CISA Warns of Critical ICS Flaws in Siemens, Tigo Energy, and EG4 Equipment

Xuất bản: 22/8/2025

CISA Warns of Critical ICS Flaws in Siemens, Tigo Energy, and EG4 Equipment

[![The Cyber Express](data:image/svg+xml,%3Csvg%20xmlns='http://www.w3.org/2000/svg'%20viewBox='0%200%20250%20100'%3E%3C/svg%3E)](https://thecyberexpress.com/)

  • [MagazineDownload](https://thecyberexpress.com/cybersecurity-magazine/ "Cybersecurity Magazine")
  • Firewall Daily

* All

* Bug Bounty & Rewards

* Dark Web News

* Data Breach News

* Hacker News

* Ransomware News

* Vulnerabilities

[![Operation Serengeti 2.0, Afripol, Interpol, Cybercrime, Ransomware](data:image/svg+xml,%3Csvg%20xmlns='http://www.w3.org/2000/svg'%20viewBox='0%200%201764%201258'%3E%3C/svg%3E "African Authorities Arrest 1,200 People, Seize Millions in Massive Cybercrime and Fraud Networks' Bust 1")](https://thecyberexpress.com/1200-arrested-operation-serengeti-2-0/)

### African Authorities Arrest 1,200 People, Seize Millions in Massive Cybercrime and Fraud Networks’ Bust

[![CVE-2025-8592](data:image/svg+xml,%3Csvg%20xmlns='http://www.w3.org/2000/svg'%20viewBox='0%200%201920%201280'%3E%3C/svg%3E "70,000 WordPress Sites Exposed by Inspiro Theme Security Flaw 2")](https://thecyberexpress.com/csrf-flaw-cve-2025-8592/)

### 70,000 WordPress Sites Exposed by Inspiro Theme Security Flaw

[![CISA](data:image/svg+xml,%3Csvg%20xmlns='http://www.w3.org/2000/svg'%20viewBox='0%200%201920%201280'%3E%3C/svg%3E "CISA Warns of Critical ICS Flaws in Siemens, Tigo Energy, and EG4 Equipment 3")](https://thecyberexpress.com/cisa-warns-of-ics-vulnerabilities/)

### CISA Warns of Critical ICS Flaws in Siemens, Tigo Energy, and EG4 Equipment

[![Black Hat USA 2025 CISO Podcast Series](data:image/svg+xml,%3Csvg%20xmlns='http://www.w3.org/2000/svg'%20viewBox='0%200%201920%201280'%3E%3C/svg%3E)](https://thecyberexpress.com/black-hat-usa-2025-ciso-podcast-series-ep-2/)

### Black Hat USA 2025 CISO Podcast Series: Episode 2 Now Live

[![CVE-2025-9074](data:image/svg+xml,%3Csvg%20xmlns='http://www.w3.org/2000/svg'%20viewBox='0%200%201920%201280'%3E%3C/svg%3E "Critical Vulnerability in Docker Desktop Allows Malicious Containers to Access Host System 5")](https://thecyberexpress.com/critical-cve-2025-9074-docker-vulnerability/)

### Critical Vulnerability in Docker Desktop Allows Malicious Containers to Access Host System

[![iOS 18.6.2, Zero-Day, Spyware, Security Update](data:image/svg+xml,%3Csvg%20xmlns='http://www.w3.org/2000/svg'%20viewBox='0%200%201000%20596'%3E%3C/svg%3E)](https://thecyberexpress.com/zero-day-patched-in-ios-18-6-2/)

### Apple Patches Zero-Day in iOS 18.6.2 After Targeted Exploits Involving Malicious Image Files

[![DOM‑based extension](data:image/svg+xml,%3Csvg%20xmlns='http://www.w3.org/2000/svg'%20viewBox='0%200%201920%201277'%3E%3C/svg%3E "DOM-Based Extension Clickjacking Exposes Millions of Password Manager Users to Credential Theft 7")](https://thecyberexpress.com/dom%e2%80%91based-extension-clickjacking/)

### DOM-Based Extension Clickjacking Exposes Millions of Password Manager Users to Credential Theft

[![Static Tundra, Energetic Bear, Cisco, Critical Infrastructure](data:image/svg+xml,%3Csvg%20xmlns='http://www.w3.org/2000/svg'%20viewBox='0%200%201537%201024'%3E%3C/svg%3E "Russia's FSB-Linked Hackers Targeting Cisco Network Gear Used in Critical Infrastructure 8")](https://thecyberexpress.com/russia-targeting-cisco-network-gear/)

### Russia’s FSB-Linked Hackers Targeting Cisco Network Gear Used in Critical Infrastructure

[![Europol Qilin ransomware group reward](data:image/svg+xml,%3Csvg%20xmlns='http://www.w3.org/2000/svg'%20viewBox='0%200%201940%201293'%3E%3C/svg%3E "Europol Says $50k Reward on Qilin Ransomware Group Admins is Fake 9")](https://thecyberexpress.com/europol-reward-qilin-ransomware-group/)

### Europol Says $50k Reward on Qilin Ransomware Group Admins is Fake

### Trending Tags

* blackbyte ransomware

* Ransomware

* lapsus$ ransomware

* Apple

* Apple vulnerability

* All

* Compliance

* Governance

* Policy Updates

* Regulations

[![Black Hat USA 2025 CISO Podcast Series](https://thecyberexpress.com/wp-content/uploads/Black-Hat-USA-2025-CISO-Podcast-Series-360x180.jpg?crop=1 "Black Hat USA 2025 CISO Podcast Series: Episode 2 Now Live 10")](https://thecyberexpress.com/black-hat-usa-2025-ciso-podcast-series-ep-2/)

### Black Hat USA 2025 CISO Podcast Series: Episode 2 Now Live

[![Black Hat USA 2025 CISO Series Episode 1](https://thecyberexpress.com/wp-content/uploads/Black-Hat-USA-2025-CISO-Series-Episode-1-360x180.jpg?crop=1 "Black Hat USA 2025 CISO Podcast Series Episode 1: What CISOs Must Know About AI Security & Governance 11")](https://thecyberexpress.com/black-hat-usa-2025-ciso-series-episode-1/)

