Vulnerabilities
CISA Warns of Data Theft Flaw in NSA-Built OT Network Tool — No Patch Will Be Released
CISA has flagged a data-theft vulnerability in GrassMarlin, an open-source OT network analysis tool developed by the NSA. The tool reached end-of-life in 2017 and no patch will be released. A public proof-of-concept exploit is already available on GitHub. WASHINGTON, D.C. — The Cybersecurity and Infrastructure Security Agency has published