Flaw in Schneider Industrial Firewalls Allows Remote Code Execution

On Wednesday, at SecurityWeek’s 2016 ICS Cyber Security Conference, in a presentation meant to demonstrate that attackers could easily bypass defenses if proper ICS protection technologies are not in place, researchers at industrial security firm CyberX disclosed the existence of several important flaws. One of them affects Schneider Electric’s ConneXium TCSEFEC family of industrial ethernet…

Was the Dyn DDoS attack actually a script kiddie v. PSN?

The massive DDoS attack that disrupted the internet address-lookup service Dyn last week was perhaps pulled off by a script kiddie targeting PlayStation Network and using Mirai malware to assemble a massive IoT botnet, according to research by Flashpoint. “Flashpoint assesses with moderate confidence that the most recent Mirai attacks are likely connected to the…

ICS Networks at Risk Due to Flaw in Schneider PLC Simulator

On Tuesday, at SecurityWeek’s 2016 ICS Cyber Security Conference, Indegy CTO Mille Gandelsman disclosed a vulnerability found by the company in Unity Pro, a Windows-based programming, debugging and operating software for Schneider’s programmable logic controllers (PLCs). Unity Pro, typically deployed on engineering workstations, includes a PLC simulator component that allows users to test applications without…

New security solutions from ESET provide added cyber protection

SAN DIEGO – October 25, 2016 – Internet users now have more ways to stay protected from the latest cyber threats with the introduction of two new security solutions released today by IT security company ESET®: ESET Smart Security Premium and ESET Internet Security. ESET’s newly introduced lineup helps individuals stay protected from common cyber threats like webcam spying,…