CISA Releases Joint Guide for Software Manufacturers: The Case for Memory Safe Roadmaps

  • Post author:
  • Post category:

Today, as part of the Secure by Design campaign, CISA published The Case for Memory Safe Roadmaps: Why Both C-Suite Executives and Technical Experts Need to Take Memory Safe Coding Seriously in collaboration with the following partners: United States National Security Agency United States Federal Bureau of Investigation Australian Signals Directorate’s Australian Cyber Security Centre

Continue ReadingCISA Releases Joint Guide for Software Manufacturers: The Case for Memory Safe Roadmaps

Protecting your UK intellectual property abroad

  • Post author:
  • Post category:

Collection Protecting your UK intellectual property abroad To protect your intellectual property outside of the UK, you usually need to apply in each country you want protection in. From: Intellectual Property Office Published 6 December 2023 Get emails about this page Contents Documents Related content Collection Intellectual property (IP) rights are territorial. They only give

Continue ReadingProtecting your UK intellectual property abroad

UK warns of Russia attempting to circumvent sanctions to purchase restricted goods and services

  • Post author:
  • Post category:

The National Crime Agency has issued an alert to financial institutions and other members of the UK regulated sector warning that Russia is trying to procure UK sanctioned goods through intermediary countries. Sanctions imposed on Russia as a result of its invasion of Ukraine have had a significant impact on its ability to purchase products

Continue ReadingUK warns of Russia attempting to circumvent sanctions to purchase restricted goods and services

CISA Releases Two Industrial Control Systems Advisories

  • Post author:
  • Post category:

CISA released two Industrial Control Systems (ICS) advisories on December 5, 2023. These advisories provide timely information about current security issues, vulnerabilities, and exploits surrounding ICS. ICSA-23-339-01 Zebra ZTC Industrial ZT400 and Desktop GK420d ICSA-23-208-03 Mitsubishi Electric CNC Series (Update D) CISA encourages users and administrators to review the newly released ICS advisories for technical

Continue ReadingCISA Releases Two Industrial Control Systems Advisories

ICS Advisory: Zebra ZTC Industrial ZT400 and ZTC Desktop GK420d

  • Post author:
  • Post category:

View CSAF 1. EXECUTIVE SUMMARY CVSS v3 5.4 ATTENTION: Exploitable with adjacent access/low attack complexity Vendor: Zebra Technologies Equipment: ZTC Industrial ZT410, ZTC Desktop GK420d Vulnerability: Authentication Bypass Using an Alternate Path or Channel 2. RISK EVALUATION Successful exploitation of this vulnerability could allow an attacker to send specially crafted packets to change credentials without

Continue ReadingICS Advisory: Zebra ZTC Industrial ZT400 and ZTC Desktop GK420d