Cybersecurity articles tagged #Critical Infrastructure on RuntimeRebel.https://runtimerebel.comhttps://runtimerebel.com/blog/uk-cyber-security-and-resilience-bill-targets-high-risk-vendorshttps://runtimerebel.com/blog/uk-cyber-security-and-resilience-bill-targets-high-risk-vendorsThe UK amends its Cyber Security and Resilience Bill to grant ministers powers to block high-risk technology suppliers from critical infrastructure.Wed, 02 Sep 2026 19:07:21 GMTSupply Chain AttackCritical InfrastructureComplianceCyber Security and Resilience Billhttps://runtimerebel.com/blog/u-s-sanctions-iran-linked-hackers-targeting-critical-infrastructurehttps://runtimerebel.com/blog/u-s-sanctions-iran-linked-hackers-targeting-critical-infrastructureU.S. Treasury sanctions Iran-linked cyber actors, including Mabna Institute members, for critical infrastructure breaches and cyber theft.Wed, 26 Aug 2026 00:41:56 GMTIranSanctionsCritical InfrastructureMOISCyber Espionagehttps://runtimerebel.com/blog/bolstering-municipal-cybersecurity-a-call-for-professional-supporthttps://runtimerebel.com/blog/bolstering-municipal-cybersecurity-a-call-for-professional-supportLocal government agencies face severe cybersecurity resource gaps. This analysis urges cyber professionals to volunteer expertise to defend critical public services.Fri, 21 Aug 2026 00:45:26 GMTLocal GovernmentCybersecurity VolunteeringCritical InfrastructureCyber RiskPublic Sectorhttps://runtimerebel.com/blog/cisa-warns-medusa-ransomware-breaches-500-critical-infra-orgshttps://runtimerebel.com/blog/cisa-warns-medusa-ransomware-breaches-500-critical-infra-orgsCISA, FBI, and HHS alert on Medusa ransomware, which has impacted over 500 critical infrastructure organizations since June 2021, urging immediate network hardening.Wed, 19 Aug 2026 08:26:15 GMTMedusa RansomwareRansomware as a ServiceCISAFBICritical Infrastructurehttps://runtimerebel.com/blog/ransomware-attack-hits-colombian-justice-ministryhttps://runtimerebel.com/blog/ransomware-attack-hits-colombian-justice-ministryA ransomware attack targets the Colombian Justice Ministry days before a presidential transition, highlighting regional risks.Wed, 12 Aug 2026 16:49:50 GMTRansomwareCritical InfrastructureGovernmentColombiahttps://runtimerebel.com/blog/gunra-ransomware-exploits-fortinet-flaws-and-bypasses-mfahttps://runtimerebel.com/blog/gunra-ransomware-exploits-fortinet-flaws-and-bypasses-mfaGunra ransomware targets critical infrastructure using leaked Conti code, old Fortinet vulnerabilities, and MFA bypass techniques.Wed, 12 Aug 2026 09:05:47 GMTRansomwareFortinetCredential TheftCritical Infrastructurehttps://runtimerebel.com/blog/multistate-water-system-attacks-target-exposed-plcshttps://runtimerebel.com/blog/multistate-water-system-attacks-target-exposed-plcsAttacks targeting poorly secured, internet-exposed PLCs in water systems are widening across multiple U.S. states, with Iran suspected.Tue, 11 Aug 2026 08:46:26 GMTICSOT SecurityCritical InfrastructureIranWater Utilitieshttps://runtimerebel.com/blog/hackers-breach-polish-chp-plant-via-private-apn-and-teltonika-routerhttps://runtimerebel.com/blog/hackers-breach-polish-chp-plant-via-private-apn-and-teltonika-routerAttackers breached a Polish combined heat and power plant via a private APN, shutting down a steam turbine and water treatment system.Tue, 11 Aug 2026 08:44:42 GMTCritical