Topic

Critical Infrastructure: news, advisories and analysis

30 articlesUpdated 21 Oct 2026

CyberSecureToday covers Critical Infrastructure across 30 articles published between 14 Sep 2026 and 21 Oct 2026. The coverage includes 10 vulnerability advisories, 12 incident or breach reports and 5 analysis or guidance pieces. 10 advisories are rated critical or high severity.

Stories on Critical Infrastructure most often intersect with Data Breach, SEC Form 8-K and SCADA, with Industrial, OT & IoT the most affected sector. The most recent story, “Operation Cyber Guardian: CSA and IMDA Expose UNC3886 Stealth Espionage Campaign Targeting Singapore Telcos”, was published 21 Oct 2026. Every article is listed below, newest first, with the affected products, severity and remediation guidance in each piece.

ICS/OT advisory hub: severity, KEV status and fixes in one table

Latest coverage

Cyber AttackCloud & SaaS
Operation Cyber Guardian: CSA and IMDA Expose UNC3886 Stealth Espionage Campaign Targeting Singapore Telcos
Singapore's CSA and IMDA disclose Operation Cyber Guardian, evicting APT group UNC3886 after a coordinated cyber-espionage infiltration targeting national telco backbones.
Daniel Okafor21 Oct 202614 min read
Cyber AttackGov & Defence
Small Modular Reactor Developer Discloses Infiltration of Reactor Engineering Portal
A publicly traded small modular reactor developer files SEC Form 8-K Item 1.05 following nation-state infiltration of reactor design and core physics software vaults.
CST Editorial Desk13 Oct 20268 min read
Cyber AttackCloud & SaaS
EDA Software Firm Discloses Nation-State Exfiltration of 2nm Chip Architecture IP
A major semiconductor EDA software firm files SEC Form 8-K Item 1.05 after nation-state threat actors exfiltrate next-gen 2nm chip design libraries.
Priya Raman12 Oct 20268 min read
Cyber AttackCloud & SaaS
Global Telecom Discloses Nation-State Infiltration of Subsea Cable Management Systems
A global telecommunications consortium files SEC Form 8-K Item 1.05 after nation-state threat actors infiltrate subsea fiber cable network management platforms.
Priya Raman12 Oct 20268 min read
Cyber AttackIndustrial & OT
Container Port Operator Discloses Intrusion in Automated Terminal Operating System
A multinational container terminal operator files SEC Form 8-K Item 1.05 after cyber adversaries compromise automated cargo dispatch and container routing systems.
Priya Raman11 Oct 20268 min read
Cyber AttackCloud & SaaS
SEC Form 8-K Forensics: Commercial Aviation Satellite Connectivity Provider Discloses Telemetry Intrusion
A commercial aviation satellite communications provider files SEC Form 8-K Item 1.05 after nation-state actors breach in-flight telemetry and passenger Wi-Fi systems.
Priya Raman10 Oct 20268 min read
Cyber AttackCloud & SaaS
SEC Form 8-K Forensics: Multi-State Energy Utility Discloses Material Grid SCADA Telemetry Extortion Incident
A major North American energy utility discloses an SEC Form 8-K cyber incident involving extortion over exfiltrated regional transmission telemetry.
Priya Raman10 Oct 20268 min read
NewsIndustrial & OT
SEC Form 8-K Forensics: Global Maritime Shipping Operator Reports Material Port Terminal Ransomware Attack
Global maritime shipping conglomerate files SEC Form 8-K disclosing a material ransomware intrusion freezing container terminal logistics across international ports.
Daniel Okafor7 Oct 20268 min read
InsightsBanking & Fintech
EU NIS2 Directive 24-Hour Early Warning Mandate Enforced Across Critical Infrastructure Operators
The European Union's NIS2 Directive enforces strict 24-hour early warning notifications and executive liability for critical entities facing major cyber incidents.
CST Editorial Desk7 Oct 20268 min read
NewsIndustrial & OT
Water Utility Discloses Nation-State Breach of SCADA Gateways in SEC Filing
SEC Form 8-K disclosure details a nation-state intrusion targeting municipal water SCADA gateways and programmable logic controllers.
Daniel Okafor6 Oct 20268 min read
Cyber AttackGov & Defence
Compromised Partner Integration Exposes 8.8 Million Citizen Records in Denmark National Registry Breach
Danish authorities confirmed an unauthorized entity abused legitimate commercial partner API credentials to exfiltrate 8.8 million CPR citizen identity records.
