Tag
21 results in the archive.
Russian state-sponsored group Sandworm and a partner used a novel mesh network backdoor in a destructive wiping attack against a Ukrainian logistics firm in 2025, exploiting spear-phishing for initial access.
Siemens disclosed critical vulnerabilities affecting APOGEE, TALON, and Desigo PXC/PXM products that could cause denial-of-service and improper memory access, with patches available for some and mitigations recommended for others.
A critical buffer overflow vulnerability in Savannah lwIP SMTP client v2.2.1 allows remote code execution and device crashes, impacting critical infrastructure devices.
The China-linked Warlock ransomware group exploited SharePoint vulnerabilities to gain initial access in attacks against water utilities, telecom providers, regional governments, and universities, underscoring ongoing risks to critical infrastructure and public sector organizations.
Critical vulnerabilities in Armatura LLC's Armatura One expose access control systems to unauthorized access and arbitrary code execution risks.
The FBI and CISA issued guidance for critical infrastructure operators on managing cybersecurity risks posed by third-party industrial control system integrators, emphasizing access control and risk assessments.
CenterPoint Energy confirmed a breach where attackers exfiltrated customers' personal data, emphasizing the ongoing threats faced by critical utility providers.
Two critical vulnerabilities in mySCADA myPRO Manager allow unauthenticated attackers to access privileged management functions and send arbitrary SMS via connected GSM modems, affecting versions through 2.1.
A large IoT botnet impacting nearly 300,000 devices, attacks on over 100 water systems, and a novel SharePoint remote code execution vulnerability highlight a growing threat to critical infrastructure and enterprise environments.
Multiple critical vulnerabilities in Ebyte NE2-D11 devices allow unauthorized administrative access, data exposure, and operational disruption, affecting critical infrastructure controls.
The US Department of the Treasury imposed sanctions on Iranian cyber actors involved in attacks targeting critical infrastructure to disrupt their financial networks.
US government agencies warn of an active cyber threat exploiting Siemens S7 Series programmable logic controllers using AI-assisted scripts, risking critical infrastructure disruption and safety.
Two medium-to-high severity vulnerabilities in Johnson Controls Airwall could allow attackers to decrypt sensitive data and read arbitrary files, impacting critical infrastructure security.
Siemens patched a critical remote code execution vulnerability in multiple versions of its Siveillance Video Management Servers that threatens critical infrastructure.
Gunra ransomware, a double-extortion RaaS exploiting VPN and RDP vulnerabilities, threatens government and critical infrastructure with data encryption and leaks.
The North Carolina Ports Authority confirmed a cyberattack on IT systems at multiple ports causing operational delays and highlighting risks to critical infrastructure.
High-severity vulnerabilities in ABB Ability Zenon IIoT services using MongoDB 4.2 allow unauthorized access, denial of service, and potential data compromise.
A coordinated cyberattack targeted operational technology at over 30 Minnesota community water systems in late July, causing outages and communication disruptions.
Swiss rail manufacturer Stadler Rail faced a ransomware attack by the Everest gang targeting a shared supplier data exchange platform, refusing a $12.3 million ransom demand.
A critical authentication bypass vulnerability in Tycon Systems TPDIN-Monitor-WEB2 allows unauthenticated attackers full administrative control, risking critical infrastructure disruptions.
Russian state-sponsored hackers from FSB Center 16 are exploiting poorly configured routers in critical infrastructure worldwide, heightening operational risks.