Security News
Siemens on Tuesday published 12 new security advisories to inform customers about nearly two dozen vulnerabilities affecting its products. Half of the new advisories cover vulnerabilities in third-party components.
Siemens this week released nine new security advisories describing vulnerabilities affecting the company's products. These products are made by Siemens Digital Industries Software, which specializes in product lifecycle management solutions.
Siemens has released patches for some of its SIMATIC human-machine interface panels to address a high-severity vulnerability that can be exploited remotely to take full control of a device. SIMATIC HMI panels are designed for operator control and the monitoring of machines and plants.
Siemens this week informed customers that some of its product development solutions are affected by a total of nearly two dozen vulnerabilities that can be exploited for arbitrary code execution using malicious files. Siemens and CISA have published one advisory for 18 vulnerabilities affecting Siemens JT2Go, a 3D viewing tool for JT data, and Teamcenter Visualization, which provides organizations visualization solutions for documents, 2D drawings and 3D models.
Siemens and Schneider Electric on Tuesday informed customers about the availability of patches and mitigations for several potentially serious vulnerabilities affecting their industrial control system products. The new advisories describe vulnerabilities affecting the company's SICAM, SIMATIC, SIPLUS, LOGO! 8, SENTRON, SIRIUS, and XHQ products.
Industrial cybersecurity company OTORIO has released an open source tool designed to help organizations harden Siemens' SIMATIC PCS 7 distributed control systems. According to the cybersecurity firm, the script is designed to assess the security configuration of the SIMATIC PCS 7 OS client, OS server and engineering station.
Siemens Energy announced a new AI-based industrial cybersecurity service, Managed Detection and Response, powered by Eos.ii, to help small and medium-sized energy companies defend critical infrastructure against cyberattacks. "As the digital revolution transforms the energy industry, industrial operating environments are becoming increasingly vulnerable to cyberattacks," said Leo Simonovich, Head of Industrial Cybersecurity at Siemens Energy.
Cohesity has been selected to provide Siemens with a modern backup and data management solution to protect 300+ Windows servers in 39 countries, as well as long-term archiving in Switzerland. This wholly new project will see Atos, a global leader in digital transformation, deliver Cohesity's solutions to enable a comprehensive data management system to handle Siemens' backup and recovery, data storage, and long-term archival requirements, which involve storage of some data for 12 years.
Everbridge announced that Siemens will adopt the Everbridge CEM Platform to help protect Siemens' workforce and operations against critical events of all kinds, from the COVID-19 pandemic and political unrest to sudden economic changes and more. "We are very excited about our shared vision of combining Everbridge's top-of-class Critical Event Management portfolio with our own capabilities in the field of data analytics, machine learning and artificial intelligence into one end-to-end platform to keep people safe and operations running," said Marco Mille, Chief Security Officer, Siemens.
Siemens this week announced that it is acquiring UltraSoC Technologies, a provider of embedded analytics and monitoring solutions for systems-on-chip. Founded in 2006 and based in Cambridge, UK, UltraSoC delivers instrumentation and analytics solutions embedding monitoring, cybersecurity and functional safety capabilities into core SoC hardware.