mobile-logo
 

Vulnerabilities

22 Apr

Multiple vendors’ ICS and SCADA software contain critical flaws, warns CISA.

in Critical Infrastructure, Cyber Security, Cybersecurity, Vulnerabilities
Comments

The US Cybersecurity and Infrastructure Security Agency (CISA) has released seven advisories this week about vulnerabilities in industrial control systems (ICS) and supervisory control and data acquisition (SCADA) software from various vendors. These advisories cover critical flaws, two of which have public exploits.   The affected products include ScadaFlex II controllers made by Industrial Control Links, Screen Creator Advance 2 and Kostac PLC programming software from JTEKT...

Read More
15 Apr

How a Critical Flaw in WooCommerce can be Exploited to Compromise WordPress Websites

in Authentication, Cyber Security, Cybersecurity, Internet Security, Vulnerabilities
Comments

Popular e-commerce plug-in, WooCommerce, used for WordPress-based online stores, has been found to contain a critical vulnerability that could allow attackers to take over websites.   While technical details about the vulnerability have not been published, the WooCommerce team has released updates, and attackers could reverse-engineer the patch. The vulnerability allows for unauthenticated administrative takeover of websites. Website administrators using this plugin are advised to issue the...

Read More
19 Mar

Fortinet FortiNAC Urged to Address Critical Vulnerability

in Cyber Security, Cybersecurity, Vulnerabilities
Comments

The security of Fortinet FortiNAC appliances is under attack, with proof-of-concept exploit code now available and active exploitation attempts in the wild.   FortiNAC is a zero-trust network access solution that can be deployed both as a hardware device or as a virtual machine appliance, and is used for network segmentation, visibility, and control of devices and users connected to the network. With more than 700,000 Fortinet...

Read More