September 23, 2015 Water Sector Cyber Threat Briefing

Exploring the Vulnerabilities and Risks of High Tech Vehicles

OPM Underestimated the Number of Stolen Fingerprints by 4.5 Million

Using External URL Shorteners May Lead to Data Leaks

Endress+Hauser Fieldcare/CoreWrights HART Comm DTM XML Vulnerability (ICS-CERT Advisory 15-265-01) – Product Used in the Water and Wastewater Sector

N-Tron 702W Hard-Coded SSH and HTTPS Encryption Keys (ICS-CERT Advisory 15-160-01) – Products Used in the Water and Wastewater and Energy Sectors - Updated September 24, 2015

Updated Manual on Defense Support of Civil Authorities Addresses Cyber Incidents for the First Time

Cookies Set During Non-Secure Browsing Sessions Can Help Facilitate Attacks During Supposedly Secure Browsing Sessions

Mitsubishi Electric MELSEC FX-Series Controllers Denial of Service Vulnerability (ICS-CERT Advisory 15-146-01P) – Product Used in the Water and Wastewater and Energy Sectors - Updated September 29, 2015

Honeywell Experion PKS Directory Traversal Vulnerability (ICS-CERT Advisory 15-272-01) – Product Used in the Energy Sector

How Malware Can be Inserted into Safe-seeming Word Documents

Siemens SIMATIC HMI Devices Vulnerabilities (ICS-CERT Advisory 15-099-01) – Products Used in Water and Wastewater and Energy Sectors - Updated September 29, 2015