### Black Hat USA 2025 CISO Podcast Series Episode 1: What CISOs Must Know About AI Security & Governance

[![Optus Data Breach, Optus Cyberattack, Optus Cyber Attack, Optus Data Leak](https://thecyberexpress.com/wp-content/uploads/Optus-data-breach-Averted-360x180.webp?crop=1 "Australian Information Commissioner Seeks Civil Penalty Action Over 2022 Optus Data Breach 12")](https://thecyberexpress.com/civil-penalty-over-2022-optus-data-breach/)

### Australian Information Commissioner Seeks Civil Penalty Action Over 2022 Optus Data Breach

[![UAE Cybersecurity Council](https://thecyberexpress.com/wp-content/uploads/UAE-Cybersecurity-Council-1-360x180.webp?crop=1 "Think Before You Download: UAE Cybersecurity Council Issues Warning on Unverified Apps 13")](https://thecyberexpress.com/uae-cybersecurity-council-flags-privacy-risks/)

### Think Before You Download: UAE Cybersecurity Council Issues Warning on Unverified Apps

[![Romania, Financial Scam, Ministry of Finance Romania, Finance Minister, Alexandru Nazare](https://thecyberexpress.com/wp-content/uploads/Alexandru-Nazare-Fraud-Scam-360x180.webp?crop=1 "Romania Warns of Financial Scam Impersonating its Newly Re-Appointed Minister of Finance 14")](https://thecyberexpress.com/romania-financial-scam-finance-minister/)

### Romania Warns of Financial Scam Impersonating its Newly Re-Appointed Minister of Finance

[![OT Cybersecurity, Australia, Cybersecurity, IEC 62443, AS IEC 62443](https://thecyberexpress.com/wp-content/uploads/Australia-OT-Cybersecurity-360x180.jpg?crop=1 "Australia Adopts Global OT Cybersecurity Standards to Secure Energy, Water, and Smart Infrastructure 15")](https://thecyberexpress.com/australia-adopts-ot-cybersecurity-standards/)

### Australia Adopts Global OT Cybersecurity Standards to Secure Energy, Water, and Smart Infrastructure

[![Federal Contractor, Cybersecurity, Federal IT Contractor, Cyber Fraud, False Claim Act](https://thecyberexpress.com/wp-content/uploads/Federal-Contractor-Cyber-Fraud-360x180.webp?crop=1 "Federal IT Contractor Pays $14.75 Million Fine to Settle Cyber Fraud Charges 16")](https://thecyberexpress.com/federal-contractor-pays-14m-to-settle-fraud/)

### Federal IT Contractor Pays $14.75 Million Fine to Settle Cyber Fraud Charges

[![No Adversarial AI Act, No Adversarial AI, AI, Artificial Intelligence](https://thecyberexpress.com/wp-content/uploads/No-Adversarial-AI-Act-360x180.png?crop=1 "U.S. Lawmakers Target 'Adversarial AI' in Bipartisan Push to Fortify Federal Systems 17")](https://thecyberexpress.com/us-lawmakers-introduce-no-adversarial-ai-act/)

### U.S. Lawmakers Target ‘Adversarial AI’ in Bipartisan Push to Fortify Federal Systems

[![Digital Targeting Web, MoD Corsham, MoD Crown Copyright](https://thecyberexpress.com/wp-content/uploads/Digital-Targeting-Web-360x180.webp?crop=1 "UK Military Unveils £1B 'Digital Targeting Web' 18")](https://thecyberexpress.com/uk-military-unveils-1b-digital-targeting-web/)

### UK Military Unveils £1B ‘Digital Targeting Web’

* Regulations

* Compliance

* Governance

* Policy Updates

* All

* How to

* What is

[![Cybersecurity Countries](https://thecyberexpress.com/wp-content/uploads/Cybersecurity-Countries-360x180.webp?crop=1 "The Top 8 Countries Leading the Cyber Defense Race in 2025 19")](https://thecyberexpress.com/top-countries-leading-cybersecurity-race-2025/)

### The Top 8 Countries Leading the Cyber Defense Race in 2025

[![link building](https://thecyberexpress.com/wp-content/uploads/Link-Building-360x180.jpg?crop=1 "The Link Building Secrets Your Competitors Don't Want You to Know 20")](https://thecyberexpress.com/link-building-secrets/)

### The Link Building Secrets Your Competitors Don’t Want You to Know

[![Supply Chain Attack](https://thecyberexpress.com/wp-content/uploads/Supply-Chain-Attack-2-360x180.webp?crop=1 "Supply Chain Resilience and Physical Security: Lessons for 2025 21")](https://thecyberexpress.com/supply-chain-resilience-for-2025/)

### Supply Chain Resilience and Physical Security: Lessons for 2025

[![Healthcare cybersecurity trends of 2024](https://thecyberexpress.com/wp-content/uploads/Healthcare-cybersecurity-trends-of-2024-360x180.jpg?crop=1 "Healthcare Cybersecurity: 2024 Was Tough, 2025 May Be Better 22")](https://thecyberexpress.com/healthcare-cybersecurity-trends-of-2024/)

### Healthcare Cybersecurity: 2024 Was Tough, 2025 May Be Better

[![CEO's Guide to Take-Down Services](https://thecyberexpress.com/wp-content/uploads/Ceo-take-down-services-360x180.webp?crop=1 "Shield Your Organization: CEO's Perspective on Take-Down Services 23")](https://thecyberexpress.com/ceos-perspective-on-take-down-services/)

### Shield Your Organization: CEO’s Perspective on Take-Down Services

[![Azure sign-in Microsoft](https://thecyberexpress.com/wp-content/uploads/Azure-sign-in-Microsoft-360x180.webp?crop=1 "Microsoft Announces Mandatory MFA for Azure Sign-ins to Bolster Cloud Defenses 24")](https://thecyberexpress.com/microsoft-mandatory-mfa-azure-sign-ins/)

### Microsoft Announces Mandatory MFA for Azure Sign-ins to Bolster Cloud Defenses

[![Signal Proxy, Signal, Signal Ban in Russia, Signal Ban in Venezuela, Bypass Signal Ban, How to Activate Signal Proxy, Signal Proxy Server](https://thecyberexpress.com/wp-content/uploads/Signal-Proxy-360x180.webp?crop=1 "How to Set Up Signal Proxy to Help Bypass Censorship in Russia and Venezuela 25")](https://thecyberexpress.com/signal-proxy-to-bypass-blocks-in-russia/)

