Siemens APOGEE, TALON and Desigo flaws can cause denial of service
Several Desigo controllers at version 2.3 and later have no planned fix for CVE-2026-89208.
Stories per day · 30 days
5 RSS
6 stories, newest first · one card per story
Stories tagged #building-automation
Cybercrims go beyond stealing data to attack physical building systems
Cybercriminals are disrupting building systems, from French grocery refrigeration to a Canadian hospital, to extort victims with physical harm.
4
[Control Systems] Johnson Controls security advisory (AV26-991)
Canada's Cyber Centre warns of vulnerabilities in Johnson Controls EasyIO controllers and urges updates.
Johnson Controls EasyIO Neo Series EC and CW Controllers
CISA says Johnson Controls EasyIO Neo controllers transmit credentials in cleartext via CVE-2026-64893, with no known exploitation.
7
Your security program knows about the firewall, but does it know about the elevator?
A Honeywell survey finds few critical-infrastructure teams continuously monitor building systems, and weak inventories track with longer outages.
Siemens Desigo CC family
Siemens Desigo CC graphics documents can run attacker scripts and compromise client operating systems.