CVE-2021-27461
A vulnerability has been found in multiple revisions of Emerson Rosemount X-STREAM Gas Analyzer. The affected webserver applications allow access to stored data that can be obtained by using specially crafted URLs.
Similar Posts
North Korean Hackers Targeting Defense Firms with ThreatNeedle Malware
A prolific North Korean state-sponsored hacking group has been tied to a new ongoing espionage campaign aimed at exfiltrating sensitive information from organizations in the defense industry. Attributing the attacks with high confidence to the Lazarus Group, the new findings from Kaspersky signal an expansion of the APT actor’s tactics by going beyond the usual…
A hacker tried to poison a Calif. water supply. It was as easy as entering a password.
On Jan. 15, a hacker tried to poison a water treatment plant that served parts of the San Francisco Bay Area. It didn’t seem hard. The hacker had the username and password for a former employee’s TeamViewer account, a popular program that lets users remotely control their computers, according to a private report compiled by the…
Leaders Declare China Presents Security Risk » EntornoInteligente
Entornointeligente.com / Communique is first time alliance has asserted it needs to respond to Beijing’s growing power Joe Biden and the Nato secretary general, Jens Stoltenberg, meet during the summit in Brussels on Monday. Photograph: Stéphanie Lecocq/AFP/Getty Images Dan Sabbagh Defence and security editor and Julian Borger in Washington Nato leaders have declared China presents…
Ransomware Attacks to Get Similar Priority as Terrorism in US, Official Says
The US Department of Justice is elevating investigations of ransomware attacks to a similar priority as terrorism in the wake of the Colonial Pipeline hack and mounting damage caused by cyber criminals, a senior department official told Reuters. Internal guidance sent on Thursday to US attorney’s offices across the country said information about ransomware investigations…
NIST Releases Draft Cybersecurity Framework For Election Infrastructure – Defense Daily Network
The National Institute of Standards and Technology (NIST) on Monday released a draft framework for a voluntary, risk-based approach to cyber security for the election infrastructure community. The new draft guidance, Cybersecurity Framework Election Infrastructure… Already a subscriber or….
NSA’s National Cyber Exercise Tests Teams’ Offensive and Defensive Skills – Homeland Security Today
The National Security Agency announced Thursday the kick-off of its 20th annual National Cyber Exercise (NCX), a three-day annual cyber competition that tests the offensive and defensive cybersecurity skills of participant teams from U.S. Service Academies and Senior Military Colleges as well as civilian interns from NSA’s cyber-focused development programs. NSA’s National Cyber Exercise (NCX)…