Topic

CISA ICS-CERT: news, advisories and analysis

7 articlesUpdated 16 Oct 2026

CyberSecureToday covers CISA ICS-CERT across 7 articles published between 17 Sep 2026 and 16 Oct 2026. The coverage includes 7 vulnerability advisories. 7 advisories are rated critical or high severity.

Stories on CISA ICS-CERT most often intersect with IEC 62443, Remote Code Execution and Smart Grid, with Industrial, OT & IoT the most affected sector. The most recent story, “ICS Advisory Tests IEC 62443 Boundaries Across OT and SCADA Networks”, was published 16 Oct 2026. Every article is listed below, newest first, with the affected products, severity and remediation guidance in each piece.

Latest coverage

ThreatsIndustrial & OTCritical
ICS Advisory Tests IEC 62443 Boundaries Across OT and SCADA Networks
Critical infrastructure vulnerability advisory issued by CISA ICS-CERT impacting industrial automation systems and IEC 62443 security boundaries.
CST Editorial Desk16 Oct 20267 min read
ThreatsIndustrial & OTCritical
Viidure Dashcam App Hardcoded Cloud Keys Expose Global Fleet Telemetry and Firmware
CISA advisory ICSA-26-272-07 reveals permanent hardcoded cloud storage credentials in the Viidure Dashcam app, exposing commercial fleets to full takeover.
Daniel Okafor2 Oct 20268 min read
ThreatsIndustrial & OTCritical
MikroTik RouterOS WebFig Integer Underflow Grants Remote Root Execution
A pre-authentication integer underflow in MikroTik RouterOS WebFig allows unauthenticated network attackers to achieve remote code execution as root.
Daniel Okafor2 Oct 20268 min read
ThreatsIndustrial & OTHigh
Siemens Building Energy Gateway Flaw Enables Denial of Service in Smart Facilities
CISA issues advisory ICSA-26-265-08 for Siemens WTV676 and WTV776 M-Bus gateways, warning of a web interface flaw that terminates building SCADA telemetry.
CST Editorial Desk24 Sep 202615 min read
ThreatsIndustrial & OTCritical
lwIP MQTT Client Overflow Enables Remote Code Execution on Industrial IoT Devices
CISA releases advisory ICSA-26-265-01 for critical CVSS 9.8 flaw CVE-2026-87121 in lwIP MQTT client, allowing unauthenticated attackers to execute arbitrary code.
CST Editorial Desk24 Sep 202616 min read
ThreatsIndustrial & OTHigh
lwIP TCP/IP Stack Double Free Flaw Exposes Industrial Controllers to Remote Hijacking
CISA and lwIP maintainers warn of high-severity flaw CVE-2026-91018 in the lwIP TCP/IP stack allowing unauthenticated remote memory corruption across IoT and PLCs.
CST Editorial Desk23 Sep 202616 min read
ThreatsIndustrial & OTHigh
Schneider Electric SCADAPack x70 RTUs Exposed to Remote Credential Extraction Flaws
CISA issues advisory ICSA-26-258-04 warning of insufficiently protected credentials in Schneider Electric SCADAPack x70 Remote Telemetry Units (CVE-2026-81861).
Aisha Noor17 Sep 202612 min read

Latest coverage

ICS Advisory Tests IEC 62443 Boundaries Across OT and SCADA Networks

Viidure Dashcam App Hardcoded Cloud Keys Expose Global Fleet Telemetry and Firmware

MikroTik RouterOS WebFig Integer Underflow Grants Remote Root Execution

Siemens Building Energy Gateway Flaw Enables Denial of Service in Smart Facilities

lwIP MQTT Client Overflow Enables Remote Code Execution on Industrial IoT Devices

lwIP TCP/IP Stack Double Free Flaw Exposes Industrial Controllers to Remote Hijacking

Schneider Electric SCADAPack x70 RTUs Exposed to Remote Credential Extraction Flaws