Topic

OT Security: news, advisories and analysis

16 articlesUpdated 12 Oct 2026

CyberSecureToday covers OT Security across 16 articles published between 15 Sep 2026 and 12 Oct 2026. The coverage includes 13 vulnerability advisories and 2 analysis or guidance pieces. 13 advisories are rated critical or high severity.

Stories on OT Security most often intersect with IEC 62443, SCADA and Siemens, with Industrial, OT & IoT the most affected sector. The most recent story, “Delta Electronics CNC HMI Flaw Allows Remote Unauthenticated G-Code Toolpath Manipulation and Spindle Override (CVE-2026-74810)”, was published 12 Oct 2026. Every article is listed below, newest first, with the affected products, severity and remediation guidance in each piece.

ICS/OT advisory hub: severity, KEV status and fixes in one table

Latest coverage

NewsIndustrial & OTCritical
Delta Electronics CNC HMI Flaw Allows Remote Unauthenticated G-Code Toolpath Manipulation and Spindle Override (CVE-2026-74810)
Delta Electronics and CISA issue advisory for CNC HMI controllers, patching a critical memory corruption flaw (CVE-2026-74810) allowing remote toolpath tampering.
CST Editorial Desk12 Oct 20268 min read
NewsIndustrial & OTCritical
Siemens SCALANCE Switch Flaw Allows Unauthenticated Remote Firmware Manipulation
Siemens issues critical ProductCERT advisory for SCALANCE X industrial switches where a cryptographic verification bypass allows remote unsigned firmware injection.
CST Editorial Desk11 Oct 20268 min read
NewsIndustrial & OT
Water Utility Discloses Nation-State Breach of SCADA Gateways in SEC Filing
SEC Form 8-K disclosure details a nation-state intrusion targeting municipal water SCADA gateways and programmable logic controllers.
Daniel Okafor6 Oct 20268 min read
GuidesIndustrial & OT
IEC 62443-3-2 Zones and Conduits: Engineering Micro-Segmentation Against OT Lateral Movement
An engineering deep dive into IEC 62443-3-2 zones and conduits, establishing hardware micro-segmentation and SL-T targets to protect physical industrial processes.
Daniel Okafor24 Sep 202618 min read
ThreatsIndustrial & OTCritical
OpenPLC Runtime v3 Flaw Enables Remote Controller Hijacking in Industrial Networks
CISA ICS advisory ICSA-26-265-09 details critical buffer overflow and authentication bypass flaws in OpenPLC Runtime v3, allowing remote process disruption.
Daniel Okafor24 Sep 202616 min read
ThreatsIndustrial & OTHigh
Siemens Desigo CC Building Automation Platform Flaw CVE-2026-34223 Exposes Supervisory Workstations to Arbitrary Script Execution
Siemens issues advisory SSA-330084 for Desigo CC building management systems where improper input validation in graphics files allows arbitrary script execution.
Priya Raman21 Sep 202614 min read
ThreatsIndustrial & OTCritical
Siemens Industrial Edge Management Flaw CVE-2026-18963 Enables Remote Takeover of Factory Control Systems
Siemens ProductCERT issues advisory SSA-503852 for critical CVSS 9.1 flaw CVE-2026-18963 in Industrial Edge Management allowing unauthenticated attackers to seize administrative accounts.
Daniel Okafor21 Sep 202615 min read
ThreatsIndustrial & OTCritical
Digital Watchdog VMAX Recorder Flaws Enable Unauthenticated Remote Root Takeover
CISA releases advisory ICSA-26-258-01 warning of critical vulnerabilities in Digital Watchdog VMAX DVR and NVR recorders allowing unauthenticated remote root code execution.
Mei-Lin Chen20 Sep 202612 min read
ThreatsIndustrial & OTCritical
Threat Actors Weaponize AI Tooling and S7comm to Target Siemens S7 Industrial Controllers
CISA, NSA, and the FBI issue joint advisory AA26-231A warning of active campaigns targeting Siemens S7 series PLCs using automated S7comm protocol exploitation.
Mei-Lin Chen19 Sep 202613 min read
ThreatsIndustrial & OTCritical
Johnson Controls C-CURE 9000 Vulnerabilities Allow Attackers to Hijack Physical Facility Access Gateways
Johnson Controls and CISA release emergency advisory ICSA-26-204-01 for C-CURE 9000 and victor application servers resolving critical code execution flaw CVE-2026-21655.
Mei-Lin Chen19 Sep 202613 min read
ThreatsIndustrial & OTCritical
Mitsubishi Electric GX Works3 Authentication Bypass Exposes Industrial PLCs to Memory Manipulation Attacks
Mitsubishi Electric and CISA issue critical advisory ICSA-26-260-02 for GX Works3 and Motion Control Settings software enabling in-memory block password bypass and PLC logic tampering.
Mei-Lin Chen19 Sep 202612 min read
ThreatsIndustrial & OTHigh
ABB Ability Edgenius Industrial Edge Controllers Exposed to Container Root Escalation Flaw
ABB and CISA issue security advisory for CVE-2026-31431 in Ability Edgenius edge controllers enabling container breakout and local root takeover.
Mei-Lin Chen19 Sep 20269 min read
ThreatsIndustrial & OTHigh
Schneider Electric SCADAPack x70 RTUs Exposed to Remote Credential Extraction Flaws
CISA issues advisory ICSA-26-258-04 warning of insufficiently protected credentials in Schneider Electric SCADAPack x70 Remote Telemetry Units (CVE-2026-81861).
Aisha Noor17 Sep 202612 min read
ThreatsIndustrial & OTCritical
Siemens Reyrolle 7SR5 Protection Relay Vulnerabilities Expose Electrical Substations to Tampering
CISA ICS-CERT advisory ICSA-26-258-05 alerts power grid operators to critical denial of service flaws in Siemens Reyrolle 7SR5 electrical protection relays.
Daniel Okafor17 Sep 202611 min read
ThreatsIndustrial & OTCritical
Industrial OT Defense: Implementing IEC 62443 Security Levels and Purdue Model Isolation
CISA ICS-CERT advisory ICSA-26-258-01 prompts urgent implementation of IEC 62443-3-2 zone segmentation and Purdue Model controls in industrial networks.
Daniel Okafor16 Sep 202611 min read
GuidesIndustrial & OT
Implementing IEC 62443-3-2: A Guide to Zones, Conduits and Purdue Boundaries
Engineering blueprint for implementing IEC 62443-3-2 zones, conduits, and Purdue Model boundaries across industrial automation and SCADA systems.
Mei-Lin Chen15 Sep 202610 min read