not compromised version. [Updated]TheissueistrackedasCVE-2024-3094,withaCVSSscoreof10outof10. | CERT-EU |
| Apr 2, 2024 | CISA | Alert | CISA Releases One Industrial Control Systems Advisory These advisories provide timely information about current security issues, vulnerabilities, and exploits surrounding ICS. ICSA-24-093-01 IOSIX IO-1020 Micro ELD This product is provided subject to this Notification and this Privacy & Use policy. | CISA |
| Apr 2, 2024 | CISA | Alert | CISA Publishes New Webpage Dedicated to Providing Resources for High-Risk Communities Today, CISA published a new dedicated High-Risk Communities webpage comprised of cybersecurity resources to support civil society communities at heighted risk of digital security threats, including cyber hygiene guidance, a repository of local cyber volunteer programs, and free or discounted tools and services. | CISA |
| Apr 2, 2024 | CISA | ICS Advisory | ICSA-24-093-01: IOSIX IO-1020 Micro ELD Successful exploitation of these vulnerabilities could allow an adjacent attacker to take control of vehicle systems by connecting to and modifying the affected device. | CISA |