Industry Vertical11 stories tracked

Industrial, OT & IoT

Manufacturing, ICS/SCADA, operational technology and connected devices.

3D conceptual illustration of CISA manufacturing ICS advisory showing industrial PLC automation conveyor line with cryptographic lock integrity inspection

Critical

ThreatsIndustrial, OT & IoT

CISA Discloses Critical Vulnerabilities in Rockwell Automation Logix Controllers & 1756 Modules

CISA alerted industrial manufacturing operators to severe vulnerabilities in Rockwell Automation Logix controllers and 1756 communication modules allowing PLC tampering.

14 Sept 20267 min read

Mei-Lin Chen

ThreatsEnergy & UtilitiesHigh
CISA Alerts Critical Energy Sector to High-Severity Flaws in AVEVA Pipeline Integrity Monitor
CISA issued an energy sector ICS advisory warning of memory corruption and authentication defects in AVEVA Pipeline Integrity Monitor supervising oil and gas transport.
Daniel Okafor14 Sept 20268 min read
ThreatsIndustrial, OT & IoTCritical
SAP Security Patch Day Addresses Critical NetWeaver Message Server Authentication Bypass
SAP released security updates for CVE-2026-58240, a CVSS 9.6 authentication bypass in NetWeaver AS Java/ABAP Message Server that permits enterprise takeover.
Aisha Noor14 Sept 20268 min read
InsightsTechnology, Cloud & SaaSMedium
EU Cyber Resilience Act reporting rules go live: Hardware and software vendors face mandatory 24-hour disclosures
The EU CRA’s early reporting mandate is now in effect, requiring manufacturers to report actively exploited vulnerabilities to ENISA and CSIRTs within 24 hours.
Tom Verhoeven14 Sept 20266 min read
ThreatsTechnology, Cloud & SaaSBreaking
Cisco Secure FMC authentication bypass CVE-2026-20079 exploited by Qilin ransomware affiliates
Threat actors and Qilin ransomware affiliates are actively weaponizing CVE-2026-20079 in Cisco Secure FMC to bypass web authentication and achieve root command execution.
Daniel Okafor12 Sept 20266 min read
ThreatsIndustrial, OT & IoTCritical
MikroTrick exploit chain compromises MikroTik RouterOS devices as ScreenConnect client flaw hits KEV
CERT Polska discloses MikroTrick, an unauthenticated exploit chain hijacking MikroTik RouterOS devices, while CISA adds a dangerous ScreenConnect client condition to KEV.
Daniel Okafor12 Sept 20266 min read
ThreatsIndustrial, OT & IoTBreaking
Two 9.8 Check Point VPN flaws put the perimeter back on the emergency patch queue
Two CVSS 9.8 Check Point VPN certificate flaws can enable unauthenticated RCE. Identify exposed gateways, apply hotfixes and review the perimeter now.
Priya Raman12 Sept 20265 min read
ThreatsIndustrial, OT & IoTBreaking
SonicWall SMA1000 Zero-Day Chain Hit CISA KEV in Three Days. Patching Is the Easy Part
SonicWall disclosed two actively exploited SMA1000 flaws on 1 September; CISA set a 5 September federal deadline. The harder problem is proving an appliance you cannot instrument is clean.
Daniel Okafor11 Sept 20265 min read
ThreatsTechnology, Cloud & SaaSCritical
SAP OVERPASS: CVSS 10.0 Kernel Flaw Enables Pre-Auth Remote Code Execution
SAP and Onapsis disclosed OVERPASS (CVE-2026-44756), a maximum-severity kernel flaw in Extended Passport processing enabling unauthenticated root RCE on enterprise ERP hosts.
Priya Raman9 Sept 20266 min read
GuidesIndustrial, OT & IoT
Playbook: hardening the edge appliance you cannot put an agent on
Two of this year’s fastest CISA remediation deadlines hit devices that cannot run EDR. A practical checklist for the class attackers reach for first.
Aisha Noor8 Sept 20267 min read
ThreatsIndustrial, OT & IoTCritical
PAN-OS authentication bypass CVE-2026-0257 puts firewall management planes at risk
A newly catalogued authentication bypass in Palo Alto Networks PAN-OS lets an unauthenticated attacker reach management functionality. Here is the exposure and the fix.
Daniel Okafor8 Sept 20266 min read