### How to Set Up Signal Proxy to Help Bypass Censorship in Russia and Venezuela

[![Third-Party Risk Management in Healthcare](https://thecyberexpress.com/wp-content/uploads/Third-Party-Risk-Management-in-Healthcare-360x180.webp?crop=1 "Why Healthcare CISOs Must Prioritize Third-Party Risk Management 26")](https://thecyberexpress.com/third-party-risk-management-in-healthcare/)

### Why Healthcare CISOs Must Prioritize Third-Party Risk Management

[![Streaming Platforms](https://thecyberexpress.com/wp-content/uploads/Streaming-Platforms-360x180.webp?crop=1 "Protect Your Streaming Accounts Now Before It's Too Late 27")](https://thecyberexpress.com/tips-to-protect-streaming-platforms/)

### Protect Your Streaming Accounts Now Before It’s Too Late

* Cyber Warfare

* Espionage

* Workforce

* Learning & Development

* All

* Appointments

* Budgets

* Mergers & Aquisitions

* Partnerships

* Press Release

* Startups

[![Cyble-PR](https://thecyberexpress.com/wp-content/uploads/Cyble-PR-360x180.webp?crop=1 "Cyble Launches Essential 8 Cybersecurity Support Package for Australian Financial Sector 28")](https://thecyberexpress.com/cyble-introduces-support-package-in-australia/)

### Cyble Launches Essential 8 Cybersecurity Support Package for Australian Financial Sector

[![Starlink Outage](https://thecyberexpress.com/wp-content/uploads/Starlink-Outage-1-360x180.webp?crop=1 "Starlink Outage Sparks Cyberattack Speculation—But SpaceX Says Software to Blame 29")](https://thecyberexpress.com/starlink-outage-incident-or-cyberattack/)

### Starlink Outage Sparks Cyberattack Speculation—But SpaceX Says Software to Blame

[![Replit AI Agent](https://thecyberexpress.com/wp-content/uploads/Replit-AI-Agent-360x180.webp?crop=1 "Replit AI Agent Deletes Codebase and Lies About It — CEO Issues Apology 30")](https://thecyberexpress.com/replit-ai-agent-incident/)

### Replit AI Agent Deletes Codebase and Lies About It — CEO Issues Apology

[![Pay a Ransom, Critical Infrastructure, UK NCA](https://thecyberexpress.com/wp-content/uploads/Pay-a-Ransom-360x180.jpg?crop=1 "Any Intent to Pay a Ransom? UK Government Wants to Know 31")](https://thecyberexpress.com/any-intent-to-pay-a-ransom-uk-govt/)

### Any Intent to Pay a Ransom? UK Government Wants to Know

[![Co-op cyberattack](https://thecyberexpress.com/wp-content/uploads/Co-op-cyberattack-360x180.webp?crop=1 "All Co-op Members Hit in April Cyberattack, CEO Breaks Silence 32")](https://thecyberexpress.com/co-op-cyberattack-exposes-data-of-millions/)

### All Co-op Members Hit in April Cyberattack, CEO Breaks Silence

[![Federal Contractor, Cybersecurity, Federal IT Contractor, Cyber Fraud, False Claim Act](https://thecyberexpress.com/wp-content/uploads/Federal-Contractor-Cyber-Fraud-360x180.webp?crop=1 "Federal IT Contractor Pays $14.75 Million Fine to Settle Cyber Fraud Charges 33")](https://thecyberexpress.com/federal-contractor-pays-14m-to-settle-fraud/)

### Federal IT Contractor Pays $14.75 Million Fine to Settle Cyber Fraud Charges

[![Digital Targeting Web, MoD Corsham, MoD Crown Copyright](https://thecyberexpress.com/wp-content/uploads/Digital-Targeting-Web-360x180.webp?crop=1 "UK Military Unveils £1B 'Digital Targeting Web' 34")](https://thecyberexpress.com/uk-military-unveils-1b-digital-targeting-web/)

### UK Military Unveils £1B ‘Digital Targeting Web’

[![23andMe](https://thecyberexpress.com/wp-content/uploads/23andMe-360x180.webp?crop=1 "After Bankruptcy, 23andMe Finds a Buyer in Regeneron—But What Happens to Your Data? 35")](https://thecyberexpress.com/regeneron-acquire-23andme/)

### After Bankruptcy, 23andMe Finds a Buyer in Regeneron—But What Happens to Your Data?

[![Australia, Data breaches, OAIC, Information Commissioner, Data Breach](https://thecyberexpress.com/wp-content/uploads/Australia-Data-Breaches-2024-360x180.png?crop=1 "Australia's Data Breach Reporting Numbers Highest in Half a Decade 36")](https://thecyberexpress.com/australia-data-breaches-highest-this-decade/)

### Australia’s Data Breach Reporting Numbers Highest in Half a Decade

* Startups

* Mergers & Aquisitions

* Partnerships

* Appointments

* Budgets

* Research

* Whitepapers

* Sponsored Content

* Market Reports

* Interviews

* Podcast

* Conference

* Webinar

* Endorsed Events

[](#)No Result View All Result

  • [MagazineDownload](https://thecyberexpress.com/cybersecurity-magazine/ "Cybersecurity Magazine")
  • Firewall Daily

* All

* Bug Bounty & Rewards

* Dark Web News

* Data Breach News

* Hacker News

* Ransomware News

* Vulnerabilities

[![Operation Serengeti 2.0, Afripol, Interpol, Cybercrime, Ransomware](data:image/svg+xml,%3Csvg%20xmlns='http://www.w3.org/2000/svg'%20viewBox='0%200%201764%201258'%3E%3C/svg%3E "African Authorities Arrest 1,200 People, Seize Millions in Massive Cybercrime and Fraud Networks' Bust 1")](https://thecyberexpress.com/1200-arrested-operation-serengeti-2-0/)

### African Authorities Arrest 1,200 People, Seize Millions in Massive Cybercrime and Fraud Networks’ Bust

[![CVE-2025-8592](data:image/svg+xml,%3Csvg%20xmlns='http://www.w3.org/2000/svg'%20viewBox='0%200%201920%201280'%3E%3C/svg%3E "70,000 WordPress Sites Exposed by Inspiro Theme Security Flaw 2")](https://thecyberexpress.com/csrf-flaw-cve-2025-8592/)

