ICS-CERT

https://ics-cert.us-cert.gov/

Last activity: 26.03.2021

Active - Reference to US-CERT

Mentions

Mentions in press and media 42

Date	Title	Description
Sign up to see	Sign up to see	Sign up to see
Jun 14, 2019	Why Companies Need To Think Critically About IoT
Jun 13, 2019	A widely used infusion pump can be remotely hijacked, say researchers	A workstation used to dock an infusion pump widely used in hospitals and medical facilities has critical security flaws that allow it to be remotely hijacked and controlled, according to security researchers. Researchers at healthcare secur...
Jun 6, 2019	A backdoor in Optergy tech could remotely shut down a smart building ‘with one click’	Homeland Security has given the maximum severity score for a vulnerability in a popular smart building automation system. Optergy’s Proton allows building owners and managers to remotely monitor energy consumption and manage who can access ...
May 29, 2019	3 Major Problems With the Medical Device and Wearables Market in 2019	Technology can improve human life in significant ways and aid in the fight against troublesome illnesses. Unfortunately, no technology is perfect — and newer technologies are especially prone to growing pains. There are three major problems...
May 2, 2019	Hundreds of Orpak gas station systems can be easily hacked thanks to hardcoded passwords	Homeland Security’s cybersecurity agency says a popular gas station software contains several security vulnerabilities that require “low skill” to exploit. The advisory, posted by the Cybersecurity and Infrastructure Security Agency (CISA),...
Apr 24, 2019	Security Vulnerabilities Detected in ICDs: Addressing Ransomware Risk in Medical Devices	Medical device usage is on the rise, and that reality potentially puts people at risk if those gadgets have security flaws. It’s crucial for device manufacturers, industry regulators and health practitioners to work together to ensure safet...
Apr 5, 2019	GPS “rollover” event on April 6 could have some side-effects	Enlarge Michal Fludra/NurPhoto via Getty Images reader comments 190 with 122 posters participating Share this story Share on Facebook Share on Twitter Share on Reddit On April 6, the Global Positioning System will reach the end of an era—or...
Apr 1, 2019	Hackers can take over heart devices, DHS warns	Originally Published by: Facebook says it’s putting new restrictions on livestreaming NASA is paying 24 people $19G to stay in bed The FCC has fined robocallers $208 million. It's collected $6,790. Any connected device these days is a poten...
Mar 22, 2019	Homeland Security warns of critical flaws in Medtronic defibrillators	Homeland Security has issued a warning for a set of critical-rated vulnerabilities in Medtronic defibrillators that put the devices at risk of manipulation. These small cardio-defibrillators are implanted in a patient’s chest to deliver sma...
Mar 21, 2019	Critical flaw lets hackers control lifesaving devices implanted inside patients	Enlarge / An X-ray showing an cardio defibrillator implanted in a patient. Sunzi99~commonswiki reader comments 57 with 47 posters participating Share this story Share on Facebook Share on Twitter Share on Reddit The federal government on Th...
Feb 22, 2019	Sen. Warner enlists healthcare industry help on cybersecurity	[Image courtesy of Blogtrepreneur on Flickr, per Creative Commons 2.0 license]U.S. Senator Mark Warner (D-Va.) wrote a letter to several healthcare organizations yesterday, asking their help in improving cybersecurity in the industry. A mem...
Jul 11, 2018	Publicly Reported Data Breaches: A Measure of Our Ignorance?	There is a mounting gap between what the headlines say about the costs of cyber insecurity to the U.S. economy and the results of data-driven research on this topic—with negative implications for cybersecurity. Congress should move to narro...
Apr 5, 2018	“Open sesame”: Industrial network gear hackable with the right username	Sean Gallagher reader comments 93 with 57 posters participating, including story author Share this story Share on Facebook Share on Twitter Share on Reddit This week, two separate security alerts have revealed major holes in devices from Mo...
Jan 26, 2018	Vulnerable industrial controls directly connected to Internet? Why not?	Siemens reader comments 134 with 71 posters participating, including story author Share this story Share on Facebook Share on Twitter Share on Reddit Yesterday, Siemens issued an update to a year-old product vulnerability warning for its SI...
