Latest threats →Get the daily brief →

CyberSecureTodayNewsThreatsInsightsCyberSecureToday

Search Subscribe

Industry vertical

Industrial, OT & IoT, page 2

Manufacturing, ICS/SCADA, operational technology and connected devices.

62 articlesUpdated 28 Sep 2026Page 2 of 3

ThreatsIndustrial & OTHigh
Bransys Electronic Logging Devices Exposed to Fleet Telemetry Hijack via Hardcoded MQTT Credentials Flaw CVE-2026-86520
CISA advisory ICSA-26-260-01 details hardcoded MQTT credentials across Bransys ELD telematics units, allowing remote adversaries to eavesdrop on live freight telemetry.
CST Newsroom22 Sep 202615 min read
ThreatsIndustrial & OTHigh
Rockwell Automation Logix Controllers Flaw CVE-2026-9637 Triggers Fatal Faults via Malicious CIP Message Frames
CISA and Rockwell Automation issue advisory ICSA-26-244-03 for ControlLogix and CompactLogix PLCs where CIP message parsing flaws trigger fatal controller crashes.
Daniel Okafor22 Sep 202616 min read
ThreatsIndustrial & OTHigh
Siemens Desigo CC Building Automation Platform Flaw CVE-2026-34223 Exposes Supervisory Workstations to Arbitrary Script Execution
Siemens issues advisory SSA-330084 for Desigo CC building management systems where improper input validation in graphics files allows arbitrary script execution.
Priya Raman21 Sep 202614 min read
ThreatsIndustrial & OTCritical
Siemens Industrial Edge Management Flaw CVE-2026-18963 Enables Remote Takeover of Factory Control Systems
Siemens ProductCERT issues advisory SSA-503852 for critical CVSS 9.1 flaw CVE-2026-18963 in Industrial Edge Management allowing unauthenticated attackers to seize administrative accounts.
Daniel Okafor21 Sep 202615 min read
ThreatsIndustrial & OTHigh
Schneider Electric Modicon M340 PLCs and Ethernet Modules Vulnerable to Remote Denial of Service via FTP Flaw CVE-2025-6625
CISA and Schneider Electric issue advisory for CVE-2025-6625 in Modicon M340 PLCs and BMX communication modules, where malformed FTP commands halt controller operations.
Daniel Okafor21 Sep 202614 min read
ThreatsIndustrial & OTHigh
Rockwell Automation Redundancy Tool Flaws Permit Local Privilege Escalation on Industrial Control Workstations
Rockwell Automation and CISA issue advisory ICSA-26-244-02 detailing privilege escalation flaws CVE-2026-9634 in Redundancy Module Configuration Tool.
CST Newsroom21 Sep 202612 min read
ThreatsIndustrial & OTCritical
Hitachi Energy FACTS Control Platform Flaws Permit Remote Code Injection Across Electric Transmission Grids
Hitachi Energy notification 8DBD000229 details critical CVSS 9.9 flaws in FACTS Control Platform GWS enabling remote code injection in power grid SCADA.
CST Newsroom21 Sep 202614 min read
ThreatsIndustrial & OTHigh
Schneider Electric EcoStruxure IT Data Center Expert Flaw Exposes Critical Infrastructure Telemetry to XXE Attacks
Schneider Electric advisory SEVD-2026-160-01 details high-severity XXE flaw CVE-2026-8045 in EcoStruxure IT Data Center Expert enabling data exfiltration.
CST Newsroom20 Sep 202613 min read
ThreatsIndustrial & OTHigh
Siemens SICAM 8 Remote Parameterization Resource Exhaustion Flaw Disables Substation Automation Controllers
Siemens releases advisory SSA-246443 for high-severity flaw CVE-2026-27663 in SICAM 8 controllers, where resource exhaustion halts substation automation.
CST Newsroom20 Sep 202613 min read
ThreatsIndustrial & OTCritical
Critical Schneider Electric Modicon M580 Controllers Authentication Flaw Risks Industrial Process Takeover
Schneider Electric issues advisory SEVD-2026-251-04 for critical CVSS 9.2 flaw CVE-2026-3869 in Modicon M580 controllers enabling unauthenticated process takeover.
CST Newsroom20 Sep 202615 min read
ThreatsIndustrial & OTHigh
Rockwell Automation FactoryTalk Activation Manager Flaw Enables Local SYSTEM Privilege Escalation
Rockwell Automation issues advisory SD1799 for CVE-2026-16675 in FactoryTalk Activation Manager, allowing authenticated operators to seize SYSTEM privileges.
CST Newsroom20 Sep 202613 min read
ThreatsIndustrial & OTCritical
Critical Flaws in Digital Watchdog VMAX Recorders Enable Unauthenticated Remote Root Takeover
CISA releases advisory ICSA-26-258-01 warning of critical vulnerabilities in Digital Watchdog VMAX DVR and NVR recorders allowing unauthenticated remote root code execution.
Mei-Lin Chen20 Sep 202612 min read
