Topic

SCADA: news, advisories and analysis

71 articlesUpdated 13 Oct 2026

CyberSecureToday covers SCADA across 71 articles published between 14 Sep 2026 and 13 Oct 2026. The coverage includes 65 vulnerability advisories, 2 incident or breach reports and 4 analysis or guidance pieces. 64 advisories are rated critical or high severity, and 2 involve flaws listed in CISA's Known Exploited Vulnerabilities catalog.

Stories on SCADA most often intersect with IEC 62443, OT/ICS and Industrial OT, with Industrial, OT & IoT the most affected sector. The most recent story, “Yokogawa CENTUM VP Operator Station Flaw Enables Code Execution via Graphics Macros”, was published 13 Oct 2026. Every article is listed below, newest first, with the affected products, severity and remediation guidance in each piece.

ICS/OT advisory hub: severity, KEV status and fixes in one table

Latest coverage

NewsIndustrial & OTCritical
Yokogawa CENTUM VP Operator Station Flaw Enables Code Execution via Graphics Macros
Yokogawa Electric releases critical patches for CENTUM VP Human Interface Station software addressing a remote code execution vulnerability in graphics macros.
CST Editorial Desk13 Oct 20268 min read
NewsIndustrial & OTHigh
Siemens SIMATIC S7-1500 PLC Vulnerability Enables Unauthenticated PROFINET DCP Network Parameter Tampering (CVE-2026-79880)
Siemens issues urgent firmware updates for SIMATIC S7-1500 industrial controllers to remediate an unauthenticated PROFINET DCP configuration tampering vulnerability.
CST Editorial Desk13 Oct 20268 min read
NewsIndustrial & OTCritical
ABB System 800xA Flaw Allows Recipe Injection in Chemical and Pharma Plants
ABB releases emergency advisories for System 800xA Batch Management software after researchers uncover an unauthenticated recipe injection vulnerability.
CST Editorial Desk13 Oct 20268 min read
NewsIndustrial & OTCritical
Honeywell MasterLogic-200 PLC Ethernet Module Vulnerability Enables Unauthenticated Memory Overwrite and Controller Takeover (CVE-2026-79110)
Honeywell releases emergency firmware for MasterLogic-200 PLCs (CVE-2026-79110, CVSS 9.4) addressing an unauthenticated Ethernet stack buffer overflow.
CST Editorial Desk13 Oct 20268 min read
NewsIndustrial & OTCritical
Phoenix Contact ILC Inline Modular Controller Vulnerability Enables Unauthenticated PROFINET Protocol Memory Corruption (CVE-2026-78950)
Phoenix Contact issues an emergency advisory for Inline Modular Controllers (CVE-2026-78950, CVSS 9.5) fixing a critical PROFINET stack buffer overflow.
CST Editorial Desk12 Oct 20268 min read
NewsIndustrial & OTCritical
Schneider Electric Foxboro DCS Flaw Allows Unauthenticated Fieldbus Module Memory Corruption (CVE-2026-77880)
Schneider Electric releases emergency fixes for Foxboro DCS Fieldbus Modules (CVE-2026-77880, CVSS 9.6) resolving a critical memory corruption flaw.
CST Editorial Desk12 Oct 20268 min read
NewsIndustrial & OTCritical
Siemens SIMATIC Energy Manager PRO Flaw Enables Unauthenticated Remote Code Execution
Siemens issues emergency updates for SIMATIC Energy Manager PRO (CVE-2026-76880, CVSS 9.8) resolving an unauthenticated OPC UA deserialization vulnerability.
CST Editorial Desk12 Oct 20268 min read
NewsIndustrial & OTCritical
ABB Ability System 800xA Batch Management Server Flaw Enables Unauthenticated Recipe Parameter Manipulation (CVE-2026-71880)
ABB and CISA issue advisory for Ability System 800xA Batch Management, patching a critical flaw (CVE-2026-71880) allowing unauthenticated recipe tampering.
CST Editorial Desk11 Oct 20268 min read
NewsIndustrial & OTCritical
Emerson Ovation DCS Flaw Enables Logic Injection in Power Generation Networks
Emerson discloses critical vulnerability CVE-2026-69880 in Ovation Distributed Control System OCR400 controllers allowing remote code execution and turbine control logic tampering.
CST Editorial Desk11 Oct 20268 min read
NewsIndustrial & OTCritical
Siemens SCALANCE Switch Flaw Allows Unauthenticated Remote Firmware Manipulation
Siemens issues critical ProductCERT advisory for SCALANCE X industrial switches where a cryptographic verification bypass allows remote unsigned firmware injection.
CST Editorial Desk11 Oct 20268 min read
ThreatsIndustrial & OTCritical
Schneider Electric Modicon M580 Ethernet Communication Module Flaw Enables Remote Controller Takeover
A critical buffer overflow in Schneider Electric Modicon M580 and M340 Ethernet communication modules enables unauthenticated remote code execution.
