Industrial IoT: news, advisories and analysis

Latest coverage

• 

  Threats·Industrial & OTHigh

  Lantronix G520 Industrial Cellular Gateway Leaked Private Key Enables Remote Root Takeover (CVE-2026-84409)

  CISA advisory ICSA-26-272-01 reveals unencrypted update conduits and hardcoded private signing keys in Lantronix G520 gateways, enabling root RCE.

  Aisha Noor30 Sep 20268 min read
• 

  Threats·Industrial & OTCritical

  Siemens SIMATIC IoT2050 Advanced Flaw Enables Unauthenticated Remote Code Execution

  CISA and Siemens warn of critical CVSS 9.8 flaw in SIMATIC IoT2050 Advanced (ICSA-26-237-03), enabling remote attackers to execute arbitrary code with root privileges.

  Mei-Lin Chen25 Sep 202617 min read
• 

  Threats·Industrial & OTCritical

  lwIP MQTT Client Overflow Enables Remote Code Execution on Industrial IoT Devices

  CISA releases advisory ICSA-26-265-01 for critical CVSS 9.8 flaw CVE-2026-87121 in lwIP MQTT client, allowing unauthenticated attackers to execute arbitrary code.

  CST Editorial Desk24 Sep 202616 min read
• 

  Threats·Industrial & OTHigh

  Schneider Electric EcoStruxure IT Data Center Expert Flaw Exposes Critical Infrastructure Telemetry to XXE Attacks

  Schneider Electric advisory SEVD-2026-160-01 details high-severity XXE flaw CVE-2026-8045 in EcoStruxure IT Data Center Expert enabling data exfiltration.

  CST Editorial Desk20 Sep 202613 min read
• 

  Threats·Industrial & OTCritical

  Industrial OT Defense: Implementing IEC 62443 Security Levels and Purdue Model Isolation

  CISA ICS-CERT advisory ICSA-26-258-01 prompts urgent implementation of IEC 62443-3-2 zone segmentation and Purdue Model controls in industrial networks.

  Daniel Okafor16 Sep 202611 min read