Swiss Rail Equipment Manufacturer Will Not Pay Ransomware Demand
NEOSEC enrichment — no mirror of the original source
Swiss railway company Stadler has refused to pay a CHF 10 million ($12.3 million) ransom demand following an attack in which a threat actor "illegally gained access to the data exchange platform with a Stadler supplier" using compromised cr
Source: SANS NewsBites. For licensing reasons NEOSEC Intel does not mirror the full text verbatim. The full text and expert commentary are available at the original source.
Editorial context in the original issue
The SANS NewsBites issue carries commentary by: Honan, Murray, Neely.
More on Manufacturer
Other advisories
- HighCVE-2026-50031ipmi-oem in FreeIPMI before 1.6.18 has exploitable buffer overflows on response messages. The Intelligent Platform Management Interface (IPMI) specification defines a set of interfaces for platform management. It is implemented by a large number of hardware manufacturers to support system management. It is most commonly used for sensor reading (e.g., CPU temperatures through the ipmi-sensors command within FreeIPMI) and remote power control (the ipmipower command). The ipmi-oem client command implements a set of a IPMI OEM commands for specific hardware vendors. If a user has supported hardware, they may wish to use the ipmi-oem command to send a request to a server to retrieve specific information. Two subcommands "ipmi-oem dell get-active-directory-config" and "ipmi-oem fujitsu get-sel-entry-long-text" were found to have exploitable buffer overflows on response messages.
- HighCVE-2026-33554ipmi-oem in FreeIPMI before 1.16.17 has exploitable buffer overflows on response messages. The Intelligent Platform Management Interface (IPMI) specification defines a set of interfaces for platform management. It is implemented by a large number of hardware manufacturers to support system management. It is most commonly used for sensor reading (e.g., CPU temperatures through the ipmi-sensors command within FreeIPMI) and remote power control (the ipmipower command). The ipmi-oem client command implements a set of a IPMI OEM commands for specific hardware vendors. If a user has supported hardware, they may wish to use the ipmi-oem command to send a request to a server to retrieve specific information. Three subcommands were found to have exploitable buffer overflows on response messages. They are: "ipmi-oem dell get-last-post-code - get the last POST code and string describing the error on some Dell servers," "ipmi-oem supermicro extra-firmware-info - get extra firmware info on Supermic
- Not ratedosv:CVE-2025-54889A user with elevated privileges can inject XSS in the SNMP traps manufacturer configuration page
- CriticalCVE-2023-46350Innovadeluxe Manufacturer Or Supplier Alphabetical Search: SQL-Injection
- CriticalCVE-2023-46350Innovadeluxe Manufacturer Or Supplier Alphabetical Search: SQL-Injection
- CriticalCVE-2023-46351MyPresta Manufacturers \(brands\) Images Block: SQL-Injection
- CriticalCVE-2023-46351MyPresta Manufacturers \(brands\) Images Block: SQL-Injection
Other news entries
- Hackers Abuse AI Pen-Test Tool Cairn to Automate Massive Attack SpreeNewsDark Reading
- Cyberattacks crank French supermarket refrigeration systems up to 50°CNewsThe Register — Security
- Ransomware Attacks on Manufacturers Surge as Supply Chain Risk GrowsNewsSecurityWeek
- EU's Cyber Resilience Act starts the 24-hour vulnerability clockNewsThe Register — Security
- MikroTik patches flaws currently being exploited to take over routersNewsCSO Online
- Trezor Says ShipMonk Breach Exposed 67,000 U.S. Customers' Data It Said Was DeletedNewsThe Hacker News
- Chinese Routers Sold Worldwide Contain BackdoorsNewsDark Reading
- Cryptocurrency Hardware Wallet Makers Report Customer Data BreachesBreachSANS NewsBites
ID