InfrastructureRansomwareFortinetTeltonikaSiemenshttps://runtimerebel.com/blog/private-apn-misconfiguration-led-to-polish-energy-plant-ot-compromisehttps://runtimerebel.com/blog/private-apn-misconfiguration-led-to-polish-energy-plant-ot-compromiseHackers compromised a Polish energy plant's OT network by exploiting a private APN misconfiguration, shutting down a steam turbine and water treatment system.Tue, 11 Aug 2026 00:59:03 GMTOT SecurityCritical InfrastructureFortiGatePrivate APNWAGO PLChttps://runtimerebel.com/blog/nc-ports-cyberattack-disrupts-operations-at-key-facilitieshttps://runtimerebel.com/blog/nc-ports-cyberattack-disrupts-operations-at-key-facilitiesNorth Carolina Ports confirmed a cyberattack disrupting IT systems and operations across its facilities. Recovery efforts are underway, with expected delays.Sun, 09 Aug 2026 08:31:30 GMTNorth Carolina PortsCyberattackOperational DisruptionCritical InfrastructureSupply Chain Securityhttps://runtimerebel.com/blog/iran-backed-cyberattacks-target-minnesota-water-utilitieshttps://runtimerebel.com/blog/iran-backed-cyberattacks-target-minnesota-water-utilitiesIran-backed threat actors targeted over 30 Minnesota water utilities, highlighting critical infrastructure vulnerabilities. Learn about TTPs and mitigation strategies.Fri, 31 Jul 2026 02:56:58 GMTIranWater UtilitiesCritical InfrastructureICS OT SecurityMinnesotaNation Statehttps://runtimerebel.com/blog/coordinated-ot-attack-targets-30-minnesota-water-utilitieshttps://runtimerebel.com/blog/coordinated-ot-attack-targets-30-minnesota-water-utilitiesOver 30 Minnesota water utilities were targeted in a coordinated cyberattack on operational technology, prompting a statewide incident response and investigation.Wed, 29 Jul 2026 17:17:22 GMTOT SecurityCritical InfrastructureMinnesotaICSWater Utilityhttps://runtimerebel.com/blog/thousands-of-data-center-controllers-exposed-prevent-server-takeoverhttps://runtimerebel.com/blog/thousands-of-data-center-controllers-exposed-prevent-server-takeoverThousands of internet-exposed data center remote management processors are vulnerable to offline password cracking, enabling server takeover and critical infrastructure…Wed, 29 Jul 2026 02:46:26 GMTData CenterRemote ManagementPassword CrackingServer TakeoverVulnerabilityCritical Infrastructurehttps://runtimerebel.com/blog/cisa-acsc-advise-isolating-ot-systems-during-cyberattackshttps://runtimerebel.com/blog/cisa-acsc-advise-isolating-ot-systems-during-cyberattacksCISA and ACSC urge critical infrastructure to prepare isolating operational technology systems during cyberattacks to maintain essential services and limit impact.Tue, 28 Jul 2026 21:10:24 GMTCISAACSCCritical InfrastructureOT SecurityCyberattack PreparednessIndustrial Control SystemsIncident Responsehttps://runtimerebel.com/blog/ot-security-startup-frenos-secures-1-52-million-for-ai-r-dhttps://runtimerebel.com/blog/ot-security-startup-frenos-secures-1-52-million-for-ai-r-dFrenos raises $1.52 million in seed funding to expand AI research and development focused on securing industrial control systems and operational technology.Tue, 28 Jul 2026 14:10:52 GMTFrenosOT SecurityICS SecurityAI SecurityCritical Infrastructurehttps://runtimerebel.com/blog/securing-critical-infrastructure-closing-identity-gapshttps://runtimerebel.com/blog/securing-critical-infrastructure-closing-identity-gapsAttacks on critical infrastructure leverage identity gaps. This analysis details common vulnerabilities and how Zero Trust principles can enhance sector security.Tue, 21 Jul 2026 17:24:12 GMTCritical