156 articles
OT / SCADASEC 8-K filing reveals an advanced extortion group infiltrated the corporate network of a major energy pipeline operator, accessing historical SCADA telemetry archives.
OT / SCADAOmron and JPCERT/CC issue security advisories detailing an unauthenticated session hijacking flaw in Sysmac NJ and NX controllers exposing industrial motion controls.
OT / SCADACritical firmware flaw in Honeywell Trend Controls IQ4 building management controllers allows remote network actors to deploy modified firmware images and seize HVAC control.
Cyber AttackMaterial SEC 8-K disclosure reveals advanced nation-state threat actors pivoted through a third-party equipment vendor SSL VPN to exfiltrate proprietary lithography recipes.
OT / SCADASiemens ProductCERT discloses a critical authentication bypass vulnerability in SIMATIC WinCC Open Architecture SCADA web interfaces affecting critical infrastructure.
Deep DiveThe European Union Cyber Resilience Act enters critical enforcement phases, requiring hardware OEMs and software vendors to maintain machine-readable SBOMs and report actively exploited flaws within 24 hours.
OT / SCADACISA and Schneider Electric issue critical advisory for CVE-2026-50891 in EcoStruxure Geo SCADA Expert servers permitting unauthenticated remote root code execution.
OT / SCADACISA industrial advisory ICSA-26-288-03 details high-severity flaw CVE-2026-49821 in Rockwell Automation ControlLogix 5580 controllers causing unrecoverable CPU hangs.
OT / SCADACISA issues industrial advisory ICSA-26-285-01 for Phoenix Contact FL SWITCH managed industrial network switches resolving critical firmware RCE CVE-2026-48192.
RansomwareGlobal maritime shipping conglomerate files SEC Form 8-K disclosing a material ransomware intrusion freezing container terminal logistics across international ports.
OT / SCADACISA and Emerson release urgent industrial advisory ICSA-26-283-02 for CVE-2026-46801, a critical authentication bypass in DeltaV DCS operator workstations.
Deep DiveThe European Union's NIS2 Directive enforces strict 24-hour early warning notifications and executive liability for critical entities facing major cyber incidents.
OT / SCADACISA industrial advisory ICSA-26-278-02 discloses a critical stack-based buffer overflow (CVE-2026-43890) in Yokogawa CENTUM VP Human Interface Stations.
OT / SCADACISA and ABB have issued an emergency industrial advisory for CVE-2026-42918, a critical remote code execution vulnerability in ABB Ability System 800xA controllers.
Gov / DefenseCISA Advisory ICSA-26-281-01 details a critical heap corruption vulnerability in Honeywell Experion PKS distributed control systems.
VulnerabilitySEC Form 8-K disclosure details a major semiconductor intellectual property theft incident initiated via corporate SSO session token hijacking.
Gov / DefenseCISA Advisory ICSA-26-280-01 details a critical authentication bypass in Rockwell Automation FactoryTalk VantagePoint manufacturing analytics servers.
OT / SCADACISA Advisory ICSA-26-279-01 details a critical denial of service flaw in Siemens SIMATIC S7-1500 and ET 200SP programmable logic controllers.
OT / SCADASEC Form 8-K disclosure details a nation-state intrusion targeting municipal water SCADA gateways and programmable logic controllers.
Gov / DefenseCISA Advisory ICSA-26-278-02 details a critical memory corruption vulnerability in Schneider Electric Modicon M580 and M340 industrial controllers.
Deep DiveContinuous zero-days in Citrix, Fortinet, and enterprise gateways demonstrate that reactive patching is failing. Only hardware MTE and Rust re-architectures offer an exit.
Gov / DefenseCISA Advisory ICSA-26-274-05 details a critical authentication bypass flaw in Johnson Controls EasyIO Neo EC and CW series building automation controllers.
OT / SCADAA critical stack buffer overflow in Moxa industrial protocol gateways allows authenticated attackers to corrupt memory and hijack critical substation controllers.
OT / SCADACISA advisory ICSA-26-272-07 reveals permanent hardcoded cloud storage credentials in the Viidure Dashcam app, exposing commercial fleets to full takeover.