Siemens and other ICS vendors publish new vulnerability advisories
Node2Shell exploitation attempts have been seen, but Siemens reports no attacks aimed at its products.
Stories per day · 30 days
22 RSS
Relatedsiemens18ot15cisa14refrigeration12danfoss11france10ot-security9denial-of-service6control-systems5critical-infrastructure5energy5simatic5cert-fr4hitachi-energy4supermarket4advisory3authentication-bypass3booz-allen3
202 stories, newest first · one card per story
Stories tagged #ics
A third of industrial organizations reported an OT incident, SANS finds
Among nearly 700 respondents, incidents rose from 22% to 34%, and reported IP theft jumped from 6% to 31%.
France blames IRGC unit for October supermarket fridge hacks
A joint report names IRGC unit Shahid Kaveh; attacks hit about 700 stores on October 11-12, and US sources reportedly had only low-confidence attribution.
France blames Iran's IRGC for sabotage at about 700 retail sites
Attackers raised defrost settings on Danfoss and Dixell controllers on October 11, causing food losses and fires.
Grid-context checks catch credentialed DER writes static checks miss
On two IEEE feeders, the check refused 91.7% of insider-abuse writes while denying 1.28% of benign writes.
OT systems remain connected to networks
OT and ICS systems exposed through IT/OT convergence, DMZ use and remote connectivity since the early 2000s.
CISA warns of two CVSS 9.0 flaws in PowerSYSTEM Center
Authenticated adjacent-network bugs allow admin-resource access or SQL commands; CISA says they are not remotely exploitable.
1
Zener Avalanche Noise TRNG Entropy Characterized for NIST Compliance
Paper evaluates op-amp Zener TRNG across gain settings and capacitors, identifying optimal config for NIST SP 800-22/SP 800-90B compliance and low-cost ICS use.
PowerSYSTEM Center flaws allow SQL injection and admin resource access
Both CVEs score 9.0; Subnet tells 2020 users to install Update 30 and later lines to install 2026 Update 1.1.
1
Ivanti Patches Two Connect Secure Zero-Days Chained in Attacks
Ivanti released patches for two new zero-day flaws chained in attacks since October with CISA ordering federal agencies to patch CVE-2026-104935.
Hitachi Energy CoreTec flaws allow commands and local root
Authenticated users can inject OS commands, and a local user can reach root through the built-in Linux ESP code.
1
Siemens Mendix SAML module allows assertion-replay login bypass
Unauthenticated attackers can replay a valid IdP-initiated SAML response; fixes are V4.2.4 and V3.6.29.
Croatian IACS integrators describe uneven cybersecurity practices
Integrators serving energy, chemical, pharmaceutical, and food clients described low owner awareness and split views on NIS2.
Industrial detectors that look deployable in simulation fail on a real plant
At a fixed false-alarm budget, sequential valve attacks were flagged on at most 0.17 of perturbed samples.
Four EPICS Base flaws patched, one scored CVSS 9.8
Base 7.0.10 and earlier is affected; 7.0.11 is the fix, and CISA reports no public exploitation.
EPICS Base 7.0.11 fixes four severe bugs, one rated 9.8
Causal Security’s Cipher agent reported the flaws in under four hours; CISA warns of crashes, memory disclosure or possible code execution.
Hitachi HiRDB, JP1 and TRO600 firmware affected by vulnerabilities
The October 27 bulletin lists many HiRDB and JP1 builds plus TRO600 firmware before 9.2.2.1, with no CVEs or exploitation status.
Johnson Controls Kantech Entrapass before 9.20 has two flaws
Canada's Cyber Centre says Johnson Controls confirmed two vulnerabilities and urges administrators to apply updates when available.
Moxa MRC Client and OnCell LTE devices hit by three flaws
Canada's Cyber Centre says MRC Client through v4.2.0 and all OnCell G3150A-LTE firmware are affected, with fixes not named.
Mitsubishi Electric GENESIS64 DCOM flaw can expose or destroy data
An attacker logged in as the product administrator can run DCOM objects locally or remotely; fixed builds are 10.98 or later.
1
EPICS Base 7.0.10 and earlier: network flaws up to CVSS 9.8
Update to EPICS Base 7.0.11; the worst flaw can corrupt memory and may allow remote code execution.
Maritime coalition opens free vulnerability database for ships and ports
Blue Initiative lists nearly 30,000 flaws, including over 2,000 critical and 37 ship- or port-specific issues.
1
Simulated pump outages split water service recovery from pressure recovery
In 192 verified scenarios, 12-hour Net1 outages averaged 404.96 m³ unmet demand while Net3 kept full delivery.
AquaSense-ICS releases leakage-aware water CPS attack benchmark
Under chronological splits, no model beats a constant normal predictor, and unseen-attack AUROC averages 0.64.