InfrastructureIdentity SecurityZero TrustCredential TheftMFA BypassSupply Chain AttackPhishinghttps://runtimerebel.com/blog/ot-security-legacy-system-vulnerabilities-in-critical-infrastructurehttps://runtimerebel.com/blog/ot-security-legacy-system-vulnerabilities-in-critical-infrastructureAddressing the complex challenges of securing legacy OT systems in critical infrastructure, balancing vulnerability disclosure with operational continuity and safety.Thu, 16 Jul 2026 17:24:03 GMTOT SecurityLegacy SystemsCritical InfrastructureVulnerability ManagementICS Securityhttps://runtimerebel.com/blog/uk-and-eu-sanction-russian-apts-over-critical-infrastructure-attackshttps://runtimerebel.com/blog/uk-and-eu-sanction-russian-apts-over-critical-infrastructure-attacksRecent UK and EU sanctions target Russian intelligence services following persistent cyber operations against government entities and critical infrastructure.Tue, 14 Jul 2026 02:36:59 GMTAPT28APT29Russian CyberattacksCritical InfrastructureSanctionshttps://runtimerebel.com/blog/eu-sanctions-russian-intel-officers-for-apt28-cyber-operationshttps://runtimerebel.com/blog/eu-sanctions-russian-intel-officers-for-apt28-cyber-operationsThe EU imposes sanctions on Russian GRU officers linked to APT28 for long-term cyber espionage and sabotage targeting government and infrastructure.Mon, 13 Jul 2026 11:22:06 GMTAPT28GRUEU SanctionsCyber EspionageCritical Infrastructurehttps://runtimerebel.com/blog/russian-apts-target-critical-infrastructure-via-edge-device-exploitshttps://runtimerebel.com/blog/russian-apts-target-critical-infrastructure-via-edge-device-exploitsUS and allies warn of Russian state-sponsored actors targeting edge devices to infiltrate critical infrastructure. Learn how to mitigate these threats.Mon, 13 Jul 2026 11:21:02 GMTAPT28SandwormCiscoCritical InfrastructureEdge Securityhttps://runtimerebel.com/blog/busysnake-infostealer-targets-critical-infrastructure-armored-likho-s-ttpshttps://runtimerebel.com/blog/busysnake-infostealer-targets-critical-infrastructure-armored-likho-s-ttpsBusySnake infostealer, deployed by Armored Likho, infiltrates critical infrastructure in Russia, Brazil, and Kazakhstan. Understand their TTPs and mitigation strategies.Tue, 07 Jul 2026 03:34:06 GMTBusySnakeInfostealerArmored LikhoCritical InfrastructureGovernmentElectrical PowerRussiaBrazilKazakhstanhttps://runtimerebel.com/blog/france-mandates-quantum-safe-encryption-by-2027https://runtimerebel.com/blog/france-mandates-quantum-safe-encryption-by-2027France's ANSSI will stop certifying non-quantum-safe encryption products from 2027, compelling government and critical operators to adopt post-quantum solutions.Mon, 06 Jul 2026 21:41:43 GMTANSSIQuantum EncryptionPost Quantum CryptographyFranceCritical InfrastructureGovernment Certificationhttps://runtimerebel.com/blog/china-linked-apt-targets-southeast-asia-critical-systems-with-new-backdoorhttps://runtimerebel.com/blog/china-linked-apt-targets-southeast-asia-critical-systems-with-new-backdoorA China-linked APT group has compromised ten organizations, including state-owned entities in Southeast Asia, deploying a new backdoor.Wed, 01 Jul 2026 05:41:17 GMTChina Linked APTSoutheast AsiaCritical InfrastructureBackdoorState SponsoredEspionageCyber Warfarehttps://runtimerebel.com/blog/cve-2024-2821-critical-rce-in-daktronics-controllers-patch-nowhttps://runtimerebel.com/blog/cve-2024-2821-critical-rce-in-daktronics-controllers-patch-nowCritical