Review – 1 Advisory Published – 5-17-22

Today, CISA’s NCCIC-ICS published one control system security advisory for products from Circutor. I also take a brief look at the different types of cybersecurity training provided by CISA.

Circutor Advisory - This advisory describes a stack-based buffer overflow in the Circutor COMPACT DC-S BASIC smart metering concentrator.

CISA ICS Cybersecurity Training

Since I mentioned CISA’s control system security training in passing this morning, I thought I might take a little bit of a more detailed look at the training programs here.

On the CISA ICS landing page, CISA provides a link to their training resources. They provide two different types of training; web-based training and instructor led training.

 

For more details about the advisory and the CISA training programs, see my article at CFSN Detailed Analysis - https://patrickcoyle.substack.com/p/1-advisory-published-5-17-22 - subscription required.