Sep 22, 2017	'Smart' Hospital IV Pump Vulnerable To Remote Hack Attack	By this point, the half-baked security in most internet of things devices has become a bit of a running joke, leading to amusing Twitter accounts like Internet of Shit that highlight the sordid depth of this particular apathy rabbit hole. A...
Aug 31, 2017	FDA, Homeland Security Issue First Ever Recall, Warnings About Flimsy Pacemaker Security	We’ve well established that the internet of things (IOT) market is a large, stinky dumpster fire when it comes to privacy and security. But the same problems that plague your easily hacked thermostat or e-mail password leaking refrigerator ...
Aug 4, 2017	Siemens, DHS warn of “low skill” exploits against medical scanners	Enlarge University of Queensland reader comments 121 with 61 posters participating Share this story Share on Facebook Share on Twitter Share on Reddit The Department of Homeland Security's Industrial Control System Computer Emergency Respon...
May 13, 2017	The Real Lesson from the WannaCry Ransomware	Lawfare and others have spent an enormous amount of time discussing the intricacies of the Vulnerabilities Equities Process (VEP). Many policy conferences have been dedicated to the matter, and an even greater number of Twitter debates. The...
Oct 14, 2016	Beware of all-powerful DDoS malware infecting cellular gateways, feds warn	Enlarge / One of the Sierra Wireless devices that can be infected by Mirai. Sierra Wireless reader comments 66 with 42 posters participating Share this story Share on Facebook Share on Twitter Share on Reddit This week, the US government-ba...
Oct 14, 2016	Hot Commodities: The "Mending Fences" Edition	Pipe Dreams Come True at the World Energy Congress The World Energy Congress, a meeting of over 10,000 participants from over 85 countries focused on energy and hosted by the World Energy Council, convened this week in Istanbul. The opening...
Jun 17, 2016	Examining the cybersecurity landscape of utilities and control systems	Stephen Boyer Contributor Stephen Boyer is co-founder and chief technology officer of security ratings company BitSight. According to a federal indictment announced March 24, 2016, seven attackers with links to the Iranian government execut...
Apr 26, 2016	Million Dollar Vulnerabilities and an FBI for the Twenty-First Century	On February 16, US Magistrate Judge Sheri Pym, responding to an FBI request, ordered Apple to provide software to bypass the company's technical protections; this would unlock the work phone of Syed Farook, one of the two San Bernardino ter...
Mar 13, 2016	Hot Commodities: What Comes Down...	The rollercoaster ride continues as oil prices reached their highest point in 2016 at $40 per barrel this week — before slipping right back down again. Many attribute the slight surge to increased confidence following the February 16 announ...
Feb 26, 2016	Hackers did indeed cause Ukrainian power outage, US report concludes	Enlarge YellowForrester reader comments 32 with 26 posters participating Share this story Share on Facebook Share on Twitter Share on Reddit A December outage in Ukraine that caused 225,000 customers to lose electricity was the work of hack...
Jan 26, 2016	The Malware That Led to the Ukrainian Blackout	In late December, at least two Ukrainian power companies were hacked, dropping tens of thousands of people into darkness. Experts generally agree that although malware didn't cause the blackout itself, a cyberattack did play an important ro...
Dec 7, 2015	Vulnerabilities in industrial gas detectors require little skill to exploit	reader comments 22 with 16 posters participating Share this story Share on Facebook Share on Twitter Share on Reddit Gas detectors used in factories and other industrial settings to identify toxic conditions contain several vulnerabilities ...
Nov 19, 2015	Ransomware Is Coming to Medical Devices	Chest pains send you into convulsions, then stop abruptly. Is something wrong with your pacemaker? As you pant for breath, a message pops up on your phone. "Want to keep living? Pay us a ransom now, or you die." This is not cyberp...
Oct 19, 2015	Why Aren't There Better Cybersecurity Regulations for Medical Devices?	This summer, the Food and Drug Administration warned hospitals to stop using a line of drug pumps because of a cybersecurity risk: a vulnerability that could allow an attacker to remotely deliver a fatal dose to a patient. SAINT Corporation...
