article thumbnail

Guest Opinion: How Modern Warfare Can Target Vulnerable IIoT Devices

Security Industry Association

In this blog from SIA Cybersecurity Advisory Board member Will Knehr – senior manager of information security and data privacy at i-PRO Americas – learn about how vulnerable industrial Internet of Things (IIoT) devices could become weapons in modern warfare.

article thumbnail

Vital Yet Vulnerable: Undersea Infrastructure Needs Better Protection

The Rand Blog

But this critical undersea infrastructure is vulnerable, and much of it has no specific defence mechanisms. The seabed hosts a large number of subsea cables and pipelines that provide communications services and oil, gas, and electricity to our societies. What steps can be taken to protect it?

Insiders

Sign Up for our Newsletter

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

article thumbnail

Cybersecurity Tips: Risk and Vulnerability Management

Security Industry Association

Managing cybersecurity risks and vulnerabilities is a critical activity for any robust security program. Risk management and vulnerability management are performed in tandem to help keep your network safer and more secure. What Is a Vulnerability? Managing Vulnerabilities in Your Environment.

article thumbnail

Worried about the latest OpenSSL vulnerability? NetScaler can help.

Citrix

November has started with the announcement of a high security OpenSSL vulnerability. OpenSSL has released a blog post that provides more detail, and OpenSSL versions 3.0.0 Now that everyone is hopefully … The post Worried about the latest OpenSSL vulnerability? first appeared on Citrix Blogs. through 3.0.6

article thumbnail

What We Can Learn from the Log4j Vulnerability

Pure Storage

In December, a critical zero-day vulnerability was reported in the widely used Log4j framework. Log4j is so ubiquitous, in fact, that Cybersecurity and Infrastructure Security Agency (CISA) Director Jen Easterly called this “the most serious vulnerability I have seen in my decades-long career.”. And that’s the key to the vulnerability.

article thumbnail

Mitigating risk from Cambium Networks cnMaestro SQL injection vulnerability

Citrix

Cambium Networks has issued upgrade packages for their on-premises cnMaestro product for fixing a vulnerability which allowed a pre-auth data exfiltration through improper neutralization of special elements used in an SQL statement.

article thumbnail

Guidance for reducing unauthenticated OGNL injection security vulnerability risk (CVE-2022-26134)

Citrix

Citrix has crafted new signatures and has updated its Citrix Web App Firewall signature file to help customers mitigate the recent OGNL injection vulnerability in multiple versions of Atlassian Confluence (CVE-2022-26134). You can download these and apply them immediately.…