Node-RED authentication hole being exploited in the wild

Months after Siemens released fixes for an authentication hole in flow-based programming tool Node-RED, it remains unpatched by many users and attackers are taking advantage of it in the wild.  The problem involves open source IoT/IIoT systems, including those embedded in critical infrastructure, deployed outside the control of CISOs and CIOs.... Weiterlesen: Node-RED authentication hole being exploited in the wild