A third of industrial organizations reported an OT incident, SANS finds
Among nearly 700 respondents, incidents rose from 22% to 34%, and reported IP theft jumped from 6% to 31%.
Stories per day · 30 days
9 RSS
Relatedics15refrigeration12danfoss7critical-infrastructure6france6cisa5supermarkets4iot3ransomware3supermarket3cert-fr2copeland2europe2industrial-control2industrial-defender2nerc-cip2node-red2php2
59 stories, newest first · one card per story
Stories tagged #ot
US agencies urge hardening of industrial refrigeration after EU attacks
Attackers remotely changed cold-chain temperatures at French blood banks and European supermarkets, spoiling goods and triggering fires.
OT systems remain connected to networks
OT and ICS systems exposed through IT/OT convergence, DMZ use and remote connectivity since the early 2000s.
CISA warns of two CVSS 9.0 flaws in PowerSYSTEM Center
Authenticated adjacent-network bugs allow admin-resource access or SQL commands; CISA says they are not remotely exploitable.
1
Store fridges and freezers disrupted in six European countries
Supermarket refrigeration systems disrupted overnight in six European countries on November 2-3, with Russian-aligned groups suspected but attribution open.
1
Attackers exploit Node-RED CVE-2026-58115 to deploy Linux bot and backdoors
VulnCheck detects in-the-wild exploitation of CVE-2026-58115 deploying a Linux bot and webshells.
MLEP in KICS 5.0 refines OT device categories with spiking neural networks
MLEP processes 15-second network fragments using neurosemantic networks to detect anomalies when asset inventories are incomplete.
Max-severity Node-RED bug exploited to deploy Linux malware in OT
VulnCheck documented exploitation of CVE-2026-58115 allowing unauthenticated flows to execute commands on Siemens devices.
European supermarket freezers disrupted in suspected cyber-attacks
Chains in at least seven countries reported overnight refrigeration failures, after a French incident last month raised temperatures to 50C.
1
CISA confirms active exploitation of PHP2Shell flaws CVE-2026-109618 and CVE-2026-109619
Official fixes are PHP 8.5.12, 8.4.27, 8.3.36 and 8.2.35, while many appliance and EOL runtimes have no direct patch.
Industrial vendors assess PHP2Shell; several OT products affected
Unauthenticated PHP RCE flaws drew millions of attempts, with the first confirmed attacks aimed at honeypots.
Attackers heat French supermarket refrigeration, spoiling food stocks
Hundreds of stores face losses put at tens to hundreds of millions of euros after defrost cycles were extended.
Gravwell CEO Corey Thuen on hiring for an adversarial “evil bit”
The SecurityWeek profile covers his path from youthful curiosity to INL ICS work and founding Southfork Security and Gravwell.
RUGGEDCOM CROSSBOW before 6.0 allows SQL injection and credential theft
Authenticated attackers can run SQL, steal admin credentials, or change configuration; Siemens says to update to V6.0 or later.
Industrial Defender adds network monitoring and Risk Signal for CIP-015
The OT platform now baselines device traffic, ties anomalies to asset data, and ranks patches for work systems.
1
AppGate adds live session controls to its ZTNA for OT
Supervisors can record, watch, and end remote OT sessions and inject vaulted credentials so vendors never see them.
Forescout says healthcare OT lags on post-quantum cryptography
Of more than 2.5 million devices studied, few IoMT and OT systems run PQC-capable SSH, and many exposed medical systems lack TLS 1.3.
1
Cybercrims go beyond stealing data to attack physical building systems
Cybercriminals are disrupting building systems, from French grocery refrigeration to a Canadian hospital, to extort victims with physical harm.
4
Researchers warned attackers could 'defrost the food' months before French supermarkets got hit
Attackers compromised exposed Danfoss and Copeland refrigeration controllers, spoiling food at nearly 700 French supermarkets.
7 Key Manufacturing Cybersecurity Trends for 2027 | Huntress
Huntress says manufacturing rose from 9% to 17% of observed attacks as ransomware shifts toward OT uptime.
5
AI Agents Navigate Unfamiliar OT Systems and Move Equipment in Minutes, Booz Allen Finds
Booz Allen lab tests show frontier AI agents can traverse unfamiliar OT networks and move equipment within minutes.
Critical infrastructure orgs face heightened cyber risk from nation-state groups, AI threats
Tenable warns critical infrastructure faces nation-state and AI-driven attacks and recaps CISA hygiene guidance.
2
French Supermarket Cyberattack: Exposed OT Behind France’s Food Supply
SOCRadar reports a French supermarket cyberattack and exposed Danfoss OT behind the food supply.
1
Inductive Automation Ignition Software
CISA warns Ignition CVE-2026-92817 lets authenticated users gain Designer access and run code.