Tag: SDK

Vulnerabilities in CODESYS V3 SDK could lead to OT environments being exploited using RCE, DoS attacks

Vulnerabilities in CODESYS V3 SDK could lead to OT environments being exploited using RCE, DoS attacks

Researchers at Microsoft’s cyber-physical system team recently identified multiple high-severity vulnerabilities in the CODESYS V3 software development kit (SDK), a software development environment widely used to program and engineer programmable logic controllers (PLCs). Exploitation of these discovered vulnerabilities, which affect…

Claroty’s Team82, Check Point reveal serious security vulnerabilities in QuickBlox chat and video framework

Claroty’s Team82, Check Point reveal serious security vulnerabilities in QuickBlox chat and video framework

Researchers from Claroty’s Team82 and Check Point Research (CPR) conducted a joint research project that looked at the security of the QuickBlox software development kit (SDK) and application programming interface (API). The research identified a few major security vulnerabilities in…

Microsoft report finds attackers use multiple tactics, approaches to target OT, as critical infrastructure risks rise

Microsoft report finds attackers use multiple tactics, approaches to target OT, as critical infrastructure risks rise

A new Microsoft report provided new insights on wider risks that converging IT, Internet of Things (IoT), and operational technology (OT) systems pose to critical infrastructure. The data reported a spike in the presence of attackers across these environments and…

Microsoft finds Boa web server vulnerable SDK component, leading to supply chain risks across IoT, OT environments

Microsoft finds Boa web server vulnerable SDK component, leading to supply chain risks across IoT, OT environments

Microsoft researchers identified a vulnerable component on all the IP addresses published as IOCs and found evidence of a supply chain risk that may affect millions of organizations and devices. The vulnerable component was found to be the Boa web…

ThroughTek P2P

IoT supply chain hit by ThroughTek P2P SDK vulnerability

The Cybersecurity and Infrastructure Security Agency (CISA) announced on Tuesday the presence of a security vulnerability in ThroughTek P2P (Peer-to-Peer) SDK that allows cleartext transmission of sensitive information, such as camera audio/video feeds. The vulnerability affects a software component, part…