Topic
Security of the control systems and industrial equipment that run physical processes, distinct from corporate IT networks that often provide an entry path.
France's CERT-FR said attack campaigns against supermarket refrigeration controls are probably still ongoing after 700 of 10,000 sites were hit. Food worth millions of euros spoiled across several major retail chains.
Reality
Hundreds of French supermarkets were hit on October 12 by an attack on connected refrigeration, with cold-storage temperatures reportedly reaching 50°C. The account comes from a developer post on dev.to, and the part engineers can carry over is its threat-model checklist.
Reality
Anthropic announced a Critical Infrastructure Defense Program that pairs Claude with outside security firms, CrowdStrike among them. Alongside it, Anthropic is running a free, opt-in scanning service for open-source maintainers directly, CyberScoop reported.
Perspective Coverage
9 publishersReality
A fast SOC cut off the intrusion in minutes. The red team still reached the domain controller and the control network, because every control that failed afterwards was a permission somebody granted and nobody had reviewed.
Perspective Coverage
3 publishersReality
Researchers in Nature Food urge a national cybersecurity consortium of land-grant universities for US agriculture, after workshops with over 150 stakeholders. The case rests on testimony, and the farm testbeds they propose would be where that exposure gets measured.
Reality
Anthropic expects more than 90% of the unreviewed vulnerability reports its new OSS Scanner sends to open source maintainers to be real. Opt-in projects get findings faster and take on the work of catching the errors, such as wrong severity ratings.
Perspective Coverage
6 publishersReality
OT Cybersecurity Coalition urges CISA to issue a binding directive requiring each federal agency to name an OT security owner and meet minimum practices. The push follows GAO's finding that most civilian agencies have not enacted OMB's 2023 IoT and OT requirements.
Perspective Coverage
3 publishersReality
South Africa's ATNS, which runs air traffic control for about 10% of the world's airspace, found early-stage ransomware tooling in a weather OT network. The state operator says its team stopped the attack yet is seeking outside forensics to learn how the attackers got in.
Perspective Coverage
3 publishersReality
WaterISAC is adding Cyware's threat intelligence platform to speed alerts to US water utilities, including 20,000 small systems it serves with a rural partner. Its director says utilities have little incentive to replace old controllers that still work, so the answer is faster warnings.
Reality
Rome's Exein says its valuation is up thirtyfold in two years and first-half recurring revenue up fourfold, and its first foundation models are due in the first quarter of 2027, two quarters after the round closed.
Perspective Coverage
4 publishersReality
Federal agencies are watching nearly 20 ships after hackers reportedly took temporary control of safety valves on the tanker Vivit Africa LNG. The FBI and Coast Guard have boarded suspect ships in the Gulf, though the valve account still rests on trade-press reports.
Reality
Coca-Cola's disclosures put production-related systems in scope and suspended U.S. output at Fairlife without identifying which system stopped the line. A resilience drill aimed at the machinery would have missed all of them.
Reality
The DOJ and FBI pulled down two platforms a commentary attributes to Chinese state-sponsored operators. The same piece argues the routers and gateways recruited into those relays are still deployed and still weakly governed.
Reality
SpyCloud measured stolen-credential exposure across 10,000 EPA-registered water and wastewater organizations and found it at nearly one in five, with the sharpest single case sitting on a supplier's machine.
Reality
The Vivit Africa LNG stopped short of the Adriatic LNG terminal after its crew lost access to some onboard control systems and reported a suspected cyberattack. The investigation is open and the gas is still aboard.
Reality
Australia's replacement Essentials series covers the cloud, identity and OT that eight on-premises controls never touched. Both frameworks stay live until full retirement around mid-2028, and ASD calls those dates targets.
Reality
CISA's advisory covers four CVEs in AVEVA Pipeline Integrity Monitor builds up to 2025 SP1 P1. The fix reaches only the project files you can migrate, and the migration to SP1 P2 cannot be undone.
Reality
The bureau and the EPA describe intruders changing IP addresses and switching passwords on internet-facing controllers, and the remedy they list is network design and credentials rather than firmware anyone can ship.
Reality
The advisory puts Volt Typhoon inside communications, energy, transport and water IT environments across the US and Guam, and says the behaviour does not look like espionage. The planning problem is outage, not data loss.
Reality