CST Editorial Desk10 Oct 20268 min read
ThreatsIndustrial & OTCritical
Phoenix Contact FL SWITCH 3000 and 4000 Series Industrial Switches Vulnerable to SNMP Memory Corruption
A critical memory corruption flaw in Phoenix Contact FL SWITCH 3000 and 4000 managed industrial Ethernet switches enables remote arbitrary code execution.
CST Editorial Desk10 Oct 20268 min read
ThreatsIndustrial & OTHigh
Honeywell Experion PKS C300 Flaw Lets Malformed FTE Traffic Halt Plant Processes
A high-severity denial-of-service vulnerability in Honeywell Experion PKS C300 controllers enables unauthenticated network packets to freeze industrial plant processes.
CST Editorial Desk10 Oct 20268 min read
Cyber AttackCloud & SaaS
SEC Form 8-K Forensics: Multi-State Energy Utility Discloses Material Grid SCADA Telemetry Extortion Incident
A major North American energy utility discloses an SEC Form 8-K cyber incident involving extortion over exfiltrated regional transmission telemetry.
Priya Raman10 Oct 20268 min read
ThreatsIndustrial & OTCritical
Siemens SIMATIC S7-1500 Web Server Overflow Opens Controllers to Remote Disruption
A critical buffer overflow in the integrated HTTPS web server of Siemens SIMATIC S7-1500 and S7-1200 CPU firmware enables remote disruption of industrial automation controllers.
CST Editorial Desk10 Oct 20268 min read
ThreatsIndustrial & OTCritical
Emerson DeltaV Distributed Control System Workstation Unauthenticated RPC Flaw Enables Remote Execution
A critical unauthenticated RPC vulnerability in Emerson DeltaV distributed control system workstations allows attackers to execute code with SYSTEM privileges.
CST Editorial Desk10 Oct 20268 min read
ThreatsIndustrial & OTCritical
Yokogawa CENTUM VP FCS Controller Memory Corruption Flaw Enables Safety Setpoint Manipulation
A critical memory corruption vulnerability in Yokogawa CENTUM VP Field Control Station (FCS) controllers allows unauthenticated network packets to manipulate industrial control setpoints.
CST Editorial Desk10 Oct 20268 min read
ThreatsIndustrial & OTCritical
Rockwell FactoryTalk View SE Flaw Allows Remote Authentication Bypass and Console Takeover
Rockwell Automation and CISA disclose a critical vulnerability in FactoryTalk View SE human-machine interface software allowing unauthenticated operators to bypass security.
CST Editorial Desk9 Oct 20268 min read
ThreatsIndustrial & OTCritical
ABB Ability Symphony Plus SCADA S+ Operations Insecure Deserialization Vulnerability Enables Remote Code Execution (CVE-2026-58902)
ABB Cybersecurity and CISA disclose a critical vulnerability in Symphony Plus S+ Operations SCADA software allowing unauthenticated remote code execution on power plant servers.
CST Editorial Desk9 Oct 20268 min read
ThreatsIndustrial & OTHigh
GE Vernova Mark VIe Distributed Control System Controllers Vulnerable to Industrial Network Packet Flooding (CVE-2026-57812)
GE Vernova and CISA issue industrial security advisories for Mark VIe and Mark VIeS safety systems addressing a flaw causing turbine controller communication lockup.
CST Editorial Desk9 Oct 20268 min read
ThreatsIndustrial & OTCritical
Yokogawa FAST/TOOLS SCADA Gateway Buffer Overflow Vulnerability Enables Remote Industrial Process Disruption (CVE-2026-56891)
Yokogawa Electric issues a critical security bulletin detailing a heap-based buffer overflow in FAST/TOOLS SCADA servers permitting remote code execution.
CST Editorial Desk9 Oct 20268 min read
ThreatsIndustrial & OTHigh
AVEVA System Platform InTouch OPC Server Local Privilege Escalation Enables Industrial Operator Workstation Compromise (CVE-2026-54890)
AVEVA Security Bulletins and CISA disclose a local privilege escalation flaw in System Platform InTouch enabling low-privileged users to achieve SYSTEM execution.
CST Editorial Desk8 Oct 20268 min read
Cyber AttackIndustrial & OT
Energy Pipeline Operator Reports Extortion Attack Reaching SCADA Telemetry Archive
SEC 8-K filing reveals an advanced extortion group infiltrated the corporate network of a major energy pipeline operator, accessing historical SCADA telemetry archives.
Priya Raman8 Oct 20268 min read
ThreatsIndustrial & OTCritical
Siemens SIMATIC WinCC OA SCADA Authentication Bypass Enables Unauthenticated Industrial Telemetry Tampering (CVE-2026-51982)
Siemens ProductCERT discloses a critical authentication bypass vulnerability in SIMATIC WinCC Open Architecture SCADA web interfaces affecting critical infrastructure.
CST Editorial Desk8 Oct 20268 min read