Industrial, OT & IoT — Cybersecurity News & Threat Intelligence | CyberSecureToday

Friday, 30 October 2026Latest threats →Get the daily brief →

CyberSecureTodayNewsThreatsInsightsCyberSecureToday

155 articlesUpdated 18 Oct 2026

ThreatsHealthcare & PharmaHigh

Thermo Fisher Torrent Suite Path Traversal Flaw Exposes Clinical Genomics Servers to File Exfiltration

A path traversal vulnerability in Thermo Fisher Torrent Suite Software (CVE-2026-107777) allows authenticated attackers to exfiltrate clinical genomics data.

18 Oct 20269 min read

CST Editorial Desk

ThreatsIndustrial & OTCritical
Eclipse Milo OPC UA Flaws Let Low-Privileged Actors Bypass Method Authorization
CISA Advisory ICSA-26-288-01 warns of critical vulnerabilities in Eclipse Milo OPC UA stacks that allow low-privileged actors to bypass method authorization and crash OT gateways.
Mei-Lin Chen17 Oct 20269 min read
ThreatsIndustrial & OTCritical
Thermo Fisher Torrent Suite Flaws Expose Genomic Sequencing Labs to Authentication Bypass
CISA Advisory ICSMA-26-288-01 warns of critical authentication bypass and execution vulnerabilities in Thermo Fisher Torrent Suite software used in clinical genomic sequencing.
CST Editorial Desk17 Oct 20269 min read
ThreatsIndustrial & OTHigh
Engineering IEC 62443-3-2 Zones and Conduits for SL-3 and SL-4 Targets
Technical architecture breakdown for engineering teams deploying Security Level Target (SL-T 3/4) boundaries, unidirectional security gateways, and…
CST Editorial Desk16 Oct 20267 min read
ThreatsIndustrial & OTCritical
ICS Advisory Tests IEC 62443 Boundaries Across OT and SCADA Networks
Critical infrastructure vulnerability advisory issued by CISA ICS-CERT impacting industrial automation systems and IEC 62443 security boundaries.
CST Editorial Desk16 Oct 20267 min read
NewsIndustrial & OTCritical
Yokogawa CENTUM VP Operator Station Flaw Enables Code Execution via Graphics Macros
Yokogawa Electric releases critical patches for CENTUM VP Human Interface Station software addressing a remote code execution vulnerability in graphics macros.
CST Editorial Desk13 Oct 20268 min read
NewsIndustrial & OTHigh
Siemens SIMATIC S7-1500 PLC Vulnerability Enables Unauthenticated PROFINET DCP Network Parameter Tampering (CVE-2026-79880)
Siemens issues urgent firmware updates for SIMATIC S7-1500 industrial controllers to remediate an unauthenticated PROFINET DCP configuration tampering vulnerability.
CST Editorial Desk13 Oct 20268 min read
Cyber AttackGov & Defence
Small Modular Reactor Developer Discloses Infiltration of Reactor Engineering Portal
A publicly traded small modular reactor developer files SEC Form 8-K Item 1.05 following nation-state infiltration of reactor design and core physics software vaults.
CST Editorial Desk13 Oct 20268 min read
NewsIndustrial & OTCritical
ABB System 800xA Flaw Allows Recipe Injection in Chemical and Pharma Plants
ABB releases emergency advisories for System 800xA Batch Management software after researchers uncover an unauthenticated recipe injection vulnerability.
CST Editorial Desk13 Oct 20268 min read
NewsIndustrial & OTCritical
GE Vernova Mark VIe Flaw Allows Unauthenticated Packet Injection and Turbine Trips
GE Vernova issues an emergency advisory for Mark VIe DCS controllers (CVE-2026-79220, CVSS 9.6) resolving an unauthenticated Ethernet Global Data injection defect.
CST Editorial Desk13 Oct 20268 min read
NewsIndustrial & OTCritical
Honeywell MasterLogic-200 PLC Ethernet Module Vulnerability Enables Unauthenticated Memory Overwrite and Controller Takeover (CVE-2026-79110)
Honeywell releases emergency firmware for MasterLogic-200 PLCs (CVE-2026-79110, CVSS 9.4) addressing an unauthenticated Ethernet stack buffer overflow.
CST Editorial Desk13 Oct 20268 min read
NewsIndustrial & OTCritical
Phoenix Contact ILC Inline Modular Controller Vulnerability Enables Unauthenticated PROFINET Protocol Memory Corruption (CVE-2026-78950)
Phoenix Contact issues an emergency advisory for Inline Modular Controllers (CVE-2026-78950, CVSS 9.5) fixing a critical PROFINET stack buffer overflow.
CST Editorial Desk12 Oct 20268 min read
Cyber AttackCloud & SaaS
EDA Software Firm Discloses Nation-State Exfiltration of 2nm Chip Architecture IP
