Government Affairs SCADA System Architecture Used in Water Affairs The SCADA system used in water affairs mainly consists of the operator workstation, engineering workstation, SCADA system of the water intake pump room, SCADA system of the drug dosing room, SCADA system of the backwashing system, SCADA system of the water...
Blog
IP Reputation Report-03012020
Top 10 countries in attack counts: The above diagram shows the top 10 regions with the most malicious IP addresses from the NSFOCUS IP Reputation databases at March 1, 2020. (mais…)
ICS Information Security Assurance Framework 18
Manufacturing Sector Network Architecture of a Cigarette Factory The network architecture of a cigarette factory consists of the production network and management network, as shown in Figure. (mais…)
Microsoft SQL Server Remote Code Execution Vulnerability (CVE-2020-0618) Threat Alert
Vulnerability Description On February 12, Microsoft released a security update to announce the fix of the remote code execution vulnerability (CVE-2020-0618) in Microsoft SQL Server Reporting Services. SQL Server, developed by Microsoft, is a relational database management system (RDBMS) that is widely used in the world. (mais…)
Apache Tomcat File Inclusion Vulnerability (CVE-2020-1938) Threat Alert
Vulnerability Description On February 20, China National Vulnerability Database (CNVD) released an Apache Tomcat file inclusion vulnerability (CNVD-2020-10487/CVE-2020-1938). This vulnerability is due to a flaw in the Tomcat Apache JServ Protocol (AJP). An attacker could exploit this vulnerability to read arbitrary files from a web application directory on the server....
Django SQL Injection (CVE-2020-7471) Threat Alert
Vulnerability Description On February 3, Django Software Foundation (DSF) released a security bulletin, announcing the fix of a SQL injection vulnerability (CVE-2020-7471) that is exploited via a StringAgg delimiter. An attacker could break escaping and inject malicious SQL statements by passing a crafted delimiter to the aggregation function contrib.postgres.aggregates.StringAgg. (mais…)