Tom Verhoeven5 Oct 20268 min read
Cyber AttackEnergy & Utilities
China-Nexus Warlock Ransomware Crew Breaches Water Utility and Telecom Operator Through Unpatched SharePoint
Longlegs (Storm-2603) used on-prem SharePoint access, a BYOVD EDR killer and SYSVOL replication to push Warlock ransomware to 33+ hosts. IOCs inside.
Mei-Lin Chen4 Oct 20269 min read
ThreatsIndustrial & OTHigh
Monta EV Charging Infrastructure Platform Vulnerabilities Enable Charging Station Impersonation and Remote Takeover (CVE-2026-95102)
CISA advisory ICSA-26-274-02 details critical authentication and rate-limiting flaws in Monta EV charging platform WebSocket APIs, enabling charger hijacking.
CST Editorial Desk2 Oct 20269 min read
ThreatsIndustrial & OTCritical
Tenda GPON Optical Network Terminals Open to Remote Code Execution via Overflow
A critical stack-based buffer overflow in Tenda GPON optical terminals allows unauthenticated remote attackers on the WAN interface to achieve root command execution.
CST Editorial Desk1 Oct 202610 min read
ThreatsIndustrial & OTHigh
Baicells Nova 430H Private LTE eNodeB Base Stations Exposed to Remote Radio Signaling Disruption (CVE-2026-96274)
CISA advisory ICSA-26-272-04 warns that malformed RF uplink packets in Baicells Nova 430H private LTE base stations cause remote denial-of-service.
CST Editorial Desk1 Oct 20268 min read
Cyber AttackHealthcare & Pharma
General Santos Doctors Hospital Hit by 2.4TB Rhysida Ransomware Extortion of Patient Clinical Records
Rhysida ransomware group exfiltrates 2.44 Terabytes of clinical patient files and medical records from General Santos Doctors Hospital in an 8-Bitcoin extortion scheme.
Daniel Okafor1 Oct 202611 min read
ThreatsIndustrial & OTCritical
Toptech TMS7 Flaws Expose Oil and Gas Terminal Loading Racks to Remote Hijack
CISA advisory ICSA-26-272-02 exposes critical flaws in Toptech TMS7 and TopHAT, enabling remote unauthenticated attackers to hijack oil and gas loading racks.
CST Editorial Desk30 Sep 202610 min read
GuidesIndustrial & OT
IEC 62443 Architecture Hardening: Deploying Micro-Segmentation and Conduits in Industrial Control Networks
A technical engineering guide on implementing IEC 62443-3-2 Zones and Conduits to isolate critical PLC and SCADA assets against cyberattacks.
Daniel Okafor27 Sep 202610 min read
Cyber AttackCloud & SaaS
Halliburton SEC Filing Details System Disconnections Across Global Energy Operations
Halliburton files SEC Form 8-K Item 1.05 detailing unauthorized corporate network access that forced critical energy infrastructure systems offline across global operations.
Daniel Okafor25 Sep 202619 min read
GuidesIndustrial & OT
IEC 62443-3-2 Zones and Conduits: Engineering Micro-Segmentation Against OT Lateral Movement
An engineering deep dive into IEC 62443-3-2 zones and conduits, establishing hardware micro-segmentation and SL-T targets to protect physical industrial processes.
Daniel Okafor24 Sep 202618 min read
ThreatsIndustrial & OTCritical
OpenPLC Runtime v3 Flaw Enables Remote Controller Hijacking in Industrial Networks
CISA ICS advisory ICSA-26-265-09 details critical buffer overflow and authentication bypass flaws in OpenPLC Runtime v3, allowing remote process disruption.
Daniel Okafor24 Sep 202616 min read
ThreatsIndustrial & OTHigh
OpenPLC Runtime Stored XSS Flaw Enables Operator Session Hijacking and Unauthorized Physical Process Control CVE-2026-88020
CISA warns of CVE-2026-88020 in OpenPLC Runtime v3 web interface, allowing attackers to hijack operator sessions and manipulate physical industrial processes.
CST Editorial Desk23 Sep 202615 min read
InsightsGov & Defence
EU NIS2 Directive Enforcement Mandates 24-Hour Incident Reporting and C-Suite Liability Across 18 Critical Sectors
The European Union enacts NIS2 Directive enforcement, establishing mandatory 24-hour incident notifications, personal C-suite liability, and strict supply chain audits.
CST Editorial Desk22 Sep 202617 min read
ThreatsIndustrial & OTCritical
Threat Actors Weaponize AI Tooling and S7comm to Target Siemens S7 Industrial Controllers
CISA, NSA, and the FBI issue joint advisory AA26-231A warning of active campaigns targeting Siemens S7 series PLCs using automated S7comm protocol exploitation.
Mei-Lin Chen19 Sep 202613 min read