Siemens and other ICS vendors publish new vulnerability advisories
Node2Shell exploitation attempts have been seen, but Siemens reports no attacks aimed at its products.
Stories per day · 30 days
Relatedrefrigeration5cisa4cold-chain3danfoss3france3ics3iran3irgc3ot-security3anomaly-detection2freezers2ot2php2shell2siemens2adversarial-disturbances1attribution1backdoor1copeland1
18 stories, newest first · one card per story
Stories tagged #industrial-control
France blames Iran's IRGC for attacks on store and blood-bank freezers
Attackers raised temperatures on industrial cold units in October and November; blood-bank intrusions were stopped before spoilage.
Talos diverts hostile OT agent requests onto a plant twin
Across 2,400 autonomous attacker agents in four concealment tiers, no write reached the real plant.
FBI and CISA warn of refrigeration system cyberattacks
Hackers target industrial refrigeration controllers worldwide; agencies urge removal from internet and patching to prevent food spoilage and equipment damage.
1
Static ramp model leaves detectable residuals on Siemens PROFINET drives
PASAD and CUSUM flag the omitted overshoot residual, and evaluated N4SID models did not improve stealth.
CISA Warns of Attacks on Industrial Refrigeration Controllers
Attackers may exploit unpatched controllers to alter settings and cause inventory loss in refrigeration systems.
CISA warns of attacks on supermarket refrigeration systems
France’s blood service had its cold-storage systems compromised but staff prevented any product loss.
1
Attackers exploit Node-RED CVE-2026-58115 to deploy Linux bot and backdoors
VulnCheck detects in-the-wild exploitation of CVE-2026-58115 deploying a Linux bot and webshells.
Supermarket Fridge Attacks Hit Over 100 European Stores
Attackers exploit Danfoss and Copeland refrigeration controllers raising unit temperatures to 50°C in multiple countries.
1
Croatian IACS integrators describe uneven cybersecurity practices
Integrators serving energy, chemical, pharmaceutical, and food clients described low owner awareness and split views on NIS2.
Industrial detectors that look deployable in simulation fail on a real plant
At a fixed false-alarm budget, sequential valve attacks were flagged on at most 0.17 of perturbed samples.
Industrial vendors assess PHP2Shell; several OT products affected
Unauthenticated PHP RCE flaws drew millions of attempts, with the first confirmed attacks aimed at honeypots.
Paper details stealthy data-driven attacks on closed-loop control systems
A model-free MITM method identifies plant behavior and tracks arbitrary references while staying under an infinity-norm IDS.
Indurex raises €7 million to expand industrial cybersecurity platform
Contrarian Ventures led the round; Indurex will grow R&D and sales in Europe and the Middle East first.
Paper tests last-moment checks for stale industrial control commands
Only a check inside the controller scan closed a pause window that replica checks missed.
CVE-2026-102511: Apache PLC4X: ADS discovery accepts spoofed responses and derives the connection target from them
Apache PLC4X before 1.0.0 accepts spoofed ADS discovery responses that can redirect connections, CVE-2026-102511.
Pyramid Solutions NetStaX EtherNet/IP Stack
CISA flags critical CVE-2026-78012 (CVSS 9.8) stack buffer overflow in Pyramid Solutions NetStaX EtherNet/IP stacks below v5.6.1, risking crashes or remote attack vectors.
3
OPCFoundation OPC UA LocalDiscoveryServer (LDS)
CISA warns CVE-2026-77477 (CVSS 4.6) lets local attackers hijack a privileged console during OPC UA LDS installation below version 1.04.420.