### 70,000 WordPress Sites Exposed by Inspiro Theme Security Flaw

[![CISA](data:image/svg+xml,%3Csvg%20xmlns='http://www.w3.org/2000/svg'%20viewBox='0%200%201920%201280'%3E%3C/svg%3E "CISA Warns of Critical ICS Flaws in Siemens, Tigo Energy, and EG4 Equipment 3")](https://thecyberexpress.com/cisa-warns-of-ics-vulnerabilities/)

### CISA Warns of Critical ICS Flaws in Siemens, Tigo Energy, and EG4 Equipment

[![Black Hat USA 2025 CISO Podcast Series](data:image/svg+xml,%3Csvg%20xmlns='http://www.w3.org/2000/svg'%20viewBox='0%200%201920%201280'%3E%3C/svg%3E)](https://thecyberexpress.com/black-hat-usa-2025-ciso-podcast-series-ep-2/)

### Black Hat USA 2025 CISO Podcast Series: Episode 2 Now Live

[![CVE-2025-9074](data:image/svg+xml,%3Csvg%20xmlns='http://www.w3.org/2000/svg'%20viewBox='0%200%201920%201280'%3E%3C/svg%3E "Critical Vulnerability in Docker Desktop Allows Malicious Containers to Access Host System 5")](https://thecyberexpress.com/critical-cve-2025-9074-docker-vulnerability/)

### Critical Vulnerability in Docker Desktop Allows Malicious Containers to Access Host System

[![iOS 18.6.2, Zero-Day, Spyware, Security Update](data:image/svg+xml,%3Csvg%20xmlns='http://www.w3.org/2000/svg'%20viewBox='0%200%201000%20596'%3E%3C/svg%3E)](https://thecyberexpress.com/zero-day-patched-in-ios-18-6-2/)

### Apple Patches Zero-Day in iOS 18.6.2 After Targeted Exploits Involving Malicious Image Files

[![DOM‑based extension](data:image/svg+xml,%3Csvg%20xmlns='http://www.w3.org/2000/svg'%20viewBox='0%200%201920%201277'%3E%3C/svg%3E "DOM-Based Extension Clickjacking Exposes Millions of Password Manager Users to Credential Theft 7")](https://thecyberexpress.com/dom%e2%80%91based-extension-clickjacking/)

### DOM-Based Extension Clickjacking Exposes Millions of Password Manager Users to Credential Theft

[![Static Tundra, Energetic Bear, Cisco, Critical Infrastructure](data:image/svg+xml,%3Csvg%20xmlns='http://www.w3.org/2000/svg'%20viewBox='0%200%201537%201024'%3E%3C/svg%3E "Russia's FSB-Linked Hackers Targeting Cisco Network Gear Used in Critical Infrastructure 8")](https://thecyberexpress.com/russia-targeting-cisco-network-gear/)

### Russia’s FSB-Linked Hackers Targeting Cisco Network Gear Used in Critical Infrastructure

[![Europol Qilin ransomware group reward](data:image/svg+xml,%3Csvg%20xmlns='http://www.w3.org/2000/svg'%20viewBox='0%200%201940%201293'%3E%3C/svg%3E "Europol Says $50k Reward on Qilin Ransomware Group Admins is Fake 9")](https://thecyberexpress.com/europol-reward-qilin-ransomware-group/)

### Europol Says $50k Reward on Qilin Ransomware Group Admins is Fake

### Trending Tags

* blackbyte ransomware

* Ransomware

* lapsus$ ransomware

* Apple

* Apple vulnerability

* All

* Compliance

* Governance

* Policy Updates

* Regulations

[![Black Hat USA 2025 CISO Podcast Series](https://thecyberexpress.com/wp-content/uploads/Black-Hat-USA-2025-CISO-Podcast-Series-360x180.jpg?crop=1 "Black Hat USA 2025 CISO Podcast Series: Episode 2 Now Live 10")](https://thecyberexpress.com/black-hat-usa-2025-ciso-podcast-series-ep-2/)

### Black Hat USA 2025 CISO Podcast Series: Episode 2 Now Live

[![Black Hat USA 2025 CISO Series Episode 1](https://thecyberexpress.com/wp-content/uploads/Black-Hat-USA-2025-CISO-Series-Episode-1-360x180.jpg?crop=1 "Black Hat USA 2025 CISO Podcast Series Episode 1: What CISOs Must Know About AI Security & Governance 11")](https://thecyberexpress.com/black-hat-usa-2025-ciso-series-episode-1/)

### Black Hat USA 2025 CISO Podcast Series Episode 1: What CISOs Must Know About AI Security & Governance

[![Optus Data Breach, Optus Cyberattack, Optus Cyber Attack, Optus Data Leak](https://thecyberexpress.com/wp-content/uploads/Optus-data-breach-Averted-360x180.webp?crop=1 "Australian Information Commissioner Seeks Civil Penalty Action Over 2022 Optus Data Breach 12")](https://thecyberexpress.com/civil-penalty-over-2022-optus-data-breach/)

### Australian Information Commissioner Seeks Civil Penalty Action Over 2022 Optus Data Breach

[![UAE Cybersecurity Council](https://thecyberexpress.com/wp-content/uploads/UAE-Cybersecurity-Council-1-360x180.webp?crop=1 "Think Before You Download: UAE Cybersecurity Council Issues Warning on Unverified Apps 13")](https://thecyberexpress.com/uae-cybersecurity-council-flags-privacy-risks/)

### Think Before You Download: UAE Cybersecurity Council Issues Warning on Unverified Apps

[![Romania, Financial Scam, Ministry of Finance Romania, Finance Minister, Alexandru Nazare](https://thecyberexpress.com/wp-content/uploads/Alexandru-Nazare-Fraud-Scam-360x180.webp?crop=1 "Romania Warns of Financial Scam Impersonating its Newly Re-Appointed Minister of Finance 14")](https://thecyberexpress.com/romania-financial-scam-finance-minister/)

### Romania Warns of Financial Scam Impersonating its Newly Re-Appointed Minister of Finance

[![OT Cybersecurity, Australia, Cybersecurity, IEC 62443, AS IEC 62443](https://thecyberexpress.com/wp-content/uploads/Australia-OT-Cybersecurity-360x180.jpg?crop=1 "Australia Adopts Global OT Cybersecurity Standards to Secure Energy, Water, and Smart Infrastructure 15")](https://thecyberexpress.com/australia-adopts-ot-cybersecurity-standards/)

