News

TN Sheet Metal Firm Gains SHARP Status

Wagner-Meinert LLC of Nashville, Tennessee, has always known safety is a top priority for the company that provides construction, retrofit, and maintenance of ammonia refrigeration systems. So, along those lines, it is no surprise the company worked to …

Feds Seize Hacked Information Site

The Federal Bureau of Investigation (FBI) and the U.S. Department of Justice (DoJ) seized the Internet domain name weleakinfo.com. The website had claimed to provide its users a search engine to review and obtain the personal information illegally obta …

Accident Tolerant Fuel Placed in IL Nuke

Global Nuclear Fuel’s (GNF) ARMOR-coated zirconium cladding and IronClad Accident Tolerant Fuel solutions were installed Tuesday at Exelon Generation’s Clinton Power Station in Clinton, Illinois. The assemblies were developed as part of the U.S. Depart …

Schneider Mitigates Hole in Modicon Controllers

Schneider Electric has a series of mitigations available to handle improper check for unusual or exceptional conditions vulnerability in its Modicon M580, Modicon M340, Modicon Quantum, and Modicon Premium, according to a report with CISA. Successful e …

Security 2020: Success Hinges on Teamwork

Editor’s Note: This is the first part in a series of stories looking at cybersecurity in 2020 from the perspective of a panel of experts. By Gregory Hale Looking at what security has to bring for the coming year in the manufacturing automation sector h …

2 Killed in Chem Plant Blast in Spain

Two people were killed in northeastern Spain Tuesday night after multiple explosions at a chemical plant, officials said. The blasts occurred at the Químicas de Óxido de Etileno plant in Tarragona, about 50 miles southwest of Barcelona, and ignited a f …

Emerson Fixes Issue in GE PACSystems RX3i

Emerson has a fix for the PACSystems RX3i product it acquired from GE that has an improper input validation vulnerability, according to a report from CISA. Successful exploitation of this remotely exploitable vulnerability, discovered by Yeop Chang, co …

OSIsoft Fixes PI Vision Holes

OSIsoft LLC has a new version to resolve multiple vulnerabilities in its PI Vision, according to a report from CISA. The vulnerabilities include an improper access control, cross-site request forgery (CSRF), cross-site scripting, and inclusion of sensi …

Siemens’ Plan to Handle Race Condition Vulnerability

Siemens recommends customers to apply a configuration change for a race condition in the restart behavior of SINAMICS PERFECT HARMONY GH180 that could allow an unauthorized attacker with physical access to the affected device to restart the HMI with di …

ActiveX Alert for Siemens Industrial Products

Multiple Siemens industrial products such as SIMATIC WinCC, SIMATIC STEP 7, SIMATIC PCS 7, TIA Portal, and S7-PLCSIM Advanced use ActiveX components. However, during the installation of these products, ActiveX components are registered using mechanisms …

Siemens Fixes SINEMA Server Vulnerability

Siemens fixed a vulnerability in its SINEMA Server that could allow authenticated users with a low-privileged account to perform firmware updates (as well as other administrative operations) on connected devices, according to a report with Siemens Prod …

Siemens Clears TIA Portal Issue

Siemens has a fix and a workaround to handle a vulnerability in its TIA Portal that could allow a local attacker to execute arbitrary code with system privileges, according to a report on Siemens ProductCERT. Siemens has released an update for TIA Port …

Siemens Fixes Switch Vulnerability

Siemens has a fix available to handle an authentication bypass vulnerability in SCALANCE X switches, according to a report on Siemens ProductCERT. The vulnerability, discovered by Maxim Rupp, allows an unauthenticated attacker to violate access-control …

Blast Kills 7 at India Chemical Plant

The death toll in the explosion at a chemical factory in Maharashtra’s Palghar district in India Saturday has risen to seven with the recovery of one more body, officials said. The blast occurred Saturday evening during the testing of some chemicals at …

NY Man gets 5 Years for ATM Skimming Scheme

A New York man got five years in prison followed by three years of supervised release for using secret card-reading devices and pinhole cameras on various New Jersey bank locations to steal at least $390,141, said officials at the U.S. Attorney’s offic …

KS Programmer Sentenced in Cyber Threat Case

A Wichita computer programmer got three years of federal probation and a $2,000 fine last Monday for threatening cyberattacks against two web sites that posted criticism of Wichita lawyer Brad Pistotnik, officials at the U.S. Attorneys office said. Dav …

Rockwell Deals for Security Provider, Avnet

Rockwell Automation, Inc. acquired privately held Avnet Data Security, LTD, an Israeli-based cybersecurity provider. Avnet offers IT/OT cyber services and solutions ranging from assessments, penetration testing, network and security solutions, and trai …

New Look and Feel for ISSSource

Going into its 10th year, Industrial Safety and Security Source (ISSSource.com) launched when safety was already a significant player within the manufacturing sector, but security was in its infancy. To better represent the changing dynamic of the safe …

Working to Cut Methylene Chloride Exposure

A Utah-based manufacturer had 90 to 100 employees working in a small clean room where they used methylene chloride as a bonding agent for plastic tubing during the manufacture of biomedical devices. As a part of their work, employees poured methylene c …

Framework for ICS Cyber Attacks

Information culled from tactics and techniques attackers use when assaulting industrial control systems (ICS) that operate some of the nation’s most critical infrastructures including energy transmission and distribution plants, oil refineries, wastewa …

Pin It on Pinterest