Siemens has revealed a severe security vulnerability (CVE-2024-56336) in specific SINAMICS S200 drive systems, allowing attackers to exploit an unlocked bootloader. With a CVSS score of 9.8, this flaw compromises device security, enabling code injection and untrusted firmware installation. Siemens advises users to isolate affected systems, implement security measures, and monitor for unauthorized access, as no firmware update is available yet.

14,000 routers are infected by malware that's highly resistant to takedowns
Researchers say they have uncovered a takedown-resistant botnet of 14,000 routers and other network devices—primarily made by Asus—that have been conscripted into a proxy network

