Topic
Cybersecurity field focused on protecting industrial control systems, SCADA networks, and operational technology from cyberattacks.
Hitachi Energy will not patch six flaws Dragos reported in end-of-life RTU500 CMU firmware, and says releases up to 11.x are likely affected. Energy operators still on those versions have to upgrade to supported firmware or isolate the units.
Reality
Braham, Minnesota has identified $22.98 million in water infrastructure needs on a $2.2 million annual city budget. The $10.22 million state bond it received cannot pay for security software, network monitoring or staff.
Reality
Between March and April 2025 intruders searched an industrial automation firm for "customers" and "SCADA", then bundled about 800 files. FBI and CISA now want least privilege applied to integrator access.
Reality
CVE-2026-31431 gives Siemens HMI panel owners one target build, 21.0.2.1, across dozens of order numbers, while operators of the SIMATIC AX Runtime Core Linux packages are left with countermeasures until a fix ships.
Reality
CVE-2026-18963 sits in the Keycloak reset-credentials flow that Siemens embeds in Industrial Edge Management. Siemens closed its own Cloud service on September 2, and owners of self-hosted IEM Pro and IEM Virtual patch or block the path themselves.
Reality
Joint advisory AA26-231A describes threat actors feeding internet-scan results into AI tools that emit working python-snap7 clients against Siemens S7 controllers. Siemens says the weakness is configuration, not a new vulnerability.
Reality
CVE-2026-13584 affects every version Mitsubishi Electric shipped of at least 45 parts, including MELSEC MX controllers and remote I/O blocks. The precondition CISA names is access to the same network segment.
Reality
CISA's ICSA-26-260-04 gives fixed firmware for four of the six affected Schneider parts and lists the BMXNGD0100 and BMXNOC0401 as affected in every version, with a remediation plan for those still being written.
Reality
CVE-2026-31431 escalates a locally authenticated user or a compromised container workload to root through the Linux kernel's algif_aead interface. ABB has fixed it in Edgenius 3.2.4.1 for the bE100 gateway.
Reality
CISA's advisory covers eleven FACTS Control Platform versions across six product families, and it applies only where the GWS component is present. A utility's first job is establishing which installations have it.
Reality
Five US agencies told PLC owners that scanners are finding exposed Siemens S7 controllers. ZoomEye puts that surface at 173 assets by product fingerprint, or 161,764 by open port.
Reality
Abhinav Agarwal's report of insufficiently protected credentials covers every version of seven SCADAPack families. Schneider's answer is role-based access control on the 47x line plus network segmentation and the RTU firewall service.
Reality
RUGERO Tesla built a PROFINET testbed out of Linux network namespaces and the p-net stack, and the write-up shows where a crafted frame sitting in a capture stops being evidence about the device that received it.
Reality
ST Engineering's iQ200 answers /api/identity for anyone with network access, handing back the serial number, Device ID and Terminal Private Key identifier that CISA says the platform authenticates with. The fix is 4.5.3.0.
Reality
CVE-2026-75925 lets anything that reaches the client's local configuration interface plant directives in a file a privileged subprocess later runs. Since 5 August 2026 IXON's cloud has refused clients below 1.4.7, which is what actually breaks the chain.
Reality
CISA's advisory lists eight Pyramid Solutions development kits below v5.6.1 rather than any finished device, so the fix reaches plant floors only after each device maker rebuilds and ships firmware.
Reality
CVE-2026-9633 and CVE-2026-9634 let a standard user on a Windows host plant a DLL where the tool will look for it, then collect Administrator or SYSTEM the next time an admin runs it. Version 10.01.00 fixes both.
Reality
Rockwell reported CVE-2026-9637 to CISA itself. A length validation bug in CIP handling drops ControlLogix, CompactLogix and GuardLogix controllers into a major nonrecoverable fault, and clearing it needs a person at the cabinet.
Reality
CISA's advisory covers Series B 5.202 and Series C 7.101 across five critical infrastructure sectors, but the published text carries no CVSS vectors and no corrected version numbers for an asset owner to upgrade to.
Reality
An updated CISA advisory puts CVE-2025-2399 on 18 Mitsubishi Electric CNC model designations. Seventeen of them have a fixed firmware build to chase. The C80 has none, at any version.
Reality