PLBlog
Blog
Can Building Management Systems be Potential Attack Vectors for Industrial Control Systems?
For many enterprises, working with advanced industrial systems the simultaneous implementation and use of Building Management Systems (BMS) is necessary. However, because their functionality is not seen as crucial for the realisation of the enterprise’s main...
read more
Best practices for safe and secure remote work
In order to ensure the cyber security of operations for staff working remotely it is vital to implement a number of appropriate procedures and technical measures. Adequate preparation of devices and systems used, as well as maintaining appropriate safety...
read more
CVE-2020-10551 – privilege escalation in QQBrowser
QQBrowser is a web browser developed by Tencent. It is one of the most popular web browsers used in China. During our tests, we have found a vulnerability which allows an unprivileged local attacker to gain code execution as NT AUTHORITY\SYSTEM. CVEID:...
read more
CVE-2019-14326 – privilege escalation in Andy
Andy is an Android emulator for Windows and Mac. During our tests, we have found open local TCP ports which could be exploited to escalate privileges from user to root. CVEID: CVE-2019-14326 Name of the affected product(s) and version(s): Andy (all versions...
read more
Multiple vulnerabilities in Gurux GXDLMS Director – remote code execution
Gurux GXDLMS Director is an open-source Windows program for interacting with energy meters through the use of DLMS/COSEM protocol. The software has a remote update functionality for add-in DLLs as well as for files containing OBIS codes (device-specific...
read more
CVE-2019-14514 – remote code execution in MEmu
MEmu is an Android emulator for Windows. During our tests, we have found an open TCP port which could be exploited to gain code execution with root privileges. CVEID: CVE-2019-14514 Name of the affected product(s) and version(s): Microvirt MEmu (all versions...
read more
How to safely use removable media in ICS networks?
It's been 10 years since the alert issued by Cybersecurity and Infrastructure Security Agency (CISA) indicating the risks associated with using USB media as one of the sources of threat to control systems. Despite the passage of years, these threats still...
read more
Ransomware – when data becomes hostage
You sit down to your computer, drink your morning coffee, and ... a multi-colored window is displayed on the monitor informing that your data has been encrypted, and only a cryptocurrency deposit on the given account will allow you to recover it. All photos,...
read more
Universal Hack and Play
UPnP (Universal Plug and Play – plug it in and it works) is a protocol that allows direct communication between computers and network devices. It is used in dozens of home appliances and enables devices such as computers, printers, TV sets, WiFi routers,...
read more
Fuzzing the GuruxDLMS.c library with AFL
Fuzzing - methods of looking for security-related bugs Fuzzing (fuzz testing) is one of the most popular methods of looking for security-related bugs, especially the ones related to memory access (e.g. buffer overflow, use after free). Those are the...
read moreNews
Zapraszamy na #TechRisk Management Forum poświęconą tematyce cyberbezpieczeństwa i zarządzania ryzykiem technologicznym. Więcej informacji o przygotowywanej prezentacji już wkrótce! Stay tuned!
#cyberbezpieczeństwo #cybersecurity
📍Bezpieczny zdalny dostęp dla kadry inżynierskiej, wsparcia technicznego oraz kontrahentów.
Rozwiązanie dedykowane dla #ICS, z unikalnymi funkcjonalnościami dla systemów przemysłowych.
Skontaktuj się:
📩 biuro@seqred.pl
#OTsecurity #ICSsecurity #remoteaccess
@Honeywell
Learn about #cybersecurity risks with traditional remote access solutions, overview of industrial grade solution trusted by our customers and more: https://discover.honeywell.com/Enablebusinesscontinuity-7025-2285992-Registration.html?utm_source=linkedin&utm_medium=organic-social&utm_campaign=202004-hps-cyber-secureremoteaccess&utm_content=webinar&utm_term=null
@Honeywell @HWusers
#OTsecurity #ICSsecurity #remoteaccess