Jan 20, 2015	What David Cameron Doesn't Get	Last week British Prime Minister David Cameron gave an extraordinary speech in which he urged the the banning of private communications, that is communications to which the government could not listen into when legally authorized to do so. ...
Dec 23, 2014	Apple's year-end is about security	When it comes to security, Apple can and should do better. It is one of the biggest offenders, after all, making quite a few serious mistakes in this area. One of its most-important services, namely iCloud, has been instrumental in this yea...
Dec 20, 2014	Attack code exploiting critical bugs in net time sync puts servers at risk	reader comments 55 with 32 posters participating Share this story Share on Facebook Share on Twitter Share on Reddit Several critical vulnerabilities in the protocol implementation used to synchronize clock settings over the Internet are pu...
Nov 4, 2014	This system will self destruct: Crimeware gets powerful new functions	Wikia reader comments 20 with 17 posters participating Share this story Share on Facebook Share on Twitter Share on Reddit Researchers have discovered new capabilities in the BlackEnergy crimeware tool that significantly extend its reach. T...
Nov 3, 2014	Led by Boeing Vet, Tempered Networks Securing the Internet of Things	Share Share on Facebook Share on Twitter LinkedIn Email Reprints Here’s a scary headline: “BlackEnergy crimeware coursing through US control systems.” That’s from a report on a security vulnerability discovered in the Internet-connected pie...
Aug 6, 2014	Oh, great. It's not that hard to hack TSA's airport security scanning machines	LAS VEGAS — It’s been more than a decade since 9/11 brought a stringent screening process to all airports. But can someone still get a weapon through Transportation Security Authority (TSA) airport screening devices? Yes, according to a sec...
Aug 6, 2014	Oh, great. It's not that hard to hack TSA's airport security scanning machines	We are excited to bring Transform 2022 back in-person July 19 and virtually July 20 - 28. Join AI and data leaders for insightful talks and exciting networking opportunities. Register today! LAS VEGAS — It’s been more than a decade since 9/...
Jul 18, 2014	Critical industrial control systems remain vulnerable to Heartbleed exploits	reader comments 34 with 21 posters participating Share this story Share on Facebook Share on Twitter Share on Reddit More than three months after the disclosure of the catastrophic Heartbleed vulnerability in the OpenSSL library, critical i...
Jun 17, 2014	Why Security Should Be Top of Mind When Creating a Business	June 17, 2014 5 min read Opinions expressed by Entrepreneur contributors are their own. The to-do list for launching a new business is incredibly long and labor intensive. Consequently, security tasks usually fall by the wayside for reasons...
Jul 8, 2013	We interrupt this program to warn the Emergency Alert System is hackable	Wikipedia reader comments 54 with 46 posters participating Share this story Share on Facebook Share on Twitter Share on Reddit The US Emergency Alert System, which interrupts live TV and radio broadcasts with information about national emer...
Jul 5, 2013	Hacking: Password risk affects some 300 medical devices, says Homeland Security	The Dept. of Homeland Security warned last month that some 300 medical devices may be vulnerable to malicious hacking thanks to manufacturers’ hard-coded default passwords. Devices at risk include external defibrillators, infusion pumps, la...
Jun 13, 2013	Vast array of medical devices vulnerable to serious hacks, feds warn	reader comments 70 with 31 posters participating, including story author Share this story Share on Facebook Share on Twitter Share on Reddit A vast array of heart defibrillators, drug infusion pumps, and other medical devices contain backdo...
	What Lies Ahead? Security Predictions for 2017	African Business November 21st 2016 • Africa • Finance & Services “Prediction is very difficult, especially if it’s about the future,” as Nils Bohr, the Nobel laureate physicist put it. But as the end of 2016 approaches, it’s useful to ...

Reviews 0

FAQ about ICS-CERT

What has the press written about ICS-CERT?

Parsers VC has collected 42 articles mentioning ICS-CERT, among them “Why Companies Need To Think Critically About IoT” (Jun 14, 2019) and “A widely used infusion pump can be remotely hijacked, say researchers” (Jun 13, 2019).

Is ICS-CERT still active?

Yes, ICS-CERT is active; its latest activity on Parsers VC dates from Mar 26, 2021.