vulnerabilities (CVE-2024-2821, CVE-2024-2822, CVE-2024-2823) in Daktronics Venus 1500 and Vanguard controllers allow remote hacking of highway signs and…Tue, 30 Jun 2026 05:28:50 GMTDaktronicsCVE-2024-2821CVE-2024-2822CVE-2024-2823ICSSCADAIoTImproper AuthenticationRemote HackingCritical Infrastructurehttps://runtimerebel.com/blog/cal-water-incident-no-ot-impact-confirmed-after-handala-claimshttps://runtimerebel.com/blog/cal-water-incident-no-ot-impact-confirmed-after-handala-claimsAn investigation revealed no operational technology compromise at Cal Water despite claims by Iranian hacker group Handala to disrupt water supply.Thu, 25 Jun 2026 13:05:10 GMTCal WaterHandalaCritical InfrastructureOT SecurityCyberattackWater UtilityDisinformationhttps://runtimerebel.com/blog/the-gentlemen-ransomware-halts-mackay-sugar-operationshttps://runtimerebel.com/blog/the-gentlemen-ransomware-halts-mackay-sugar-operationsMackay Sugar, Australia's second-largest sugar producer, suffered a ransomware attack by 'The Gentlemen' group, halting mill operations and impacting critical…Mon, 15 Jun 2026 17:49:18 GMTRansomwareThe GentlemenMackay SugarCritical InfrastructureAustraliaOT Securityhttps://runtimerebel.com/blog/ics-exposure-persists-as-ot-attack-surface-expandshttps://runtimerebel.com/blog/ics-exposure-persists-as-ot-attack-surface-expandsAnalysis of Industrial Control System (ICS) exposure, its persistence amidst expanding attack surfaces, and vital steps for operational technology security.Sat, 13 Jun 2026 01:04:32 GMTICSOT SecurityCritical InfrastructureAttack Surfacehttps://runtimerebel.com/blog/iranian-handala-group-claims-cal-water-hack-exposing-piihttps://runtimerebel.com/blog/iranian-handala-group-claims-cal-water-hack-exposing-piiIranian cyber group Handala claims responsibility for breaching Cal Water, exposing 5GB of customer PII and RTKBase platform credentials.Fri, 12 Jun 2026 13:21:19 GMTHandalaCal WaterData BreachCritical InfrastructureRTKBaseCyber EspionagePIIhttps://runtimerebel.com/blog/2026-fifa-world-cup-mitigating-cyber-physical-threats-in-host-citieshttps://runtimerebel.com/blog/2026-fifa-world-cup-mitigating-cyber-physical-threats-in-host-citiesTechnical analysis of cyber-physical risks for the 2026 FIFA World Cup, focusing on critical infrastructure protection and incident response strategies.Thu, 11 Jun 2026 09:48:34 GMT2026 Fifa World CupCritical InfrastructureICS OT SecurityMajor Event Securityhttps://runtimerebel.com/blog/exposed-fuel-tank-gauges-us-gas-stations-face-active-cyberattackshttps://runtimerebel.com/blog/exposed-fuel-tank-gauges-us-gas-stations-face-active-cyberattacksThreat actors are actively exploiting Internet-exposed fuel tank gauges at US gas stations, risking significant disruption to fuel supply and operations.Fri, 05 Jun 2026 20:42:04 GMTFuel Tank GaugesGas StationsCritical InfrastructureOT SecurityExposed DevicesUSICS Securityhttps://runtimerebel.com/blog/exposed-us-gas-station-atg-systems-threaten-critical-infrastructurehttps://runtimerebel.com/blog/exposed-us-gas-station-atg-systems-threaten-critical-infrastructureOver 900 US-based Automatic Tank Gauge (ATG) systems are exposed online, risking fuel theft, physical damage, and environmental incidents via remote access.Fri, 05 Jun 2026 16:55:14 GMTATGCritical InfrastructureIndustrial Control SystemsOT Securityhttps://runtimerebel.com/blog/china-linked-apts-target-latin-american-critical-infrastructurehttps://runtimerebel.com/blog/china-linked-apts-target-latin-american-critical-infrastructureChina-linked