156 articles
Cyber AttackA premier semiconductor foundry submits SEC Form 8-K Item 1.05 after nation-state actors compromise CAD vaults and exfiltrate sub-2nm EUV lithography mask IP.
OT / SCADARockwell Automation and CISA release advisory for ControlLogix 5580 controllers, patching a critical CIP protocol memory stride overflow (CVE-2026-70820).
OT / SCADAEmerson discloses critical vulnerability CVE-2026-69880 in Ovation Distributed Control System OCR400 controllers allowing remote code execution and turbine control logic tampering.
OT / SCADASiemens issues critical ProductCERT advisory for SCALANCE X industrial switches where a cryptographic verification bypass allows remote unsigned firmware injection.
OT / SCADAA critical buffer overflow in Schneider Electric Modicon M580 and M340 Ethernet communication modules enables unauthenticated remote code execution.
Cyber AttackA commercial aviation satellite communications provider files SEC Form 8-K Item 1.05 after nation-state actors breach in-flight telemetry and passenger Wi-Fi systems.
OT / SCADAA critical memory corruption flaw in Phoenix Contact FL SWITCH 3000 and 4000 managed industrial Ethernet switches enables remote arbitrary code execution.
OT / SCADAA high-severity denial-of-service vulnerability in Honeywell Experion PKS C300 controllers enables unauthenticated network packets to freeze industrial plant processes.
OT / SCADAA major North American energy utility discloses an SEC Form 8-K cyber incident involving extortion over exfiltrated regional transmission telemetry.
OT / SCADAA critical buffer overflow in the integrated HTTPS web server of Siemens SIMATIC S7-1500 and S7-1200 CPU firmware enables remote disruption of industrial automation controllers.
Deep DiveThe European Commission publishes harmonized technical standards for the Cyber Resilience Act, requiring hardware-based secure boot and 24-hour vulnerability notification.
OT / SCADAA critical unauthenticated RPC vulnerability in Emerson DeltaV distributed control system workstations allows attackers to execute code with SYSTEM privileges.
KubernetesA major international container logistics carrier files SEC Form 8-K Item 1.05 after threat actors exfiltrate intermodal shipping manifests and customs manifests.
OT / SCADAA critical memory corruption vulnerability in Yokogawa CENTUM VP Field Control Station (FCS) controllers allows unauthenticated network packets to manipulate industrial control setpoints.
OT / SCADARockwell Automation and CISA disclose a critical vulnerability in FactoryTalk View SE human-machine interface software allowing unauthenticated operators to bypass security.
Cyber AttackSEC Form 8-K filing reveals an advanced persistent threat breached the corporate IT network of a major commercial airline, accessing flight dispatch and crew scheduling platforms.
OT / SCADAMitsubishi Electric and CISA warn of a high-severity flaw in MELSEC iQ-R controllers allowing remote network adversaries to alter device memory registers without authentication.
OT / SCADAABB Cybersecurity and CISA disclose a critical vulnerability in Symphony Plus S+ Operations SCADA software allowing unauthenticated remote code execution on power plant servers.
RansomwareSEC Form 8-K filing reveals an extortion syndicate encrypted corporate cloud servers hosting diagnostic telemetry and proprietary firmware repositories for hospital medical devices.
OT / SCADAGE Vernova and CISA issue industrial security advisories for Mark VIe and Mark VIeS safety systems addressing a flaw causing turbine controller communication lockup.
OT / SCADAYokogawa Electric issues a critical security bulletin detailing a heap-based buffer overflow in FAST/TOOLS SCADA servers permitting remote code execution.
Cyber AttackSEC Form 8-K filing reveals an advanced persistent threat exfiltrated sensitive aerospace engineering CAD designs and satellite propulsion telemetry.
OT / SCADASchneider Electric and CISA warn of a critical vulnerability in Modicon M580 communication modules allowing remote attackers to trigger unrecoverable PLC controller halts.
OT / SCADAAVEVA Security Bulletins and CISA disclose a local privilege escalation flaw in System Platform InTouch enabling low-privileged users to achieve SYSTEM execution.