### Australia Adopts Global OT Cybersecurity Standards to Secure Energy, Water, and Smart Infrastructure

[![Federal Contractor, Cybersecurity, Federal IT Contractor, Cyber Fraud, False Claim Act](https://thecyberexpress.com/wp-content/uploads/Federal-Contractor-Cyber-Fraud-360x180.webp?crop=1 "Federal IT Contractor Pays $14.75 Million Fine to Settle Cyber Fraud Charges 16")](https://thecyberexpress.com/federal-contractor-pays-14m-to-settle-fraud/)

### Federal IT Contractor Pays $14.75 Million Fine to Settle Cyber Fraud Charges

[![No Adversarial AI Act, No Adversarial AI, AI, Artificial Intelligence](https://thecyberexpress.com/wp-content/uploads/No-Adversarial-AI-Act-360x180.png?crop=1 "U.S. Lawmakers Target 'Adversarial AI' in Bipartisan Push to Fortify Federal Systems 17")](https://thecyberexpress.com/us-lawmakers-introduce-no-adversarial-ai-act/)

### U.S. Lawmakers Target ‘Adversarial AI’ in Bipartisan Push to Fortify Federal Systems

[![Digital Targeting Web, MoD Corsham, MoD Crown Copyright](https://thecyberexpress.com/wp-content/uploads/Digital-Targeting-Web-360x180.webp?crop=1 "UK Military Unveils £1B 'Digital Targeting Web' 18")](https://thecyberexpress.com/uk-military-unveils-1b-digital-targeting-web/)

### UK Military Unveils £1B ‘Digital Targeting Web’

* Regulations

* Compliance

* Governance

* Policy Updates

* All

* How to

* What is

[![Cybersecurity Countries](https://thecyberexpress.com/wp-content/uploads/Cybersecurity-Countries-360x180.webp?crop=1 "The Top 8 Countries Leading the Cyber Defense Race in 2025 19")](https://thecyberexpress.com/top-countries-leading-cybersecurity-race-2025/)

### The Top 8 Countries Leading the Cyber Defense Race in 2025

[![link building](https://thecyberexpress.com/wp-content/uploads/Link-Building-360x180.jpg?crop=1 "The Link Building Secrets Your Competitors Don't Want You to Know 20")](https://thecyberexpress.com/link-building-secrets/)

### The Link Building Secrets Your Competitors Don’t Want You to Know

[![Supply Chain Attack](https://thecyberexpress.com/wp-content/uploads/Supply-Chain-Attack-2-360x180.webp?crop=1 "Supply Chain Resilience and Physical Security: Lessons for 2025 21")](https://thecyberexpress.com/supply-chain-resilience-for-2025/)

### Supply Chain Resilience and Physical Security: Lessons for 2025

[![Healthcare cybersecurity trends of 2024](https://thecyberexpress.com/wp-content/uploads/Healthcare-cybersecurity-trends-of-2024-360x180.jpg?crop=1 "Healthcare Cybersecurity: 2024 Was Tough, 2025 May Be Better 22")](https://thecyberexpress.com/healthcare-cybersecurity-trends-of-2024/)

### Healthcare Cybersecurity: 2024 Was Tough, 2025 May Be Better

[![CEO's Guide to Take-Down Services](https://thecyberexpress.com/wp-content/uploads/Ceo-take-down-services-360x180.webp?crop=1 "Shield Your Organization: CEO's Perspective on Take-Down Services 23")](https://thecyberexpress.com/ceos-perspective-on-take-down-services/)

### Shield Your Organization: CEO’s Perspective on Take-Down Services

[![Azure sign-in Microsoft](https://thecyberexpress.com/wp-content/uploads/Azure-sign-in-Microsoft-360x180.webp?crop=1 "Microsoft Announces Mandatory MFA for Azure Sign-ins to Bolster Cloud Defenses 24")](https://thecyberexpress.com/microsoft-mandatory-mfa-azure-sign-ins/)

### Microsoft Announces Mandatory MFA for Azure Sign-ins to Bolster Cloud Defenses

[![Signal Proxy, Signal, Signal Ban in Russia, Signal Ban in Venezuela, Bypass Signal Ban, How to Activate Signal Proxy, Signal Proxy Server](https://thecyberexpress.com/wp-content/uploads/Signal-Proxy-360x180.webp?crop=1 "How to Set Up Signal Proxy to Help Bypass Censorship in Russia and Venezuela 25")](https://thecyberexpress.com/signal-proxy-to-bypass-blocks-in-russia/)

### How to Set Up Signal Proxy to Help Bypass Censorship in Russia and Venezuela

[![Third-Party Risk Management in Healthcare](https://thecyberexpress.com/wp-content/uploads/Third-Party-Risk-Management-in-Healthcare-360x180.webp?crop=1 "Why Healthcare CISOs Must Prioritize Third-Party Risk Management 26")](https://thecyberexpress.com/third-party-risk-management-in-healthcare/)

### Why Healthcare CISOs Must Prioritize Third-Party Risk Management

[![Streaming Platforms](https://thecyberexpress.com/wp-content/uploads/Streaming-Platforms-360x180.webp?crop=1 "Protect Your Streaming Accounts Now Before It's Too Late 27")](https://thecyberexpress.com/tips-to-protect-streaming-platforms/)

### Protect Your Streaming Accounts Now Before It’s Too Late

* Cyber Warfare

* Espionage

* Workforce

* Learning & Development

* All

* Appointments

* Budgets

* Mergers & Aquisitions

* Partnerships

* Press Release

* Startups

[![Cyble-PR](https://thecyberexpress.com/wp-content/uploads/Cyble-PR-360x180.webp?crop=1 "Cyble Launches Essential 8 Cybersecurity Support Package for Australian Financial Sector 28")](https://thecyberexpress.com/cyble-introduces-support-package-in-australia/)

### Cyble Launches Essential 8 Cybersecurity Support Package for Australian Financial Sector

[![Starlink Outage](https://thecyberexpress.com/wp-content/uploads/Starlink-Outage-1-360x180.webp?crop=1 "Starlink Outage Sparks Cyberattack Speculation—But SpaceX Says Software to Blame 29")](https://thecyberexpress.com/starlink-outage-incident-or-cyberattack/)

### Starlink Outage Sparks Cyberattack Speculation—But SpaceX Says Software to Blame

[![Replit AI Agent](https://thecyberexpress.com/wp-content/uploads/Replit-AI-Agent-360x180.webp?crop=1 "Replit AI Agent Deletes Codebase and Lies About It — CEO Issues Apology 30")](https://thecyberexpress.com/replit-ai-agent-incident/)

