Microsoft Details App Sandbox Escape Bug Impacting Apple iOS, iPadOS, macOS Devices
Microsoft on Wednesday shed light on a now patched security vulnerability affecting Apple's operating systems that, if successfully exploited, could...
Citrix Releases Security Updates for Hypervisor
Citrix has released security updates to address vulnerabilities in Hypervisor. An attacker could exploit these vulnerabilities to take control of an affected system...
REMINDER: CIP-012-1, ERO Communications between Control Centers Webinar Materials Available
In June of 2022, the ERO Enterprise conducted an additional CIP-012-1 round-table discussion on various planning and implementation topics. The discussions...
ESIG, NAGF, NERC and EPRI Workshop Joint Generator Interconnection Workshop
This major online workshop by ESIG, NAGF, NERC, and EPRI will cover the important relationships between interconnection process reforms and new standards...
Takeaways from the Third Meeting of the CISA Cybersecurity Advisory Committee
The Committee, comprised of leading voices on cybersecurity, technology, risk management, privacy, and resilience, held its inaugural meeting in December 2021...
SAP Releases July 2022 Security Updates
SAP has released security updates to address vulnerabilities affecting multiple products. An attacker could exploit some of these vulnerabilities to take control of an affected system...
Jim Robb Discusses Summer Reliability Outlook and Supply Chain Challenges on APPA Podcast
In the latest episode of Public Power Now, Jim Robb, President and CEO of the North American Electric Reliability Corporation, details NERC’s 2022 summer reliability assessment...
Multiple Vulnerabilities in Adobe Products Could Allow for Arbitrary Code Execution.
Multiple vulnerabilities have been discovered in Adobe products. Successful exploitation of the most severe of these vulnerabilities could allow for arbitrary code execution...
CISA has added one new vulnerability to its Known Exploited Vulnerabilities Catalog
CISA has added one new vulnerability to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. These types of vulnerabilities...
GridSecCon Registration is Open
Make Plans to Attend GridSecCon on October 18 and 19, 2022. NERC, the E-ISAC, and ReliabilityFirst are co-hosting the 11th grid security conference on October 18...
Reconstituted Facility Ratings Task Force (FAC-008) Scheduled to Conduct Initial Meeting
NERC Facility Ratings Task Force is conducting a Webinar on July 18, 2022, between 12:00 and 1:00 p.m. (Eastern). This is the initial meeting of the...
Facility Ratings (FAC-008)Training Information Available
SERC provides numerous training tools for use by registered entities, and one of them is devoted to FAC-008, Facility Ratings. This is an online computer training...
CEO Accused of Making Millions via Sale of Fake Cisco Devices
The suspect is 38-year-old Onur Aksoy of Miami, who is allegedly also known as Ron Aksoy and Dave Durden. According to authorities, he was the CEO of at least...
New ‘HavanaCrypt’ Ransomware Distributed as Fake Google Software Update
Security researchers at Trend Micro have identified a new ransomware family that is being delivered as a fake Google Software Update application...
New stealthy OrBit malware steals data from Linux devices
A newly discovered Linux malware is being used to stealthily steal information from backdoored Linux systems and infect all running processes on the machine...
SPP Announces MOD-032 Modeling Schedule for SPP’s 2023 Model Build
This notification goes out to all entities for whom NERC standard MOD-032 is applicable and/or entities defined by the SPP Open Access Transmission Tariff...
PyPI Repository Makes 2FA Security Mandatory for Critical Python Projects
The maintainers of the official, third-party software repository for Python have begun imposing a new, two-factor authentication...
Microsoft Windows Autopatch is Now Generally Available for Enterprise Systems
Microsoft announced the general availability of a feature called Autopatch that automatically keeps Windows and Office software up-to-date on enrolled endpoints...
Violation of PRC-019-2, R1 and PRC-024-2, R2 Results in $49,000 Penalty
On May 21, 2020, FEUS submitted a Self-Report stating it was noncompliant with PRC-019-2 R1 and PRC-024, R2. Specifically, FEUS did not coordinate an automatic...
FERC Proposes Interconnection Reforms to Address Queue Backlogs
FERC issued a proposed rule focused on expediting the current process for connecting new electric generation facilities to the grid. The notice of proposed...
Talk with Texas RE to Discuss Cybersecurity Update and Privacy Concerns
Texas RE is hosting a discussion with its IT leadership staff to provide information on cybersecurity measures and how to protect private information...