Decision Insights Threat Desk

A flaw in CORS headers across major browsers allows attackers to leverage DNS rebinds for unrestricted requests, posing risks.

CISA will no longer issue updates on Siemens ICS vulnerabilities, focusing instead on vulnerabilities in Solid Edge software.

Hitachi Energy identified vulnerabilities in MACH GWS, urging users to update to Version 3.5 for improved security measures.

CISA ceases updates on Siemens ICS security advisories, citing remote code execution vulnerabilities in HyperLynx and Edge App Publisher.

CISA will no longer update ICS security advisories for Siemens products from January 10, 2023, due to a critical vulnerability.

CISA recommends risk mitigations for vulnerabilities in Rockwell Automation's products, urging users to apply updates promptly.