plc.myforum.ro

AnteSavilt · Member 2 Joined: 13 Feb 2018 Posts: 264 Location: Croatia

Log4J Vulnerability
https://support.industry.siemens.com/cs/document/109805593/
Log4J Vulnerability Log4J Vulnerability

How to secure your system
1. On your computer, go to assets.bpcloudapps.siemens.com
2. Click Log in/Sign up
3. Enter your Account email and password
4. Click Log In
5. Go to Sites.
6. Select the site with the Connect X200/300 device
7. Select the device.
8. Go to Applications
9. Click Update > confirm with Update.
For the X200: Building Operator Discovery Distribution v3.0.30
For the X300: Building Operator Discovery Distribution v3.0.29

How to verify that your system is protected
• (you are still logged in Asset Portal web site)
• Go to Services and verify that the status of your applications is healthy and are updated with the following versions:

For the X200
o Haystack Cloud Connector 3.0.1
o Building Operator Discovery 1.0.4
o GW-Cloud-Connector 2.5.12

For the X300
o Haystack Cloud Connector 3.0.1
o Building Operator Discovery 1.0.4

Devices Application User Guide
https://sid.siemens.com/r/A6V12050067/17771235723___en-US_17633248267
https://sid.siemens.com/r/A6V12050067/17771235723___en-US_17633351691
Log4j Vulnerability Guide eBook
[url=http://www.girlshare.ro/3770153503.6]Log4J-g_uide.pdf[/url]

usrugaya · Junior Joined: 10 Jul 2018 Posts: 2

Ransomware: Hackers are using Log4j flaw as part of their attacks, warns Microsoft
A new China-based "double extortion" ransomware group has started exploiting the Log4Shell bug in VMware server products.

https://www.zdnet.com/article/ransomware-warning-hackers-are-using-log4j-flaw-as-part-of-their-attacks-warns-microsoft/

Microsoft has confirmed that suspected China-based cyber criminals are targeting the Log4j 'Log4Shell' flaw in VMware's Horizon product to install NightSky, a new ransomware strain that emerged on December 27.

Log4j flaw could be a problem for industrial networks 'for years to come'
https://www.zdnet.com/article/log4j-flaw-could-be-a-problem-for-industrial-networks-for-years-to-come/

Within hours of the vulnerability being publicly disclosed, cyber attackers were already making hundreds of thousands of attempts to exploit the critical Log4j vulnerability to spread malware and access networks.

https://open.spotify.com/show/6itpsnx3Is5vclUpexNFer