A major semiconductor EDA software firm files SEC Form 8-K Item 1.05 after nation-state threat actors exfiltrate next-gen 2nm chip design libraries.
Priya Raman12 Oct 20268 min read
NewsIndustrial & OTCritical
Mitsubishi Electric MELSEC-Q PLC Vulnerability Enables Unauthenticated Memory Corruption via SLMP Protocol Injection (CVE-2026-78820)
Mitsubishi Electric issues an emergency advisory for MELSEC-Q PLCs (CVE-2026-78820, CVSS 9.3) resolving an unauthenticated SLMP protocol injection flaw.
CST Editorial Desk12 Oct 20268 min read
NewsIndustrial & OTCritical
Schneider Electric Foxboro DCS Flaw Allows Unauthenticated Fieldbus Module Memory Corruption (CVE-2026-77880)
Schneider Electric releases emergency fixes for Foxboro DCS Fieldbus Modules (CVE-2026-77880, CVSS 9.6) resolving a critical memory corruption flaw.
CST Editorial Desk12 Oct 20268 min read
NewsIndustrial & OTCritical
Siemens SIMATIC Energy Manager PRO Flaw Enables Unauthenticated Remote Code Execution
Siemens issues emergency updates for SIMATIC Energy Manager PRO (CVE-2026-76880, CVSS 9.8) resolving an unauthenticated OPC UA deserialization vulnerability.
CST Editorial Desk12 Oct 20268 min read
NewsIndustrial & OTCritical
Mitsubishi Electric MELSEC iQ-F PLC Flaw Enables Memory Overwrite and Axis Stoppage
Mitsubishi Electric and CISA disclose advisory for MELSEC iQ-F compact PLCs, patching a critical Modbus RTU communication buffer overflow (CVE-2026-75890).
CST Editorial Desk12 Oct 20268 min read
Cyber AttackCloud & SaaS
Electric Vehicle Maker Discloses Unauthorized Access to Global Fleet Telematics Platform
A major electric vehicle manufacturer files SEC Form 8-K Item 1.05 after threat actors breach cloud telematics, accessing vehicle GPS coordinates and remote commands.
Priya Raman12 Oct 20268 min read
NewsIndustrial & OTCritical
Delta Electronics CNC HMI Flaw Allows Remote Unauthenticated G-Code Toolpath Manipulation and Spindle Override (CVE-2026-74810)
Delta Electronics and CISA issue advisory for CNC HMI controllers, patching a critical memory corruption flaw (CVE-2026-74810) allowing remote toolpath tampering.
CST Editorial Desk12 Oct 20268 min read
NewsIndustrial & OTCritical
Honeywell IQ4 BACnet Flaw Allows Unauthenticated Denial of Service and HVAC Override
Honeywell and CISA issue advisory for IQ4 building automation controllers, patching a critical BACnet/IP stack buffer overflow (CVE-2026-73850).
CST Editorial Desk11 Oct 20268 min read
Cyber AttackIndustrial & OT
Container Port Operator Discloses Intrusion in Automated Terminal Operating System
A multinational container terminal operator files SEC Form 8-K Item 1.05 after cyber adversaries compromise automated cargo dispatch and container routing systems.
Priya Raman11 Oct 20268 min read
NewsIndustrial & OTCritical
Yokogawa CENTUM VP Flaw Lets Malformed Vnet/IP Packets Force Controller Restarts
Yokogawa releases security advisory YSAR-26-0004 for CENTUM VP Field Control Stations, patching a critical Vnet/IP communication flaw (CVE-2026-72840).
CST Editorial Desk11 Oct 20268 min read
NewsIndustrial & OTCritical
ABB Ability System 800xA Batch Management Server Flaw Enables Unauthenticated Recipe Parameter Manipulation (CVE-2026-71880)
ABB and CISA issue advisory for Ability System 800xA Batch Management, patching a critical flaw (CVE-2026-71880) allowing unauthenticated recipe tampering.
CST Editorial Desk11 Oct 20268 min read
Cyber AttackCloud & SaaS
Semiconductor Foundry Discloses Exfiltration of EUV Lithography Mask Designs
A premier semiconductor foundry submits SEC Form 8-K Item 1.05 after nation-state actors compromise CAD vaults and exfiltrate sub-2nm EUV lithography mask IP.
Priya Raman11 Oct 20268 min read

Threat scope

SCADA networks, edge firewalls, PLC controllers, IoT botnets and physical asset security.

Free newsletter

The Daily Brief

The exploited vulnerabilities, patch priorities and regulatory changes worth acting on, in one short email.

Exploited CVEs, with affected products and patch status
Patch priorities ranked by real-world exploitation
Regulatory changes: CERT-In, RBI, DPDP, DORA, NIS2

FreeOne email per weekdayUnsubscribe anytime

See a sample issue Privacy policy