Search: “ICS operators”

173 stories

Searchkeyword smart Sortlatest hot importance relevance

DomainAll Cyber AIWindow24h 3d 7d 30d AllIn the wild Important only Show duplicates

CategoryAll Exploit / PoC 85 Ransomware 24 Vulnerability 22 Malware 15 Data breach 11 Advisory 6 Policy & legal 6 Threat actor 2 Industry 1 AI safety & security 1

SeverityAll critical 155 high 14 medium 3 low 0 info 1

ICS Operators Warned of AI-Driven Attacks on Siemens PLCs

A US government advisory warns attackers are using AI-generated exploitation scripts against internet-exposed Siemens S7 Series PLCs.

A US government advisory warns ICS operators that attackers are targeting exposed Siemens S7 Series PLCs using AI-generated exploitation scripts. The use of AI to automate exploit development and delivery marks an escalation in threats to industrial control systems. Operators of exposed PLCs are warned to harden their environments as AI-assisted tooling lowers the barrier for adversaries.

Infosecurity MagazineAug 20, 11:00 UTC · 27d agoExploit / PoC in the wild

Hacker honeypot shows even amateurs are going after ICS systems

CyberScoopAug 7, 19:48 UTC · Aug 7, 2018Exploit / PoC in the wild

Nozomi Networks raises $30 million for ICS security platforms

CyberScoopSep 27, 16:53 UTC · Sep 27, 2018Exploit / PoC in the wild

FireEye is responding to a second intrusion from group behind Trisis

CyberScoopApr 10, 04:01 UTC · Apr 10, 2019Exploit / PoC in the wild

Biden administration unveils plan to defend electric sector from cyberattacks

CyberScoopApr 20, 15:04 UTC · Apr 20, 2021Exploit / PoC in the wild

Who exactly benefits from Kaspersky’s ICS

CyberScoopOct 21, 19:50 UTC · Oct 21, 2016Exploit / PoC in the wild

Week in review: Citrix bug under attack, Windows 7 ransomware risk, ATT&CK for ICS

Help Net SecurityJan 12, 00:00 UTC · Jan 12, 2020Ransomware in the wildCVE-2019-19781 CVE-2019-17026 CVE-2019-2215

Electric grid hacking exercise puts spotlight on shortage of security clearances

CyberScoopApr 2, 16:25 UTC · Apr 2, 2018Ransomware in the wild

Ransomware disrupted production at two manufacturing sites in Italy, investigators say

CyberScoopApr 7, 18:29 UTC · Apr 7, 2021Ransomware in the wild

Finite State Exploit Intelligence enables security teams to improve visibility into device software

Help Net SecurityApr 14, 00:00 UTC · Apr 14, 2022Exploit / PoC in the wild

Researchers find big flaw in a Schneider Electric ICS system popular in building systems, utilities

CyberScoopJul 13, 13:20 UTC · Jul 13, 2021Ransomware in the wild

Electric utilities use red-teaming, AI to prepare for advanced threats

CyberScoopJul 13, 22:38 UTC · Jul 13, 2018AI safety & security in the wild

Industry steps up on IoT cybersecurity — is it enough?

CyberScoopSep 23, 09:30 UTC · Sep 23, 2016Exploit / PoC in the wild

⚡ Weekly Recap: Airline Hacks, Citrix 0-Day, Outlook Malware, Banking Trojans and more

The Hacker NewsJun 10, 04:47 UTC · Jun 10, 2026Malware in the wildCVE-2025-6543 CVE-2025-5777 CVE-2025-49825+23 CVEs

Idaho National Lab researcher shines a light on the market for ICS zero

CyberScoopJan 22, 23:33 UTC · Jan 22, 2020Exploit / PoC in the wild

ICS cybersecurity company Indegy raises $18 million

CyberScoopAug 28, 21:35 UTC · Aug 28, 2018Exploit / PoC in the wild

Dragos: Surge of new hacking groups enter ICS space as states collaborate with private actors

CyberScoopFeb 25, 11:00 UTC · Feb 25, 2025Ransomware in the wild

Claroty raises $60 million to protect industrial networks from 'perfect storm' of cyberthreats

CyberScoopJun 11, 13:34 UTC · Jun 11, 2018Ransomware in the wild

DHS cyber specialist: look for behavior patterns with APTs

CyberScoopJun 11, 15:00 UTC · Jun 11, 2018Exploit / PoC in the wild

Appealing for collaboration, DHS nudges ICS companies toward a more 'proactive' defense

CyberScoopMay 20, 20:57 UTC · May 20, 2019Exploit / PoC in the wild

American Water Works believes no water, wastewater facilities affected by cyberattack

The RecordOct 7, 17:00 UTC · Oct 7, 2024Ransomware in the wild

Yet another hacking group is targeting oil and gas companies, Dragos says

CyberScoopAug 1, 14:40 UTC · Aug 1, 2019Ransomware in the wild

North American utilities drill 'GridEx' brings record turnout — except from supply chain vendors

CyberScoopApr 2, 12:18 UTC · Apr 2, 2020Exploit / PoC in the wild

CISA warns of continuing attacks on water systems after Kansas town reports incident

The RecordSep 25, 19:47 UTC · Sep 25, 2024Advisory in the wild

New boss, structure for U.S.

