Ot-Security

vulnerabilities 2026-09-07
Two Critical Command Injection Flaws in Advantech WISE-6610 Industrial Gateways (CVE-2026-79697, CVE-2026-79698)
Two CVSS 9.9 command injection bugs in Advantech's WISE-6610 cellular IoT gateway let an attacker with access to the admin web UI run arbitrary OS commands as root, with public exploit code already circulating.
command-injection network-appliance iot ot-security critical-infrastructure
vulnerabilities 2026-08-27
CISA, NSA, FBI Warn of AI-Generated Exploit Scripts Targeting Siemens S7 PLCs
A joint advisory from NSA, CISA, FBI, DOE, and EPA warns that threat actors are pairing AI-assisted scripting with snap7 libraries to build custom reconnaissance and exploitation tools against internet-exposed Siemens S7 PLCs.
ics ot-security scada critical-infrastructure network-appliance active-exploitation
vulnerabilities 2026-08-25
Iran-Linked Hackers Force UK Power Plant Offline for Four Days
A small UK generating station went dark for four days after an intrusion The Telegraph attributes to Iran-linked hackers, the first confirmed case of an IRGC-affiliated actor shutting down British energy infrastructure.
ics ot-security critical-infrastructure iran apt scada
vulnerabilities 2026-08-11
First-of-Its-Kind Attack Pivots Through a Private Cellular APN to Sabotage Siemens PLCs at a Polish Power Plant
CERT Polska details a December 2025 attack that pivoted through a distribution operator's private cellular APN — from a compromised wind farm firewall to Siemens PLCs at a combined heat and power plant, halting a turbine.
ics ot-security scada critical-infrastructure network-appliance active-exploitation
vulnerabilities 2026-07-29
Coordinated Attack Hits 30+ Minnesota Water Utilities, Knocks a Treatment Plant Offline
A coordinated attack on internet-exposed PLCs disrupted water and wastewater operations in more than 30 Minnesota communities on July 26-27, forcing manual control at multiple plants.
ics ot-security scada critical-infrastructure active-exploitation
Threat Intelligence 2026-04-09
CISA AA26-097A: CyberAv3ngers Exploit Rockwell PLCs Across US Water, Energy, and Government Systems
Six US agencies issue joint advisory after Iranian-affiliated CyberAv3ngers compromise Rockwell Allen-Bradley PLCs in water, energy, and government sectors, manipulating SCADA displays and control logic.
ics ot-security iran cisa critical-infrastructure scada
incidents 2026-04-04
Ransomware Hits Minot Water Treatment Plant SCADA System, FBI Investigating
Ransomware compromised the SCADA server at Minot, North Dakota's water treatment plant, forcing 16 hours of manual operations. FBI released a statement today confirming active investigation.
ransomware scada ics critical-infrastructure ot-security
vulnerabilities 2026-04-02
CVE-2026-1579: Critical PX4 Autopilot Flaw Gives Attackers Full Drone Control via MAVLink
CISA advisory for CVE-2026-1579 reveals a CVSS 9.8 authentication bypass in PX4 Autopilot that lets unauthenticated attackers gain shell access to drones over MAVLink.
cve ics cisa ot-security