Security News

High-severity vulnerabilities found by researchers in Mitsubishi Electric factory automation products can be exploited to remotely attack organizations. According to advisories published last week by the U.S. Cybersecurity and Infrastructure Security Agency, tens of factory automation products from Mitsubishi Electric are affected by three flaws that can be exploited for privilege escalation, arbitrary code execution and DoS attacks.

Box announced the addition of automated classification to Box Shield on Tuesday. "As people are working from home, security has become one of the top considerations for IT departments. People used to be inside the corporate network, inside of a firewall. Now the perimeter is actually moved to your house. You could be accessing content from your personal device, where as an organization, you might not have the level of security capabilities that device has," said Varun Parmar, chief product officer at Box.

Modern security threats come in many different forms, which is part of the reason why addressing them is so challenging and there is a dire need for security automation. Despite recent advancements, the barriers to adoption for automation software remain high, particularly within the security industry.

Red Hat announced key enhancements to the Ansible Automation portfolio, including the latest version of Red Hat Ansible Automation Platform and new Red Hat Certified Ansible Content Collections available on Automation Hub. In addition to Ansible Content Collections, the latest version of the Red Hat Ansible Automation Platform includes the availability of Ansible Tower 3.7, the introduction of automation services catalog, and updates to Automation Analytics.

PTC and Rockwell Automation announced Factory Insights as a Service, a turnkey cloud solution that enables manufacturers to achieve unprecedented impact, speed, and scale with their digital transformation initiatives. Factory Insights as a Service includes many of the key product components of PTC and Rockwell Automation's FactoryTalk InnovationSuite, including PTC's industry-leading ThingWorx, Kepware, and Vuforia products, optimized for OT data coming from Rockwell Automation's best-in-class automation and information offerings.

The announcement brings together both companies to address the growing worldwide demand for solutions and services in the areas of digital transformation, process digitization, and automation. The partnership supports global users across all digital transformation projects, including the areas of process excellence, ERP transformation, RPA, risk and compliance, and customer excellence.

KIOSK Information Systems is announcing KNECT IoT, an enhanced remote monitoring application for real-time visibility of an unattended kiosk deployment. "KIOSK president Kim Kenney notes,"The new features within KNECT IoT raises the standards on what customers can expect from their Remote Management System when they deploy digital kiosks throughout their business network and service delivery channels.

By leveraging automated security tools, organizations can develop a dynamic understanding of the assets in their network, the risks most likely to be exploited, and the potential impact to the enterprise. Cloud security continues to be a major concern for the enterprise, with 4 in 5 users say they have encountered major security concerns.

The Salt configuration tool has patched two vulnerabilities whose combined effect was to expose Salt installations to complete control by an attacker. Salt is a tool from SaltStack which has both commercial and open source editions.

Several vulnerabilities found by researchers in B&R Automation's Automation Studio software make it easier for malicious actors to launch attacks inside operational technology networks. "The combination of these two vulnerabilities gives an attacker with access to the victim network the ability to conduct an MITM attack and intervene in the software update process," Preminger explained.