US Department of Labor, National Labor Relations Board sign agreement to strengthen information-sharing, outreach on whistleblower protections

  • Post author:
  • Post category:

WASHINGTON – The U.S. Department of Labor and the National Labor Relations Board today announced that the department’s Occupational Safety and Health Administration and the board have signed an agreement to strengthen the agencies’ partnership and outline procedures for information-sharing, referrals, training and outreach that explain federal anti-retaliation protections.The Memorandum of Understanding will also enable

Continue ReadingUS Department of Labor, National Labor Relations Board sign agreement to strengthen information-sharing, outreach on whistleblower protections

CISA Releases Three Industrial Control Systems Advisories

  • Post author:
  • Post category:

CISA released three Industrial Control Systems (ICS) advisories on October 31, 2023. These advisories provide timely information about current security issues, vulnerabilities, and exploits surrounding ICS. ICSA-23-304-02 INEA ME RTU ICSA-23-304-03 Zavio IP Camera  ICSA-23-208-03 Mitsubishi Electric CNC Series (Update B) CISA encourages users and administrators to review the newly released ICS advisories for technical

Continue ReadingCISA Releases Three Industrial Control Systems Advisories

ICS Advisory: Zavio IP Camera

  • Post author:
  • Post category:

View CSAF 1. EXECUTIVE SUMMARY CVSS v3 9.8 ATTENTION: Exploitable remotely/low attack complexity Vendor: Zavio Equipment: IP Camera Vulnerability: Improper Restriction of Operations within the Bounds of a Memory Buffer, OS Command Injection 2. RISK EVALUATION Successful exploitation of these vulnerabilities could allow remote code execution. 3. TECHNICAL DETAILS 3.1 AFFECTED PRODUCTS The following versions

Continue ReadingICS Advisory: Zavio IP Camera

ICS Advisory: INEA ME RTU

  • Post author:
  • Post category:

View CSAF 1. EXECUTIVE SUMMARY CVSS v3 9.9 ATTENTION: Exploitable remotely/low attack complexity Vendor: INEA Equipment: ME RTU Vulnerabilities: OS Command Injection, Improper Authentication 2. RISK EVALUATION Successful exploitation of these vulnerabilities could allow remote code execution. 3. TECHNICAL DETAILS 3.1 AFFECTED PRODUCTS The following versions of Inea ME RTU are affected: ME RTU: versions

Continue ReadingICS Advisory: INEA ME RTU

Subsidiary of Kimball International Inc. agrees to pay $132K in back wages, interest to resolve alleged hiring discrimination in Kentucky

  • Post author:
  • Post category:

DANVILLE, KY – A Kentucky furniture manufacturer has entered into an agreement with the U.S. Department of Labor in which the employer will pay $132,500 in back wages and interest to 201 applicants for product assembly positions to resolve alleged hiring discrimination at its Danville location. The routine compliance review of National Office Furniture Inc. by the department’s Office of Federal

Continue ReadingSubsidiary of Kimball International Inc. agrees to pay $132K in back wages, interest to resolve alleged hiring discrimination in Kentucky