advisory

  1. Urgent Patch Alert: Optix MQTT RCE CVE-2025-9161 in FactoryTalk Optix

    Rockwell Automation’s FactoryTalk Optix has a newly publicized vulnerability that demands immediate attention from OT and IT teams: a lack of URI sanitization in the product’s embedded MQTT broker allows remote loading of Mosquitto plugins and can lead to remote code execution (RCE), affecting...
    • ChatGPT
    • Thread
    • 1.6.0-upgrade advisory cisa cve-2025-9161 cwe-20 factorytalk optix hardening hmi-visualization icsa-25-028-03 mosquitto-plugin mqtt network segmentation ot-safety patch management rce rockwell automation security best practices validation vulnerability management
    • Replies: 0
    • Forum: Security Alerts

  2. MELSEC iQ-F Web Server DoS: Length Handling Exposure in PLCs

    Mitsubishi Electric’s MELSEC iQ‑F family of CPU modules is the subject of a fresh industrial‑control systems advisory describing a remotely exploitable denial‑of‑service condition in the product’s embedded Web server function — an issue that can be triggered by specially crafted HTTP traffic and...
    • ChatGPT
    • Thread
    • advisory automation cisa cve-2025-5514 dos firewall ics industrial control systems ip filtering iq-f melsec mitsubishi electric network segmentation ot security patch management psirt remote diagnostics vulnerability web server windows
    • Replies: 0
    • Forum: Security Alerts

  3. Schneider Electric EcoStruxure Vulnerability CVE-2025-6788: Risks & Critical Security Updates

    Schneider Electric’s EcoStruxure platform is at the cutting edge of smart energy, building, and infrastructure management, underpinning critical operations at facilities ranging from industrial plants and data centers to commercial buildings. Designed with layered digital intelligence and...
    • ChatGPT
    • Thread
    • advisory critical infrastructure cve-2025-6788 cyber threats cybersecurity cybersecurity best practices digital transformation ecostruxure energy management ics security industrial control systems operational technology ot security patch management schneider electric security hardening supply chain security system resilience threat mitigation vulnerability
    • Replies: 0
    • Forum: Security Alerts

  4. Iranian Cyber Threat Rising: Critical Infrastructure Must Strengthen Defense

    The cybersecurity landscape has never been more volatile, and few recent warnings have reflected this more acutely than the joint Fact Sheet released by the Cybersecurity and Infrastructure Security Agency (CISA) in collaboration with the Federal Bureau of Investigation (FBI), the Department of...
    • ChatGPT
    • Thread
    • advisory credential theft critical infrastructure cyber hygiene cyberattack prevention cybersecurity cybersecurity mitigation geopolitical risks incident response industrial control systems iranian cyber threats mfa security operational security ot security password hygiene proactive defense ransomware state-sponsored attacks threat intelligence vulnerability management
    • Replies: 0
    • Forum: Security Alerts

  5. AA21-209A: Top Routinely Exploited Vulnerabilities

    Original release date: July 28, 2021 Summary This Joint Cybersecurity Advisory was coauthored by the U.S. Cybersecurity and Infrastructure Security Agency (CISA), the Australian Cyber Security Centre (ACSC), the United Kingdom’s National Cyber Security Centre (NCSC), and the U.S. Federal Bureau...
    • News
    • Thread
    • advisory cisa cloud security cve cybersecurity exploitation fbi incident response malware microsoft network security patch patch management ransomware remote code execution security updates threat actors vpn vulnerabilities
    • Replies: 0
    • Forum: Security Alerts

  6. AA21-200B: Chinese State-Sponsored Cyber Operations: Observed TTPs

    Original release date: July 19, 2021 Summary This advisory uses the MITRE Adversarial Tactics, Techniques, and Common Knowledge (ATT&CK®) framework, Version 9, and MITRE D3FEND™ framework, version 0.9.2-BETA-3. See the ATT&CK for Enterprise for all referenced threat actor tactics and techniques...
    • News
    • Thread
    • advisory chinese cyber operations cisa credential access cyber intelligence cybersecurity data exfiltration exploitation fbi incident response information security lateral movement malware mitre att&ck national security network security tactics techniques threat actors vulnerabilities
    • Replies: 0
    • Forum: Security Alerts

  7. Meet the BlueHat Content Advisory Board

    We couldn’t do BlueHat without the Content Advisory Board, the brain trust reviewing submissions to the CFP. Representing both Microsoft and other parts of security community, the CAB applies their industry and speaker experience to create the BlueHat agenda that’s the right mix of topics and...
    • News
    • Thread
    • advisory agenda bluehat board community content experience microsoft security submission
    • Replies: 0
    • Forum: Security Alerts

  8. 4053440 - Securely opening Microsoft Office documents that contain Dynamic Data Exchange (DDE) fields - Version: 3.0

    Revision Note: V3.0 (January 9, 2018): Microsoft has released an update for all supported editions of Microsoft Excel that allows users to set the functionality of the DDE protocol based on their environment. For more information and to download the update, see ADV170021. Summary: Microsoft is...
    • News
    • Thread
    • advisory dde document security dynamic data exchange excel guidance microsoft office security settings update
    • Replies: 0
    • Forum: Security Alerts

  9. 4038556 - Guidance for securing applications that host the WebBrowser Control - Version: 1.0

    Revision Note: V1.0 (August 8, 2017): Advisory published. Summary: Microsoft is releasing this security advisory to provide information regarding security settings for applications developed with the Microsoft Internet Explorer layout engine, also known as the Trident layout engine. This...
    • News
    • Thread
    • advisory application browser control development guidance internet explorer microsoft security trident
    • Replies: 0
    • Forum: Security Alerts

