Search: “Historian ME”

98 stories

Searchkeyword smart Sortlatest hot importance relevance

DomainAll Cyber AIWindow24h 3d 7d 30d AllIn the wild Important only Show duplicates

CategoryAll Policy & legal 19 Ransomware 16 Industry 13 Vulnerability 12 Malware 10 Research 8 Threat actor 7 Data breach 4 Exploit / PoC 4 Advisory 3 AI tools & infra 1 Model release 1

SeverityAll critical 32 high 22 medium 10 low 31 info 3

Rockwell Automation Historian ME

CISA warns CVE-2025-12768 and CVE-2026-12661 in Rockwell Historian ME could crash devices or allow remote code execution via out-of-bounds writes; CVSS 8.

CISA issued an ICS advisory for Rockwell Automation Historian ME Series B 5.202 and Series C 7.101. CVE-2025-12768 and CVE-2026-12661 involve out-of-bounds write and stack-based buffer overflow flaws that could crash the accessed device or enable remote code execution. The product is deployed across chemical, critical manufacturing, healthcare, and water and wastewater sectors worldwide.

CISA AdvisoriesSep 1, 12:00 UTC · 14d agoAdvisory CVE-2025-12768 CVE-2026-12661

Elon Musk Broke All the Tools Historians Need to Archive Tweets About Israel

404 MediaOct 26, 13:45 UTC · Oct 26, 2023Threat actor

CISA Warns of Flaws in Siemens, GE Digital, and Contec Industrial Control Systems

The Hacker NewsJan 18, 06:14 UTC · Jan 18, 2023Advisory CVE-2022-45092 CVE-2022-2068 CVE-2022-35256+3 CVEs

AI Generated 'Boring History' Videos Are Flooding YouTube and Drowning Out Real History

404 MediaSep 3, 17:27 UTC · Sep 3, 2025Industry

Medieval Encrypted Letter Decoded

Schneier on SecurityApr 27, 11:05 UTC · Apr 27, 2026Policy & legal

Friday Squid Blogging: Stubby Squid

Schneier on SecurityJun 15, 00:00 UTC · Jun 15, 2025Model release2

Vintage Mac Community Begs Manufacturers for New Supply of Rare Dongle as Resellers Charge $250

404 MediaOct 10, 13:12 UTC · Oct 10, 2023Industry

Friday Squid Blogging: Giant Squid Art

Schneier on SecurityNov 12, 22:16 UTC · Nov 12, 2021Ransomware

New ransomware targets industrial control systems

Help Net SecurityMay 28, 11:21 UTC · May 28, 2020Ransomware

US CISA warns of Ransomware attacks impacting pipeline operations

Security AffairsFeb 19, 06:09 UTC · Feb 19, 2020Ransomware

German SG-41 Encryption Machine Up for Auction

Schneier on SecurityJan 27, 14:39 UTC · Jan 27, 2020Research

Student Cracks Inca Knot Code

Schneier on SecurityJan 27, 14:31 UTC · Jan 27, 2020Industry

Vermeer's Camera: Uncovering the link between art criticism and cybersecurity

Help Net SecurityMar 6, 00:00 UTC · Mar 6, 2018Vulnerability

“We Think the Security Control Is Working” Is No Longer Good Enough

Opinion piece argues CISOs must replace point-in-time, sampling-based audits with continuous control monitoring to prove controls work in real time.

The article contends that annual, sampling-based compliance assessments no longer satisfy boards, customers, and regulators who demand live proof that security controls are working. It cites a 2025 Dell study where 69 percent of IT professionals said leadership overestimates cyber readiness, and notes NIST's 2024 CSF update added a Govern function emphasizing continuous, measurable outcomes. The author advocates continuous control monitoring of identity, cloud configuration drift, vulnerability remediation clocks, and vendor posture, feeding automated evidence into existing GRC systems.

SecurityWeek19:30 UTC · 3h agoIndustry

ICS Patch Tuesday: Schneider Electric, Siemens Fix Critical Flaws

September ICS Patch Tuesday brings critical fixes from Schneider Electric, Siemens, and Aveva, including CVSS 9.2 authentication flaw CVE-2026-3869 in Modicon M580 controllers.

Schneider Electric's September advisories include a critical authentication vulnerability, CVE-2026-3869 with a CVSS score of 9.2, in Modicon M580 and Modicon M580 Safety controllers, plus high-severity bugs in PowerLogic T300 and EcoStruxure IT Data Center Expert. Siemens published nine new advisories, four rated critical across Reyrolle 7SR5, Open Interface Services, Industrial Edge Management, and SIMOVE Fleetmanager and SIPLANT, and began rolling out fixes for CVE-2026-31431, a 7.8-rated Linux kernel flaw enabling root shell access. Aveva disclosed four flaws in Pipeline Integrity Monitor's PIMBoards, including a hardcoded encryption key and MD5-hashed passwords, plus an unsafe deserialization issue in Enterprise SCADA. Rockwell Automation separately issued nine advisories covering RSLinx Classic and multiple controller products.

SecurityWeekSep 9, 10:49 UTC · 6d agoVulnerability CVE-2026-3869 CVE-2026-31431

CISA tells operators to harden Siemens S7 PLCs. Here’s how to do it without disrupting production

CISA, NSA, FBI and other agencies warn of active targeting of internet-exposed Siemens S7 PLCs and urge patching, exposure removal and hardening.

Joint advisory AA26-231A from the NSA, CISA, FBI, Department of Energy and EPA warns that actors are actively targeting Siemens S7 PLCs using internet scanning, AI-assisted scripts and libraries such as Snap7 and python-snap7 over S7comm on TCP port 102. The advisory covers S7-200 through S7-1500 series controllers and recommends patching, removing internet exposure, access controls, monitoring and disabling unneeded services. Siemens states no new S7 vulnerabilities are involved, only misconfigurations addressed in existing ProductCERT guidance SSB-104599. The article details how to apply each measure without breaking production dependencies such as remote I/O, HMI links and diagnostics.