ThreatsIndustrial & OTCritical
Threat Actors Weaponize AI Tooling and S7comm to Target Siemens S7 Industrial Controllers
CISA, NSA, and the FBI issue joint advisory AA26-231A warning of active campaigns targeting Siemens S7 series PLCs using automated S7comm protocol exploitation.
Mei-Lin Chen19 Sep 202613 min read
ThreatsIndustrial & OTCritical
Johnson Controls C-CURE 9000 Vulnerabilities Allow Attackers to Hijack Physical Facility Access Gateways
Johnson Controls and CISA release emergency advisory ICSA-26-204-01 for C-CURE 9000 and victor application servers resolving critical code execution flaw CVE-2026-21655.
Mei-Lin Chen19 Sep 202613 min read
ThreatsIndustrial & OTCritical
Mitsubishi Electric GX Works3 Authentication Bypass Exposes Industrial PLCs to Memory Manipulation Attacks
Mitsubishi Electric and CISA issue critical advisory ICSA-26-260-02 for GX Works3 and Motion Control Settings software enabling in-memory block password bypass and PLC logic tampering.
Mei-Lin Chen19 Sep 202612 min read
ThreatsCloud & SaaSCritical
Siemens Mendix SAML Single Sign-On Flaw Exposes Enterprise Cloud Portals to Account Takeover
Siemens and CISA issue advisory ICSA-26-258-06 for Mendix SAML module vulnerability CVE-2026-80465 allowing unauthenticated remote attackers to hijack enterprise SSO accounts.
Priya Raman19 Sep 20269 min read
ThreatsIndustrial & OTCritical
Schneider Electric NetBotz Command Injection Flaw Allows Root System Compromise via Malicious Backups
Schneider Electric and CISA warn of critical OS command injection flaw CVE-2026-13336 in NetBotz 5 environmental monitors enabling root host takeover via system backup restore.
CST Newsroom19 Sep 202610 min read
ThreatsIndustrial & OTCritical
Schneider Electric PowerChute Authentication Flaw Leaves Enterprise UPS Systems Vulnerable to Remote Shutdown
Schneider Electric and CISA warn of improper authentication validation in PowerChute Serial Shutdown allowing unauthorized actors to disrupt critical infrastructure power.
Priya Raman19 Sep 20269 min read
ThreatsIndustrial & OTHigh
ABB Ability Edgenius Industrial Edge Controllers Exposed to Container Root Escalation Flaw
ABB and CISA issue security advisory for CVE-2026-31431 in Ability Edgenius edge controllers enabling container breakout and local root takeover.
Mei-Lin Chen19 Sep 20269 min read
ThreatsCloud & SaaSCritical
PTC Windchill & FlexPLM Critical RCE Flaw Weaponized in Active Espionage Attacks
CISA orders emergency patching of PTC Windchill PLM vulnerability CVE-2026-12569 enabling unauthenticated remote code execution and CAD blueprint theft.
Priya Raman18 Sep 202612 min read
ThreatsIndustrial & OTCritical
Lantronix EDS5000 Industrial Device Servers Hit by Critical Remote Code Injection Flaw
CISA adds Lantronix EDS5000 industrial serial device server vulnerability CVE-2025-67038 to KEV catalog following active exploitation against OT networks.
Tom Verhoeven18 Sep 202610 min read
ThreatsIndustrial & OTCritical
Mitsubishi Electric CC-Link IE TSN Protocol Flaws Expose Factory Automation Cells
CISA issues ICS-CERT advisory ICSA-26-211-07 warning of critical protocol implementation flaws in Mitsubishi Electric CC-Link IE TSN industrial controllers.
Tom Verhoeven18 Sep 202610 min read
ThreatsIndustrial & OTHigh
KNX Building Automation Protocol Denial-of-Service Flaw Exploited Against Critical Infrastructure
CISA adds KNX industrial building automation protocol vulnerability CVE-2023-4346 to KEV catalog following active exploitation against critical OT facilities.
Tom Verhoeven18 Sep 202610 min read
ThreatsIndustrial & OTHigh
Schneider Electric SCADAPack x70 RTUs Exposed to Remote Credential Extraction Flaws
CISA issues advisory ICSA-26-258-04 warning of insufficiently protected credentials in Schneider Electric SCADAPack x70 Remote Telemetry Units (CVE-2026-81861).
Aisha Noor17 Sep 202612 min read

Threat scope

SCADA networks, edge firewalls, PLC controllers, IoT botnets and physical asset security.

Free newsletter

The Daily Brief

The exploited vulnerabilities, patch priorities and regulatory changes worth acting on, in one short email.

Exploited CVEs, with affected products and patch status
Patch priorities ranked by real-world exploitation
Regulatory changes: CERT-In, RBI, DPDP, DORA, NIS2

FreeOne email per weekdayUnsubscribe anytime

See a sample issue Privacy policy