Topic
71 articles
OT / SCADACISA and Schneider Electric issue critical advisory for CVE-2026-50891 in EcoStruxure Geo SCADA Expert servers permitting unauthenticated remote root code execution.
OT / SCADACISA industrial advisory ICSA-26-288-03 details high-severity flaw CVE-2026-49821 in Rockwell Automation ControlLogix 5580 controllers causing unrecoverable CPU hangs.
OT / SCADACISA issues industrial advisory ICSA-26-285-01 for Phoenix Contact FL SWITCH managed industrial network switches resolving critical firmware RCE CVE-2026-48192.
OT / SCADACISA and Emerson release urgent industrial advisory ICSA-26-283-02 for CVE-2026-46801, a critical authentication bypass in DeltaV DCS operator workstations.
OT / SCADACISA industrial advisory ICSA-26-278-02 discloses a critical stack-based buffer overflow (CVE-2026-43890) in Yokogawa CENTUM VP Human Interface Stations.
OT / SCADACISA and ABB have issued an emergency industrial advisory for CVE-2026-42918, a critical remote code execution vulnerability in ABB Ability System 800xA controllers.
Gov / DefenseCISA Advisory ICSA-26-281-01 details a critical heap corruption vulnerability in Honeywell Experion PKS distributed control systems.
Gov / DefenseCISA Advisory ICSA-26-280-01 details a critical authentication bypass in Rockwell Automation FactoryTalk VantagePoint manufacturing analytics servers.
OT / SCADACISA Advisory ICSA-26-279-01 details a critical denial of service flaw in Siemens SIMATIC S7-1500 and ET 200SP programmable logic controllers.
Gov / DefenseCISA Advisory ICSA-26-278-02 details a critical memory corruption vulnerability in Schneider Electric Modicon M580 and M340 industrial controllers.
Gov / DefenseCISA Advisory ICSA-26-274-05 details a critical authentication bypass flaw in Johnson Controls EasyIO Neo EC and CW series building automation controllers.
OT / SCADAA critical stack buffer overflow in Moxa industrial protocol gateways allows authenticated attackers to corrupt memory and hijack critical substation controllers.
OT / SCADAA critical OS command injection vulnerability in Johnson Controls EasyIO FS32 controllers allows network attackers to gain root access and hijack HVAC control logic.
OT / SCADACISA advisory ICSA-26-274-03 reveals local SYSTEM privilege escalation and project archive path traversal in ABB Protection and Control IED Manager PCM600.
OT / SCADACISA advisory ICSA-26-274-01 warns of embedded ActiveMQ deserialization and hardcoded AES keys in Armatura One, enabling physical security facility takeover.
OT / SCADAA hardcoded JWT signing key in Hitachi Coding Software Suite through v3.3.0 allows unauthenticated attackers to forge admin tokens and hijack factory lines.
OT / SCADAOriginal OT research examining deterministic Industrial Ethernet fieldbus vulnerabilities under IEC 62443, demonstrating microsecond packet injection risks.
OT / SCADACISA Advisory ICSA-26-211-07 warns of a high-severity protocol command manipulation flaw in Mitsubishi Electric CC-Link IE TSN industrial communication modules.
OT / SCADACISA Advisory ICSA-26-242-01 warns of a critical unauthenticated remote code execution vulnerability in Rockwell Automation FactoryTalk View SE.
OT / SCADACISA Advisory ICSA-26-265-07 details a high-severity path traversal vulnerability in Siemens SIMOVE Fleetmanager allowing unauthenticated arbitrary file exfiltration.
OT / SCADACISA Advisory ICSA-26-240-02 warns of a critical heap-based buffer overflow in Schneider Electric EcoStruxure Operator Terminal Expert enabling remote code execution.
OT / SCADAA technical engineering guide on implementing IEC 62443-3-2 Zones and Conduits to isolate critical PLC and SCADA assets against cyberattacks.
OT / SCADACISA Advisory ICSA-26-232-01 warns of a high-severity cleartext credential storage flaw in Johnson Controls Simplex Incident Manager fire safety software.
OT / SCADACISA ICS Advisory ICSA-26-225-01 warns of an unsafe deserialization flaw in AVEVA Enterprise SCADA systems allowing remote code execution on critical control nodes.