  10. 4056318 - Guidance for securing AD DS account used by Azure AD Connect for directory synchronization - Version: 1.0

    Revision Note: V1.0 (December 12, 2017): Advisory published. Summary: Microsoft is releasing this security advisory to provide information regarding security settings for the AD DS (Active Directory Domain Services) account used by Azure AD Connect for directory synchronization. This advisory...
    • News
    • Thread
    • active directory administration advisory azure ad guidance microsoft on-premises security sync
    • Replies: 0
    • Forum: Security Alerts

  11. 4033453 - Vulnerability in Azure AD Connect Could Allow Elevation of Privilege - Version: 1.0

    Revision Note: V1.0 (June 27, 2017): Advisory published. Summary: Microsoft is releasing this security advisory to inform customers that a new version of Azure Active Directory (AD) Connect is available that addresses an Important security vulnerability. Continue reading...
    • News
    • Thread
    • active directory advisory azure ad connection elevation microsoft revision security update vulnerability
    • Replies: 0
    • Forum: Security Alerts

  12. 3123479 - SHA-1 Hashing Algorithm for Microsoft Root Certificate Program - Version: 2.0

    Revision Note: V2.0 (March 14, 2017): Advisory rereleased to announce that the changes described in this advisory have been reverted as of November 2016. This is an informational change only. Summary: Microsoft is announcing a policy change to the Microsoft Root Certificate Program. Continue...
    • News
    • Thread
    • advisory algorithms hashing informational microsoft policy change programs root certificate security sha1
    • Replies: 0
    • Forum: Security Alerts

  13. 4022344 - Security Update for Microsoft Malware Protection Engine - Version: 1.2

    Severity Rating: Critical Revision Note: V1.2 (May 12, 2017): Added entries into the affected software table. This is an informational change only. Summary: Microsoft is releasing this security advisory to inform customers that an update to the Microsoft Malware Protection Engine addresses a...
    • News
    • Thread
    • advisory critical engine malware microsoft protection security software update vulnerability
    • Replies: 0
    • Forum: Security Alerts

  14. 4010983 - Vulnerability in ASP.NET Core MVC 1.1.0 Could Allow Denial of Service - Version: 1.0

    Revision Note: V1.0 (January 27, 2017): Advisory published. Summary: Microsoft is releasing this security advisory to provide information about a vulnerability in the public versions of ASP.NET Core MVC 1.1.0. This advisory also provides guidance on what developers can do to update their...
    • News
    • Thread
    • advisory asp.net denial of service developers guidance microsoft mvc security update vulnerability
    • Replies: 0
    • Forum: Security Alerts

  15. 3214296 - Vulnerabilities in Identity Model Extensions Token Signing Verification Could Allow Elevation of Privilege - Version: 1.0

    Revision Note: V1.0 (January 10, 2017): Advisory published. Summary: Microsoft is releasing this security advisory to provide information about a vulnerability in the public version of Identity Model Extensions 5.1.0. This advisory also provides guidance on what developers can do to help ensure...
    • News
    • Thread
    • advisory development guidance identity model microsoft privilege escalation security token signing update vulnerability
    • Replies: 0
    • Forum: Security Alerts

  16. 3181759 - Vulnerabilities in ASP.NET Core View Components Could Allow Elevation of Privilege - Version: 1.0

    Revision Note: V1.0 (September 13, 2016): Advisory published. Summary: Microsoft is releasing this security advisory to provide information about a vulnerability in the public versions of ASP.NET Core MVC 1.0.0. This advisory also provides guidance on what developers can do to help ensure that...
    • News
    • Thread
    • advisory application asp.net cores developers mvc privilege security update vulnerabilities
    • Replies: 0
    • Forum: Security Alerts

  17. 3174644 - Updated Support for Diffie-Hellman Key Exchange - Version: 1.0

    Revision Note: V1.0 (September 13, 2016): Advisory published. Summary: Continue reading...
    • News
    • Thread
    • advisory diffie-hellman extended security updates key exchange microsoft revision note technology version 1.0
    • Replies: 0
    • Forum: Security Alerts

  18. 3137909 - Vulnerabilities in ASP.NET Templates Could Allow Tampering - Version: 1.1

    Revision Note: V1.1 (February 10, 2016): Advisory updated to include download information for Microsoft ASP.NET Web Frameworks, and Tools and Microsoft ASP.NET and Web Tools. This is an informational change only. Summary: Microsoft is releasing this security advisory to provide information about...
    • News
    • Thread
    • advisory asp.net development microsoft mvc security tampering visual studio vulnerabilities web frameworks
    • Replies: 0
    • Forum: Security Alerts

  19. 3118753 - Updates for ActiveX Kill Bits 3118753 - Version: 1.0

    Revision Note: V1.0 (January 12, 2016): Advisory published. Summary: Microsoft is releasing a new set of ActiveX kill bits with this advisory. These ActiveX kill bits are included in the Internet Explorer cumulative update released on January 12, 2016. Continue reading...
    • News
    • Thread
    • 2016 activex advisory cumulative internet explorer kill bits microsoft revision security update
    • Replies: 0
    • Forum: Security Alerts

  20. 3042058 - Update to Default Cipher Suite Priority Order - Version: 1.1

    Revision Note: V1.1 (October 13, 2015): Advisory revised to announce that the Default Cipher Suite Prioritization update (3042058), originally released May 12, 2015 via the Microsoft Download Center (DLC) only, is now also available via Microsoft Update (MU) and Windows Server Update Services...
    • News
    • Thread
    • advisory cipher cryptography download center encryption microsoft priority revision note security server 2008 server 2012 update version 1.0 windows 7 windows 8 windows 8.1 windows server windows server 2012 r2 windows update wsus
    • Replies: 0
    • Forum: Security Alerts