CyberScoopOct 14, 14:44 UTC · Oct 14, 2016Exploit / PoC in the wild

Pro-Russia hacktivists attacking vital tech in water and other sectors, agencies say

CyberScoopMay 1, 18:35 UTC · May 1, 2024Exploit / PoC in the wild

Week in review: ProxyShell and Realtek SDK vulnerabilities exploitation, automated pentesting

Help Net SecurityAug 29, 00:00 UTC · Aug 29, 2021Vulnerability in the wildCVE-2021-353951

CISA warns of attacks on Unitronics tool used by water utilities, wastewater systems

The RecordNov 29, 21:11 UTC · Nov 29, 2023Advisory in the wild

Experts call energy infrastructure cybersecurity bill 'shortsighted’

CyberScoopJun 27, 16:24 UTC · Jun 27, 2016Policy & legal in the wild

U.S. CISA adds TrueConf Server flaws to its Known Exploited Vulnerabilities catalog

CISA added two exploited TrueConf Server flaws (CVE-2026-72529, CVE-2026-72530) to its KEV catalog with federal patch deadlines.

CISA added two TrueConf Server vulnerabilities to its Known Exploited Vulnerabilities catalog: CVE-2026-72529 (CVSS 9.3), a missing-authentication remote code execution flaw reachable on TCP port 4307, and CVE-2026-72530 (CVSS 9.5), a sandbox escape allowing code execution on the underlying host. Both flaws affect TrueConf Server versions 5.3.x through 5.5.5 and earlier, and were discovered by Vyacheslav Kopeytsev of Kaspersky ICS CERT. Under BOD 22-01, federal civilian agencies must patch CVE-2026-72529 by August 23, 2026, and CVE-2026-72530 by September 2, 2026.

Security AffairsAug 21, 08:22 UTC · 26d agoExploit / PoC in the wildCVE-2026-72529 CVE-2026-72530

DHS’s cyber wing pledges to invest more in industrial control systems security

CyberScoopJun 9, 18:59 UTC · Jun 9, 2020Ransomware in the wild

Trisis masterminds have expanded operations to target U.S. industrial firms

CyberScoopMay 24, 10:00 UTC · May 24, 2018Data breach in the wild

Triton malware shines light on threat facing energy production companies

CyberScoopDec 18, 15:37 UTC · Dec 18, 2017Malware in the wild

How would MITRE’s popular cyberattack framework apply to industrial control systems?

CyberScoopOct 31, 01:21 UTC · Oct 31, 2019Ransomware in the wild

DHS wants to double -and double again

CyberScoopJul 12, 17:39 UTC · Jul 12, 2016Exploit / PoC in the wild

FireEye links Russia

CyberScoopOct 24, 20:00 UTC · Oct 24, 2018Exploit / PoC in the wild

A blackout in Ukraine is probably a bigger deal than you think

CyberScoopDec 22, 22:45 UTC · Dec 22, 2016Exploit / PoC in the wild

Iran-Linked MuddyWater Hackers Target U.S. Networks With New Dindoor Backdoor

The Hacker NewsMar 9, 06:40 UTC · Mar 9, 2026Malware in the wildCVE-2017-7921 CVE-2023-6895 CVE-2021-36260+2 CVEs

Week in review: Salesforce and ServiceNow portals exposed for 17 months, exploited Metabase 0-day

Weekly digest: exploited Metabase zero-day breached Framework; Salesforce/ServiceNow portals read for 17 months; Microsoft patched 400+ flaws.

Help Net Security's week in review aggregates top stories: a 'City-Forum' campaign tracked by Reco has been pulling records from Salesforce and ServiceNow portals worldwide for 17 months, and Framework suffered a breach via an exploited Metabase zero-day exposing customer contact and IP data. It also covers Microsoft's August 2026 Patch Tuesday fixing 400+ flaws including exploited zero-day CVE-2026-68820, Cisco's fix for exploited firewall DoS bug CVE-2026-20349 (added to CISA KEV), and a second N-able N-central hotfix for actively exploited CVE-2026-18577. Other items include GitHub expanding Dependabot malware alerts to eight package ecosystems and EU AI Act enforcement beginning on 2 August 2026.

Help Net SecurityAug 16, 00:00 UTC · Aug 16, 2026Industry in the wildCVE-2026-18577 CVE-2026-68820 CVE-2026-203491

New malware aimed at industrial systems found

CyberScoopJun 2, 14:01 UTC · Jun 2, 2016Malware in the wild