Topic
17 articles
CyberSecureToday covers OT/ICS across 17 articles published between 27 Sep 2026 and 8 Oct 2026.
The coverage includes 16 vulnerability advisories and 1 analysis or guidance piece. 16 advisories are rated critical or high severity.
Stories on OT/ICS most often intersect with SCADA, CISA Advisory and IEC 62443, with Industrial, OT & IoT the most affected sector. The most recent story, “Schneider Electric EcoStruxure Geo SCADA Expert Server Memory Corruption Enables Remote Code Execution”, was published 8 Oct 2026. Every article is listed below, newest first, with the affected products, severity and remediation guidance in each piece.
OT / SCADACISA and Schneider Electric issue critical advisory for CVE-2026-50891 in EcoStruxure Geo SCADA Expert servers permitting unauthenticated remote root code execution.
OT / SCADACISA industrial advisory ICSA-26-288-03 details high-severity flaw CVE-2026-49821 in Rockwell Automation ControlLogix 5580 controllers causing unrecoverable CPU hangs.
OT / SCADACISA issues industrial advisory ICSA-26-285-01 for Phoenix Contact FL SWITCH managed industrial network switches resolving critical firmware RCE CVE-2026-48192.
OT / SCADACISA and Emerson release urgent industrial advisory ICSA-26-283-02 for CVE-2026-46801, a critical authentication bypass in DeltaV DCS operator workstations.
OT / SCADACISA industrial advisory ICSA-26-278-02 discloses a critical stack-based buffer overflow (CVE-2026-43890) in Yokogawa CENTUM VP Human Interface Stations.
OT / SCADACISA and ABB have issued an emergency industrial advisory for CVE-2026-42918, a critical remote code execution vulnerability in ABB Ability System 800xA controllers.
Gov / DefenseCISA Advisory ICSA-26-281-01 details a critical heap corruption vulnerability in Honeywell Experion PKS distributed control systems.
Gov / DefenseCISA Advisory ICSA-26-280-01 details a critical authentication bypass in Rockwell Automation FactoryTalk VantagePoint manufacturing analytics servers.
OT / SCADACISA Advisory ICSA-26-279-01 details a critical denial of service flaw in Siemens SIMATIC S7-1500 and ET 200SP programmable logic controllers.
Gov / DefenseCISA Advisory ICSA-26-278-02 details a critical memory corruption vulnerability in Schneider Electric Modicon M580 and M340 industrial controllers.
Gov / DefenseCISA Advisory ICSA-26-274-05 details a critical authentication bypass flaw in Johnson Controls EasyIO Neo EC and CW series building automation controllers.
OT / SCADACISA Advisory ICSA-26-211-07 warns of a high-severity protocol command manipulation flaw in Mitsubishi Electric CC-Link IE TSN industrial communication modules.
OT / SCADACISA Advisory ICSA-26-242-01 warns of a critical unauthenticated remote code execution vulnerability in Rockwell Automation FactoryTalk View SE.
OT / SCADACISA Advisory ICSA-26-265-07 details a high-severity path traversal vulnerability in Siemens SIMOVE Fleetmanager allowing unauthenticated arbitrary file exfiltration.
OT / SCADACISA Advisory ICSA-26-240-02 warns of a critical heap-based buffer overflow in Schneider Electric EcoStruxure Operator Terminal Expert enabling remote code execution.
OT / SCADAA technical engineering guide on implementing IEC 62443-3-2 Zones and Conduits to isolate critical PLC and SCADA assets against cyberattacks.
OT / SCADACISA Advisory ICSA-26-232-01 warns of a high-severity cleartext credential storage flaw in Johnson Controls Simplex Incident Manager fire safety software.