### Replit AI Agent Deletes Codebase and Lies About It — CEO Issues Apology

[![Pay a Ransom, Critical Infrastructure, UK NCA](https://thecyberexpress.com/wp-content/uploads/Pay-a-Ransom-360x180.jpg?crop=1 "Any Intent to Pay a Ransom? UK Government Wants to Know 31")](https://thecyberexpress.com/any-intent-to-pay-a-ransom-uk-govt/)

### Any Intent to Pay a Ransom? UK Government Wants to Know

[![Co-op cyberattack](https://thecyberexpress.com/wp-content/uploads/Co-op-cyberattack-360x180.webp?crop=1 "All Co-op Members Hit in April Cyberattack, CEO Breaks Silence 32")](https://thecyberexpress.com/co-op-cyberattack-exposes-data-of-millions/)

### All Co-op Members Hit in April Cyberattack, CEO Breaks Silence

[![Federal Contractor, Cybersecurity, Federal IT Contractor, Cyber Fraud, False Claim Act](https://thecyberexpress.com/wp-content/uploads/Federal-Contractor-Cyber-Fraud-360x180.webp?crop=1 "Federal IT Contractor Pays $14.75 Million Fine to Settle Cyber Fraud Charges 33")](https://thecyberexpress.com/federal-contractor-pays-14m-to-settle-fraud/)

### Federal IT Contractor Pays $14.75 Million Fine to Settle Cyber Fraud Charges

[![Digital Targeting Web, MoD Corsham, MoD Crown Copyright](https://thecyberexpress.com/wp-content/uploads/Digital-Targeting-Web-360x180.webp?crop=1 "UK Military Unveils £1B 'Digital Targeting Web' 34")](https://thecyberexpress.com/uk-military-unveils-1b-digital-targeting-web/)

### UK Military Unveils £1B ‘Digital Targeting Web’

[![23andMe](https://thecyberexpress.com/wp-content/uploads/23andMe-360x180.webp?crop=1 "After Bankruptcy, 23andMe Finds a Buyer in Regeneron—But What Happens to Your Data? 35")](https://thecyberexpress.com/regeneron-acquire-23andme/)

### After Bankruptcy, 23andMe Finds a Buyer in Regeneron—But What Happens to Your Data?

[![Australia, Data breaches, OAIC, Information Commissioner, Data Breach](https://thecyberexpress.com/wp-content/uploads/Australia-Data-Breaches-2024-360x180.png?crop=1 "Australia's Data Breach Reporting Numbers Highest in Half a Decade 36")](https://thecyberexpress.com/australia-data-breaches-highest-this-decade/)

### Australia’s Data Breach Reporting Numbers Highest in Half a Decade

* Startups

* Mergers & Aquisitions

* Partnerships

* Appointments

* Budgets

* Research

* Whitepapers

* Sponsored Content

* Market Reports

* Interviews

* Podcast

* Conference

* Webinar

* Endorsed Events

[](#)No Result View All Result [](#) [![The Cyber Express](data:image/svg+xml,%3Csvg%20xmlns='http://www.w3.org/2000/svg'%20viewBox='0%200%20200%20200'%3E%3C/svg%3E)](https://thecyberexpress.com/)[](#)No Result View All Result Home Firewall Daily

CISA Warns of Critical ICS Flaws in Siemens, Tigo Energy, and EG4 Equipment

===========================================================================

![Ashish Khaitan](data:image/svg+xml,%3Csvg%20xmlns='http://www.w3.org/2000/svg'%20viewBox='0%200%2080%2080'%3E%3C/svg%3E) by Ashish Khaitan August 22, 2025 in Firewall Daily, Cyber News, Vulnerabilities [](#)0 [![CISA](data:image/svg+xml,%3Csvg%20xmlns='http://www.w3.org/2000/svg'%20viewBox='0%200%20750%20375'%3E%3C/svg%3E "CISA Warns of Critical ICS Flaws in Siemens, Tigo Energy, and EG4 Equipment 37")](https://thecyberexpress.com/wp-content/uploads/CISA-3.webp) 591 SHARES 3.3k VIEWS Share on LinkedInShare on Twitter[](https://telegram.me/share/url?url=https%3A%2F%2Fthecyberexpress.com%2Fcisa-warns-of-ics-vulnerabilities%2F&text=CISA%20Warns%20of%20Critical%20ICS%20Flaws%20in%20Siemens%2C%20Tigo%20Energy%2C%20and%20EG4%20Equipment)[](https://www.facebook.com/sharer.php?u=https%3A%2F%2Fthecyberexpress.com%2Fcisa-warns-of-ics-vulnerabilities%2F)[](//api.whatsapp.com/send?text=CISA%20Warns%20of%20Critical%20ICS%20Flaws%20in%20Siemens%2C%20Tigo%20Energy%2C%20and%20EG4%20Equipment%0Ahttps%3A%2F%2Fthecyberexpress.com%2Fcisa-warns-of-ics-vulnerabilities%2F)[](https://www.linkedin.com/shareArticle?url=https%3A%2F%2Fthecyberexpress.com%2Fcisa-warns-of-ics-vulnerabilities%2F&title=CISA%20Warns%20of%20Critical%20ICS%20Flaws%20in%20Siemens%2C%20Tigo%20Energy%2C%20and%20EG4%20Equipment)[](#)

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) have released four new Industrial Control Systems (ICS) advisories. These advisories expose multiple vulnerabilities in widely used ICS equipment from Siemens, Tigo Energy, and EG4 Electronics. 

ICSA-25-231-01 and ICSA-25-231-02 focus on Siemens’ Desigo CC Product Family, SENTRON Powermanager, and Mendix SAML Module—critical components used across global industrial environments. 

CISA’s advisory ICSA-25-231-01 details a vulnerability (CVE-2025-47809) involving the Wibu CodeMeter, a software licensing component used in Siemens Desigo CC and SENTRON Powermanager. With a CVSS v3.1 score of 8.2, this vulnerability stems from a Least Privilege Violation (CWE-272), where users could [exploit](https://cyble.com/exploit/ "exploit") Windows Explorer through the CodeMeter Control Center without requiring a system reboot or logoff post-installation. 

All versions of Desigo CC (V5.0 to V8) and SENTRON Powermanager (V5 to V8) are affected. Siemens recommends updating to CodeMeter version 8.30a and restarting the system post-installation to mitigate the issue. Siemens first disclosed this vulnerability to CISA and has further information on its ProductCERT page. 

