Phoenix Contact PLCnext Engineer prior to 2026.6 affected by signature verification bypass and path traversal
PLCnext Engineer before 2026.6 has GSDX SignatureValue verification, signed plug-in validation bypass and path traversal issues.
Stories per day · 30 days
2 RSS
Relatedics3siemens3simatic3linux1openssh1ot-security1phoenix-contact1plcn1plcnext1s7-15001supply-chain1warehouse1web-server1wms1
26 stories, newest first · one card per story
Stories tagged #plc
Siemens SIMATIC S7-1500 TM MFP Linux subsystem has unfixed flaws
All GNU/Linux subsystem versions on the TM MFP V1.1.1 are affected, and Siemens says no fix is available yet.
S7-1500 CPU 1518 MFP Linux subsystem flaws lack a fix
Firmware V3.1.7 and later on five 1518 and SIPLUS MFP CPUs is affected, including OpenSSH CVE-2021-41617.
SIMATIC S7-1500 web server flaws can hijack authorized browser sessions
All listed firmware versions are affected, Siemens is still preparing fixes, and eight CVEs are named.
Kaspersky maps cyber risk along a warehouse order path
The paper follows eight fulfillment stages and argues a bad record or compromised WMS can stop shipping.
OT Attacks on US Critical Infrastructure Could Disrupt Military Operations and Physical Processes
State-linked actors are targeting US critical-infrastructure OT, with confirmed water-system disruption and Volt Typhoon pre-positioning.
11
[Control systems] CODESYS security advisory (AV26-983)
Canada's Cyber Centre warns of vulnerabilities in multiple CODESYS control products and urges updates.
WaterISAC reckons with range of threats after summer of cyberattacks
WaterISAC cites internet-exposed OT and aging PLCs as top water-sector weaknesses, partnering with Cyware for faster threat sharing after Iran-attributed summer attacks.
2
OpenPLC Runtime v3
OpenPLC Runtime v3 XSS can hijack operator sessions and control PLC processes.
1
Foreign Hackers Target Two Colorado Water Utilities
Foreign hackers briefly altered OT settings at two small Colorado water utilities without disrupting service.
3
Schneider Electric Modicon M340 Controller and Communication Modules
CISA warns CVE-2025-6625 lets unauthenticated attackers crash Schneider Electric Modicon M340 controllers and communication modules via a crafted FTP command.
3
U.S. Offers $10 Million Reward for Iranian IRGC Cyber Chief Linked to Critical Infrastructure Attacks
The U.S. State Department offered up to $10 million for information on Amir Yaryab, an IRGC cyber chief linked to critical infrastructure attacks.
Florida water agency latest to confirm cyber incident as feds warn of nation
A ransomware gang hit Florida's St. Johns River Water Management District as CISA warned of IRGC-linked CyberAv3ngers attacks on exposed Unitronics water-sector PLCs.
1
$536 and 8 Hours: AI Learns to Attack a Different PLC
Forescout used Claude to port a WAGO PLC exploit for $536 in 8 hours, and an AI-generated payload later permanently bricked the test device.
Researchers Use Claude to Port Pre-Auth RCE Exploit From One PLC Model to Another
Forescout used Anthropic's Claude to port a working pre-auth RCE exploit for CVE-2021-31886 between WAGO PLCs, executing ARM shellcode on live hardware.
Rockwell Automation ControlLogix, CompactLogix, CompactLogix 5480, GuardLogix, Compact GuardLogix
CISA advisory maps CVE-2021-42260 to Rockwell ControlLogix, CompactLogix, and GuardLogix controllers with firmware below per-series patch levels.
Rockwell Automation Logix Platform
CISA warns Rockwell Automation Logix controllers (ControlLogix, CompactLogix, GuardLogix) up to V36.012 are affected by CVE-2026-9637 (CVSS 7.5).
⚡ Weekly Recap: AI-Powered PLC Attacks, GitLab Attacks, Stripe Key Leaks and More
US agencies warn of AI-assisted attacks on exposed Siemens PLCs; the week also saw GitLab CVE-2026-19478 exploited and trojanized npm packages found.
CISA Warns Water Utilities: Find Your Exposed PLCs Before Attackers Do
CISA urged water utilities to secure internet-exposed PLCs after July 2026 attacks compromised over 100 US water and wastewater systems, suspected Iran-linked.
2
US sanctions Iranian cyber actors as UK discloses power plant attack
US Treasury sanctioned six Iranian MOIS-linked hackers for breaching US agency and UN email accounts as the UK disclosed a four-day power plant shutdown.
1
AI-Generated Exploit Scripts Target Siemens S7 PLCs in U.S. Critical Infrastructure
NSA, CISA, FBI, DOE and EPA warn that actors use AI-generated Python scripts to exploit internet-exposed Siemens S7 PLCs at U.S. critical infrastructure.
2
Frequently asked questions about the active threat to Siemens S7 Series PLCs
US government agencies warn that unattributed actors using AI-generated exploit scripts are targeting internet-exposed Siemens S7 PLCs in critical infrastructure.
ICS Operators Warned of AI-Driven Attacks on Siemens PLCs
A US government advisory warns attackers are using AI-generated exploitation scripts against internet-exposed Siemens S7 Series PLCs.
1
US agencies warn of AI-powered attacks on Siemens industrial controllers
NSA, CISA, FBI, DOE, and EPA warn threat actors use AI-assisted scripts and snap7 libraries to access internet-exposed Siemens S7 PLCs in critical infrastructure sectors.
1