Topic

SCADA Security: news, advisories and analysis

7 articlesUpdated 17 Oct 2026

CyberSecureToday covers SCADA Security across 7 articles published between 17 Sep 2026 and 17 Oct 2026. The coverage includes 7 vulnerability advisories. 7 advisories are rated critical or high severity.

Stories on SCADA Security most often intersect with IEC 62443, Industrial OT and Schneider Electric, with Industrial, OT & IoT the most affected sector. The most recent story, “Eclipse Milo OPC UA Flaws Let Low-Privileged Actors Bypass Method Authorization”, was published 17 Oct 2026. Every article is listed below, newest first, with the affected products, severity and remediation guidance in each piece.

Latest coverage

ThreatsIndustrial & OTCritical
Eclipse Milo OPC UA Flaws Let Low-Privileged Actors Bypass Method Authorization
CISA Advisory ICSA-26-288-01 warns of critical vulnerabilities in Eclipse Milo OPC UA stacks that allow low-privileged actors to bypass method authorization and crash OT gateways.
Mei-Lin Chen17 Oct 20269 min read
ThreatsIndustrial & OTCritical
Hitachi Industrial Systems Undocumented Administrative Backdoor and Static Credentials Exposed in Production (CVE-2026-82829)
Undocumented backdoor maintenance accounts and hardcoded credentials in Hitachi Coding Software Suite through v3.3.0 permit unauthorized full system access.
CST Editorial Desk1 Oct 202611 min read
ThreatsIndustrial & OTHigh
Schneider Electric Modicon M340 FTP Flaw Enables Remote Denial of Service
CISA and Schneider Electric issue advisory for CVE-2025-6625 in Modicon M340 PLCs and BMX communication modules, where malformed FTP commands halt controller operations.
Daniel Okafor21 Sep 202614 min read
ThreatsIndustrial & OTHigh
Siemens SICAM 8 Remote Parameterization Resource Exhaustion Flaw Disables Substation Automation Controllers
Siemens releases advisory SSA-246443 for high-severity flaw CVE-2026-27663 in SICAM 8 controllers, where resource exhaustion halts substation automation.
CST Editorial Desk20 Sep 202613 min read
ThreatsIndustrial & OTCritical
Schneider Electric Modicon M580 Authentication Flaw Risks Industrial Process Takeover
Schneider Electric issues advisory SEVD-2026-251-04 for critical CVSS 9.2 flaw CVE-2026-3869 in Modicon M580 controllers enabling unauthenticated process takeover.
CST Editorial Desk20 Sep 202615 min read
ThreatsIndustrial & OTHigh
Rockwell Automation FactoryTalk Activation Manager Flaw Enables Local SYSTEM Privilege Escalation
Rockwell Automation issues advisory SD1799 for CVE-2026-16675 in FactoryTalk Activation Manager, allowing authenticated operators to seize SYSTEM privileges.
CST Editorial Desk20 Sep 202613 min read
ThreatsIndustrial & OTHigh
Schneider Electric SCADAPack x70 RTUs Exposed to Remote Credential Extraction Flaws
CISA issues advisory ICSA-26-258-04 warning of insufficiently protected credentials in Schneider Electric SCADAPack x70 Remote Telemetry Units (CVE-2026-81861).
Aisha Noor17 Sep 202612 min read

Latest coverage

Eclipse Milo OPC UA Flaws Let Low-Privileged Actors Bypass Method Authorization

Hitachi Industrial Systems Undocumented Administrative Backdoor and Static Credentials Exposed in Production (CVE-2026-82829)

Schneider Electric Modicon M340 FTP Flaw Enables Remote Denial of Service

Siemens SICAM 8 Remote Parameterization Resource Exhaustion Flaw Disables Substation Automation Controllers

Schneider Electric Modicon M580 Authentication Flaw Risks Industrial Process Takeover

Rockwell Automation FactoryTalk Activation Manager Flaw Enables Local SYSTEM Privilege Escalation

Schneider Electric SCADAPack x70 RTUs Exposed to Remote Credential Extraction Flaws