Remote Exploitation in Mendix SAML Module 

In ICSA-25-231-02, Siemens’ Mendix SAML module was found to contain an Improper Verification of Cryptographic Signature (CWE-347), which could allow unauthenticated attackers to hijack user accounts in specific Single Sign-On (SSO) configurations. 

Tagged as CVE-2025-40758 and scoring 8.7 on CVSS v3.1, the [vulnerability](https://thecyberexpress.com/firewall-daily/vulnerabilities/ "vulnerability") affects multiple Mendix SAML versions prior to V3.6.21 (for Mendix 9.24), V4.0.3 (Mendix 10.12), and V4.1.2 (Mendix 10.21). Siemens advises enabling encryption settings and updating the module. The issue primarily impacts the critical manufacturing sector and was also reported directly by Siemens to CISA. 

Tigo Energy Cloud Connect Advanced Under Active Exploitation 

ICSA-25-217-02 (Update A) highlights multiple high-risk vulnerabilities in Tigo Energy’s Cloud Connect Advanced (CCA) device, essential to solar energy management systems. 

With a CVSS v4 base score of 9.3, the most critical vulnerability (CVE-2025-7768) involves the use of hard-coded credentials (CWE-798), which allows unauthorized access and administrative control. Other serious issues include: 

  • Command Injection (CVE-2025-7769, CWE-77) with a CVSS v3.1 score of 8.8, now confirmed to be publicly exploitable. 
  • Predictable Session IDs (CVE-2025-7770, CWE-337), enabling attackers to bypass authentication and access sensitive functions. 

These flaws affect Cloud Connect Advanced versions 4.0.1 and earlier. Tigo Energy is actively developing patches and urges users to consult its Help Center for interim [security](https://thecyberexpress.com/ "security") recommendations. CISA advises isolating ICS networks, restricting internet access, and using VPNs with caution due to potential vulnerabilities. 

EG4 Electronics Inverters Contain Multiple Security Risks 

ICSA-25-219-07 (Update A) discloses critical flaws in EG4 Electronics’ inverter systems, used in residential and commercial solar installations worldwide. [Vulnerabilities](https://thecyberexpress.com/what-are-vulnerabilities/ "Vulnerabilities") include: 

  • Cleartext Transmission of Sensitive [Data](https://thecyberexpress.com/what-is-data/ "Data") (CVE-2025-52586, CWE-319) 
  • Download of Code Without Integrity Check (CVE-2025-53520, CWE-494) 
  • Observable Discrepancy (CVE-2025-47872, CWE-203) 
  • Improper Restriction of Authentication Attempts (CVE-2025-46414, CWE-307) 

The CVSS v4 score reaches as high as 9.2, reflecting the severity of these flaws. Attackers could intercept unencrypted commands, install malicious firmware, perform brute-force attacks on PIN codes, or access configuration settings through insecure APIs. 

These vulnerabilities affect all versions of the following models: 

  • EG4 12kPV, 18kPV, Flex 21, Flex 18 
  • EG4 6000XP, 12000XP 
  • EG4 GridBoss 

EG4 has addressed some issues through server-side fixes, including standardizing registration endpoint responses and limiting authentication attempts. However, the company is still working on firmware and hardware solutions, with new hardware expected by October 15, 2025. 

CISA Urges Action from ICS Operators 

CISA stresses that ICS environments are increasingly targeted by cyber actors due to their critical role in infrastructure. While there have been no confirmed large-scale exploits linked to these specific vulnerabilities (except one now publicly known in Tigo’s case), CISA recommends the following mitigation strategies: 

  • Isolating [ICS](https://cyble.com/cyberwarfare/ics-scada/ "ICS") from internet-facing networks. 
  • Updating devices and software to the latest secure versions. 
  • Performing risk assessments prior to deploying mitigation strategies. 

Share this:

  • [Click to email a link to a friend (Opens in new window) Email](mailto:?subject=%5BShared%20Post%5D%20CISA%20Warns%20of%20Critical%20ICS%20Flaws%20in%20Siemens%2C%20Tigo%20Energy%2C%20and%20EG4%20Equipment&body=https%3A%2F%2Fthecyberexpress.com%2Fcisa-warns-of-ics-vulnerabilities%2F&share=email)
  • Click to share on WhatsApp (Opens in new window) WhatsApp

_Related_

Tags: CISACVE-2025-7768CVE-2025-7770CWE-798The Cyber ExpressThe Cyber Express NewsVulnerabilities [Previous Post

Black Hat USA 2025 CISO Podcast Series: Episode 2 Now Live

](https://thecyberexpress.com/black-hat-usa-2025-ciso-podcast-series-ep-2/)[Next Post

70,000 WordPress Sites Exposed by Inspiro Theme Security Flaw

](https://thecyberexpress.com/csrf-flaw-cve-2025-8592/)Next Post [![CVE-2025-8592](data:image/svg+xml,%3Csvg%20xmlns='http://www.w3.org/2000/svg'%20viewBox='0%200%201920%201280'%3E%3C/svg%3E "70,000 WordPress Sites Exposed by Inspiro Theme Security Flaw 38")](https://thecyberexpress.com/csrf-flaw-cve-2025-8592/)

70,000 WordPress Sites Exposed by Inspiro Theme Security Flaw

[](#)[](https://cyble.com/request-demo/?utm_source=cyber_express&utm_medium=sidebar)Follow Us On Google News

Latest Cyber News

[![Operation Serengeti 2.0, Afripol, Interpol, Cybercrime, Ransomware](data:image/svg+xml,%3Csvg%20xmlns='http://www.w3.org/2000/svg'%20viewBox='0%200%201764%201258'%3E%3C/svg%3E "African Authorities Arrest 1,200 People, Seize Millions in Massive Cybercrime and Fraud Networks' Bust 39")](https://thecyberexpress.com/1200-arrested-operation-serengeti-2-0/) Cyber News

African Authorities Arrest 1,200 People, Seize Millions in Massive Cybercrime and Fraud Networks’ Bust

August 22, 2025 [![CVE-2025-8592](data:image/svg+xml,%3Csvg%20xmlns='http://www.w3.org/2000/svg'%20viewBox='0%200%201920%201280'%3E%3C/svg%3E "70,000 WordPress Sites Exposed by Inspiro Theme Security Flaw 40")](https://thecyberexpress.com/csrf-flaw-cve-2025-8592/) Firewall Daily

