Search: “plc”

26 stories

Searchkeyword smart Sortlatest hot importance relevance

DomainAll Cyber AIWindow24h 3d 7d 30d AllIn the wild Important only Show duplicates

CategoryAll Vulnerability 100 Ransomware 65 Exploit / PoC 49 Industry 28 Threat actor 26 Data breach 20 Malware 20 Policy & legal 19 Phishing & fraud 8 Advisory 7 Research 4 AI tools & infra 3 AI research 2 AI safety & security 2

SeverityAll critical 203 high 73 medium 34 low 35 info 9

⚡ Weekly Recap: AI-Powered PLC Attacks, GitLab Attacks, Stripe Key Leaks and More

US agencies warn of AI-assisted attacks on exposed Siemens PLCs; the week also saw GitLab CVE-2026-19478 exploited and trojanized npm packages found.

The weekly recap leads with a US government warning that threat actors use AI-generated scripts and Censys/ZoomEye scanning to attack internet-exposed Siemens S7 PLCs in water, energy and manufacturing, calling it an active threat. Other stories include active exploitation of GitLab CVE-2026-19478 (CVSS 9.4, unauthenticated project rewriting), 14 trojanized npm packages delivering the RedC2 4.0 Linux backdoor, and the Zombie Card attack that revives expired Visa cards for contactless payment fraud. It also covers suspected Russian clusters UNC6293, UNC7005 and UNC5976 phishing campaigns, a faster Cloudflare Workers Spectre JWT leak, and a bespoke Cl0p JSP web shell deployed after exploiting PTC Windchill flaws.

The Hacker NewsAug 28, 08:05 UTC · 20d agoThreat actor in the wildCVE-2026-194781

Iranian Hackers Exploit PLCs in Attack on Water Authority in U.S.

The Hacker NewsDec 2, 07:26 UTC · Dec 2, 2023Threat actor in the wild

Iranian Hackers Target Siemens and Schneider Industrial Systems

Infosecurity MagazineJul 23, 13:30 UTC · Jul 23, 2026Threat actor

CyberAv3ngers hit Unitronics PLCs at multiple US-based water facilities

Help Net SecurityDec 4, 00:00 UTC · Dec 4, 2023Threat actor

Iran-Linked Actors Breach Are Targeting US Water and Energy Control Systems

Security AffairsJul 25, 20:11 UTC · Jul 25, 2026Threat actor

Iranian cyber activity hits US energy, water, and government networks

Help Net SecurityApr 8, 00:00 UTC · Apr 8, 2026Threat actor

US sanctions Iranian cyber actors as UK discloses power plant attack

US Treasury sanctioned six Iranian MOIS-linked hackers for breaching US agency and UN email accounts as the UK disclosed a four-day power plant shutdown.

The US Treasury sanctioned at least six Iranian nationals tied to a hacking team inside Iran's Ministry of Intelligence and Security (MOIS) active since 2023; four were indicted last week for breaching employee email accounts at the Department of Labor, the Federal Energy Regulatory Commission and United Nations organizations. Treasury said the group compromised energy, defense, healthcare, IT and financial sector targets, multiple US government offices in summer 2024, and stole cryptocurrency for personal gain. Separately, Iranian actors reportedly shut down a small British power plant for four days without grid impact, days after FBI and NSA warned of hackers targeting programmable logic controllers in energy, water and agriculture.

The RecordAug 24, 22:57 UTC · 23d agoThreat actor in the wild

NSA, FBI warns of hackers using AI-generated tools in attacks on critical infrastructure technology

NSA and FBI warn of an active campaign using AI-generated exploit scripts against Siemens S7 PLCs in critical infrastructure sectors.

NSA, FBI and other federal agencies issued an urgent advisory describing an active threat campaign targeting US-based Siemens S7 Series PLCs with AI-generated exploitation scripts disguised as legitimate monitoring tools. Actors use internet scanning to find exposed PLCs in energy, water, and manufacturing sectors, and may be preparing for operational effects. The advisory expands on July warnings of Iran-affiliated hackers targeting PLCs from Siemens, Schneider Electric, Rockwell Automation, and Allen-Bradley.

The RecordAug 19, 18:01 UTC · 28d agoThreat actor in the wild