CopperDragon tooling linked to China-nexus espionage across three regions
SilentDelivery, OceanGate and DarkWire hit telecom, government and critical infrastructure with shared backdoors and credential tools.
1
Stories per day · 30 days
22 RSS
Relatedcisa17refrigeration8operational-technology7safepay7silent-train7volt-typhoon7ncsc6ot6uk6zero-day6ics5cold-chain4ot-security4ransomware4danfoss3double-extortion3dragos3fbi3
208 stories, newest first · one card per story
Stories tagged #critical-infrastructure
NCSC launches Cyber Adversary Simulation scheme for critical UK organisations
Assured suppliers run customer-specific attack plans so operators of essential services can test prevention, detection and response.
Trump nominates Palantir CISO Michael LoSapio to lead CISA
If confirmed, he would end nearly two years without a Senate-confirmed director after Jen Easterly left in January 2025.
Cloud Range releases free 28-question OT readiness assessment
The questionnaire covers seven areas, from asset visibility and IT/OT coordination through detection, response, recovery, and validation.
CISA expands incident reporting form while CIRCIA rule waits
Only federal civilian agencies must report now; a final rule would add 72-hour incident and 24-hour ransom deadlines.
CISA launches an enhanced cyber incident reporting form
The questionnaire asks about malware, social engineering, hacking, and insider threats, and maps activity to MITRE ATT&CK.
U.S. Agencies Warn Refrigeration Controller Attacks Could Cause Fires and Inventory Losses
Attackers exploit unpatched controllers in European supermarkets, raising temperatures to 50°C and spoiling inventory.
1
Paper derives guidelines for immune-inspired naval cyber resilience
On TNO's OpPic application, Self-Healing for Cyber Security software adapts to mission and threat conditions.
UK warns critical infrastructure faces grave risk
National Cyber Security Centre assesses highly likely AI-powered malware use in ransomware attacks on UK CNI by 2028.
1
CISA warns critical infrastructure operators to harden cooling systems amid attacks
Agencies urge strong authentication and updates for cooling systems in healthcare, food, and chemicals sectors after European supermarket hacks.
1
NATS September outage cost UK economy about £33m, report says
A legacy National Airspace System defect, not an attack, cancelled 1,152 flights and disrupted about 450,000 passengers.
Cyberattack disrupts blood storage refrigeration in France
France's national blood service confirms supplier cyberattack raised temperatures in three cold-storage facilities.
1
Hackers hit French national blood bank
Hackers raised temperatures in the blood bank's cold storage facilities across Europe.
2
NCSC warns of AI-powered ransomware attacks on UK critical infrastructure by 2028
NCSC predicts AI malware highly likely in future ransomware attacks on British critical infrastructure by 2028.
2
NCSC warns AI-powered ransomware could hit UK infrastructure by 2028
The UK also announced Cyber Shield, NERV, AISI and agent-security funding plus cheaper Cyber Essentials for smaller firms.
1
UK Cyber Chief Warns of AI Attacks on Critical Infrastructure by 2028
Criminals and states including China and Russia will use AI to attack critical infrastructure by 2028, according to the National Cyber Security Center.
1
NATO Crossed Swords 2026 adds AI agents to cyber operations training
More than 250 people from over 40 countries in Tallinn practice timing cyber effects to kinetic action within minutes.
NCSC warns of AI-powered ransomware on UK critical infrastructure by 2028
AI adoption by hostile actors is highly likely to boost ransomware scale and efficiency by 2028, NCSC report warns.
1
Allies seek to keep Nick Andersen as acting CISA director
His 210-day acting clock is running out, and no Senate nominee has appeared since Sean Plankey withdrew.
Lumen says Volt Typhoon banks Silent Train access in infrastructure
Lumen says the group rotates exploited SOHO, IoT and enterprise devices, including multiple zero-days, against high-value targets.
1
Volt Typhoon used rotating Silent Train relays for zero-days
Lumen says exploited products included Versa, N-able, Cisco SD-WAN, VeloCloud and possibly Quest KACE; KeyDrift hit Cisco controllers.
1
Volt Typhoon-linked actor exploited Cisco SD-WAN zero-day to steal encryption keys
CVE-2026-20127 (CVSS 10) gives unauthenticated admin access to SD-WAN controllers; KeyDrift malware siphoned keying material and Volt Typhoon kept exploiting the flaw after disclosure.
30
Volt Typhoon Exploits Zero-Days to Breach Critical Infrastructure
Volt Typhoon built Silent Train framework using zero-days in Quest KACE, N-central, Cisco SD-WAN and VeloCloud to access U.S. critical infrastructure.
1
Volt Typhoon used Silent Train in four zero-day campaigns
Black Lotus Labs says the rotating SOHO and IoT relay network hit hundreds of victims, including US critical infrastructure.
1