70,000 WordPress Sites Exposed by Inspiro Theme Security Flaw

August 22, 2025 [![CISA](data:image/svg+xml,%3Csvg%20xmlns='http://www.w3.org/2000/svg'%20viewBox='0%200%201920%201280'%3E%3C/svg%3E "CISA Warns of Critical ICS Flaws in Siemens, Tigo Energy, and EG4 Equipment 41")](https://thecyberexpress.com/cisa-warns-of-ics-vulnerabilities/) Firewall Daily

CISA Warns of Critical ICS Flaws in Siemens, Tigo Energy, and EG4 Equipment

August 22, 2025 [![Black Hat USA 2025 CISO Podcast Series](data:image/svg+xml,%3Csvg%20xmlns='http://www.w3.org/2000/svg'%20viewBox='0%200%201920%201280'%3E%3C/svg%3E) ](https://thecyberexpress.com/black-hat-usa-2025-ciso-podcast-series-ep-2/)Firewall Daily

Black Hat USA 2025 CISO Podcast Series: Episode 2 Now Live

August 22, 2025

Categories

Categories Select Category Appointments Budgets Bug Bounty & Rewards Business News Compliance Cyber Essentials Cyber News Cyber Warfare Cybersecurity Awareness Month Dark Web News Data Breach News DDoS Attacks News Deepfake Espionage Features Firewall Daily Gitex2022 Governance Hacker Claims Hacker News Hackers Interview How to Interviews Knowledge Hub Learning & Development Lockbit Ransomware News Main Story Malware News Market Reports Mergers & Aquisitions Partnerships Podcast Policy Updates Press Release Ransomware News Regulations Research Resources Sponsored Content Startups Threat Actors Threat Intelligence Threat Intelligence News Trends Vulnerabilities Vulnerability News What is Whitepapers Workforce

Web Stories

[![Do This on Telegram, Your Bank Account Will Become Zero](data:image/svg+xml,%3Csvg%20xmlns='http://www.w3.org/2000/svg'%20viewBox='0%200%20185%20308'%3E%3C/svg%3E)](https://thecyberexpress.com/web-stories/if-you-do-this-on-telegram-your-bank-account-will-become-zero/)Do This on Telegram, Your Bank Account Will Become Zero [![If You Install the iOS 18 Beta, Your iPhone Could Be Hacked](data:image/svg+xml,%3Csvg%20xmlns='http://www.w3.org/2000/svg'%20viewBox='0%200%20185%20308'%3E%3C/svg%3E) ](https://thecyberexpress.com/web-stories/ios-18-beta/)If You Install the iOS 18 Beta, Your iPhone Could Be Hacked [![Cricket World Cup Ticketing Systems Under Cybersecurity](data:image/svg+xml,%3Csvg%20xmlns='http://www.w3.org/2000/svg'%20viewBox='0%200%20185%20308'%3E%3C/svg%3E) ](https://thecyberexpress.com/web-stories/cricket-world-cup-ticketing-systems/)Cricket World Cup Ticketing Systems Under Cybersecurity [![Cyber Threats and Online Ticket Scams During the NBA Finals](data:image/svg+xml,%3Csvg%20xmlns='http://www.w3.org/2000/svg'%20viewBox='0%200%20185%20308'%3E%3C/svg%3E) ](https://thecyberexpress.com/web-stories/nba-finals/)Cyber Threats and Online Ticket Scams During the NBA Finals [![Biometric Data Security: Protecting Sensitive Information](data:image/svg+xml,%3Csvg%20xmlns='http://www.w3.org/2000/svg'%20viewBox='0%200%20185%20308'%3E%3C/svg%3E) ](https://thecyberexpress.com/web-stories/biometric-data-security-protecting-sensitive-information/)Biometric Data Security: Protecting Sensitive Information

About

The Cyber Express

-----------------

#1 Trending Cybersecurity News and Magazine

The Cyber Express is a handbook for all stakeholders of the internet that provides information security professionals with the latest news, updates and knowledge they need to combat cyber threats.

Contact

For editorial queries: [editor@thecyberexpress.com](mailto:editor@thecyberexpress.com)

For marketing and Sales: [raj@thecyberexpress.com](mailto:raj@thecyberexpress.com)

Quick Links

Our Address

We’re remote friendly, with office locations around the world:

San Francisco, Atlanta, Rome, Dubai, Mumbai, Bangalore, Hyderabad,  Singapore, Jakarta, Sydney, and Melbourne

Headquarters:

The Cyber Express LLC 10080 North Wolfe Road, Suite SW3-200, Cupertino, CA, US 95014

India Office:

Cyber Express Media Network HD-021, 4th Floor, C Wing, Building No.4. Nesco IT Park, WE Highway, Goregaon East, Mumbai, Maharashtra, India – 4000063

© 2025 [The Cyber Express](https://thecyberexpress.com "The Cyber Express") - Cybersecurity News and Magazine.

[](#back-to-top)

Welcome Back!

Login to your account below

Remember Me

[Forgotten Password?](#jeg_forgotform)

Retrieve your password

Please enter your username or email address to reset your password.

[Log In](#jeg_loginform)

Add New Playlist

\- Select Visibility -PublicPrivate

[](#)[](#)No Result View All Result

* Regulations

* Compliance

* Governance

* Policy Updates

* Cyber Warfare

* Espionage

* Workforce

* Learning & Development

* Startups

* Mergers & Aquisitions

* Partnerships

* Appointments

* Budgets

* Research

* Whitepapers

* Sponsored Content

* Market Reports

* Interviews

* Podcast

* Conference

* Webinar

* Endorsed Events

[](https://facebook.com)[](https://twitter.com)

© 2025 [The Cyber Express](https://thecyberexpress.com "The Cyber Express") - Cybersecurity News and Magazine.

Are you sure want to unlock this post?

Unlock left : 0 Yes No

Are you sure want to cancel subscription?

Yes No \- 00:00 00:00

Queue

Update Required Flash plugin \- 00:00 00:00

Do This on Telegram, Your Bank Account Will Become Zero If You Install the iOS 18 Beta, Your iPhone Could Be Hacked Cricket World Cup Ticketing Systems Under Cybersecurity Cyber Threats and Online Ticket Scams During the NBA Finals Biometric Data Security: Protecting Sensitive Information