Review – 2 Advisories Published – 8-4-26

Today CISA’s NCCIC-ICS published one control system security advisory for products from Acrisure and a medical device security advisory for products from Thermo Fisher. 

Advisories  

Acrisure Advisory 

This advisory describes a use of hard-coded cryptographic key vulnerability in the Acrisure KARR BT and DR-100 automotive anti-theft systems.  

Thermo Fisher Advisory 

This advisory describes a missing support for integrity check vulnerability in the Thermo Fisher Applied Biosystems Genetic Analyzers. The vulnerability was disclosed last week by Thermo Fisher. 

For more information on these advisories, as well as two DTRH looks at these advisories, see my article at CFSN Detailed Analysis - https://patrickcoyle.substack.com/p/2-advisories-published-8-4-26 - subscription required.