EPICS Base 7.0.11 fixes four severe bugs, one rated 9.8
Causal Security’s Cipher agent reported the flaws in under four hours; CISA warns of crashes, memory disclosure or possible code execution.
Stories per day · 30 days
1 RSS
Relatedics3critical-infrastructure2agentic-ai1booz-allen1burger-king1chrome1cisa1claude1cve-2026-1057401deception1egypt1energy1epics1frontier-ai1ics-sniper1langflow1language-models1ot-security1
28 stories, newest first · one card per story
Stories tagged #scada
SIMATIC WinCC flaw lets database users run host commands
WinCC V7.5 has no fix; V8.0 and V8.1 are fixed in Update 11 and Update 7.
1
Pryx and Devman claim a role in deadly Cairo telecom fire
Four workers died and 27 were injured at Ramses Central on July 7, 2025; a cyber cause is still only a claim.
3
Decoy language models often cost attackers more energy than defenders
In 330 sessions, the attacker-to-defender energy ratio stayed above one in every configuration once diagnostic calls were counted.
In Other News: ICS-Sniper Attack, Hacking XWorm Malware Operators, $250k Chrome Exploit
Roundup covers ICS-Sniper, an XWorm panel RCE, an 11-million-record Burger King Japan breach, and a $250,000 Chrome chain.
8
Frontier AI cleared every OT attack goal Booz Allen set in its lab
Booz Allen says frontier AI models completed every OT attack goal in its isolated factory lab, including moving a robotic arm.
6
AI systems are fully capable of carrying out nightmare attacks against infrastructure and nobody's ready
Booz Allen found frontier AI agents can execute industrial OT attack chains in minutes.
4
[0day-rubbish] Circutor LineEds 24.11.14-r0 unauthenticated pwrstudio events.xml shellExecute command injection (9.8)
Circutor LineEds 24.11.14-r0 has unauthenticated command injection in pwrstudio via events.xml shellExecute.
[remote] Ecava_ntegraXor IGX_16.0.701.10 - RCE
Exploit-DB published a remote code execution exploit for Ecava IntegraXor IGX 16.0.701.10.
Hitachi security advisory (AV26-975)
Canada's Cyber Centre warns that Hitachi Energy RTU500 CMU firmware has vulnerabilities needing updates.
Red Heron Exploits Critical Gitea Flaw to Steal Repositories and Deploy Linux Rootkit
Red Heron exploited Gitea CVE-2026-60004 to steal repositories and deploy the JITTERLY backdoor and SIXZUT rootkit.
OT Security Guidance: NIST Drafts Updated Guide, CISA/FBI Advise on ICS Integrators
NIST drafted an updated OT security guide while CISA and the FBI warned about risks from third-party ICS integrators.
1
Considerations for Critical Infrastructure Operators Working With Third-Party ICS Integrators
FBI and CISA published guidance urging critical infrastructure operators to limit third-party ICS integrator access, citing a 2025 breach of a U.S. automation firm.
[0day-rubbish] Ecava IntegraXor IGX 16.0.701.10 Unauthenticated /FileUpload write chained to the dxmanager cmd.exe sink (9.8)
Unauthenticated file upload in Ecava IntegraXor IGX 16.0.701.10 chains to cmd.exe for Administrator code execution.
Foreign actors breach Colorado water systems
Foreign hackers breached two small Colorado water utilities in August, changing equipment settings and disabling remote access and alarms on drinking water controls.
1
mySCADA myPRO Manager
CISA advisory reveals unauthenticated privileged API access and arbitrary SMS sending in mySCADA myPRO Manager <=2.1, CVSS 9.8.
ICS Patch Tuesday: Schneider Electric, Siemens Fix Critical Flaws
September ICS Patch Tuesday brings critical fixes from Schneider Electric, Siemens, and Aveva, including CVSS 9.2 authentication flaw CVE-2026-3869 in Modicon M580 controllers.
US offering $10 million for info on Iranian hackers behind IOControl malware
US offers up to $10 million for information on CyberAv3ngers' 'Mr. Soul,' whose IOControl malware targets US and worldwide ICS/SCADA devices.
2
Inductive Automation Ignition
CISA reports a permissions flaw (CVE-2026-77393, CVSS 8.8) in Inductive Automation Ignition <=8.1.53 letting authenticated users create projects; fixed in 8.1.54.
Rockwell Automation Redundancy Module Configuration Tool
CISA warns CVE-2026-9633 in Rockwell Automation Redundancy Module Configuration Tool lets attackers execute processes with administrator privileges; fix in 10.01.00.
CISA Warns Water Utilities: Find Your Exposed PLCs Before Attackers Do
CISA urged water utilities to secure internet-exposed PLCs after July 2026 attacks compromised over 100 US water and wastewater systems, suspected Iran-linked.
2
How an Emerging Industrial Protocol Family Could Put OT at Risk
New research shows unprotected Time-Sensitive Networking industrial protocols could let attackers disrupt or manipulate physical processes in OT environments.
Frequently asked questions about the active threat to Siemens S7 Series PLCs
US government agencies warn that unattributed actors using AI-generated exploit scripts are targeting internet-exposed Siemens S7 PLCs in critical infrastructure.
ICS Operators Warned of AI-Driven Attacks on Siemens PLCs
A US government advisory warns attackers are using AI-generated exploitation scripts against internet-exposed Siemens S7 Series PLCs.
1