Skip to content
securitytabs

Max-severity bug in widely used OT programming tool exploited to deliver Linux malware

Unknown criminals are exploiting a maximum-severity vulnerability in Node-RED, a flow-based programming tool that is widely used in critical infrastructure, to deploy a flow that downloads and runs a Linux bot. Node-RED is commonly used for workflow automation in industrial control systems (ICS) and operational technology (OT) environments.

Summary from The Register Security.

Explained

The technology and terms in this story. Learn more

More in Vulnerabilities