APTs are conducting widespread cyber espionage against maritime shipping, oil production, and government sectors in Latin America, impacting over a dozen…Wed, 03 Jun 2026 21:11:36 GMTChina Linked APTCyber EspionageLatin AmericaCritical InfrastructureMaritime ShippingOil Productionhttps://runtimerebel.com/blog/cisa-warns-critical-infrastructure-atg-systems-under-attackhttps://runtimerebel.com/blog/cisa-warns-critical-infrastructure-atg-systems-under-attackCISA, FBI, and NSA warn of active cyberattacks targeting internet-exposed Automatic Tank Gauge (ATG) systems in critical infrastructure. Learn to defend.Wed, 03 Jun 2026 21:11:09 GMTCISAFBINSAAutomatic Tank GaugeATGCritical InfrastructureOT SecurityICS Securityhttps://runtimerebel.com/blog/hardening-automatic-tank-gauge-systems-against-cyber-threatshttps://runtimerebel.com/blog/hardening-automatic-tank-gauge-systems-against-cyber-threatsCISA and partners warn of active cyber threats targeting Automatic Tank Gauge (ATG) systems. Learn to secure critical infrastructure assets now.Tue, 02 Jun 2026 21:12:50 GMTATG SystemsOperational TechnologyICS SecurityCritical InfrastructureCISA AdvisoryCyber Threat ActorsAuthentication BypassPrivilege EscalationSQL Injectionhttps://runtimerebel.com/blog/ai-reshapes-vulnerability-disclosure-urgent-action-for-remediationhttps://runtimerebel.com/blog/ai-reshapes-vulnerability-disclosure-urgent-action-for-remediationAI models accelerate vulnerability discovery, challenging traditional disclosure.Mon, 01 Jun 2026 18:10:47 GMTAI SecurityVulnerability DisclosurePatch ManagementTechnical DebtSecure By DesignCritical Infrastructurehttps://runtimerebel.com/blog/iranian-apt33-targets-aviation-with-updated-mimicc2-and-powerlesshttps://runtimerebel.com/blog/iranian-apt33-targets-aviation-with-updated-mimicc2-and-powerlessIranian APT Nimbus Manticore (APT33) targets aviation and software firms using new MimicC2 framework and updated PowerLess tools for stealthy operations.Tue, 26 May 2026 20:46:55 GMTAPT33Nimbus ManticoreIranAviationSoftwareMimicC2PowerLessCyber EspionageCritical Infrastructurehttps://runtimerebel.com/blog/iranian-cyber-offensive-targets-critical-fuel-tank-gauge-systemshttps://runtimerebel.com/blog/iranian-cyber-offensive-targets-critical-fuel-tank-gauge-systemsIranian threat actors are targeting insecure automatic tank gauges in fuel infrastructure, posing risks of physical disruption and environmental damage.Mon, 18 May 2026 17:04:16 GMTIranATGCritical InfrastructureOT SecurityCyber Physicalhttps://runtimerebel.com/blog/sdr-based-disruptions-in-taiwan-rail-highlight-ics-security-gapshttps://runtimerebel.com/blog/sdr-based-disruptions-in-taiwan-rail-highlight-ics-security-gapsAn SDR-based interference incident in Taiwan underscores critical vulnerabilities in rail signaling and the need for enhanced OT security protocols.Fri, 15 May 2026 05:23:40 GMTTaiwan RailSDR InterferenceICS OT SecurityCritical InfrastructureRail Signalinghttps://runtimerebel.com/blog/addressing-ai-hallucinations-in-critical-infrastructure-securityhttps://runtimerebel.com/blog/addressing-ai-hallucinations-in-critical-infrastructure-securityExplore how AI hallucinations create systemic risks in critical infrastructure and learn strategies to detect and mitigate these non-deterministic threats.Thu, 14 May 2026 12:45:35 GMTAI HallucinationCritical InfrastructureLLM SecurityOperational Technologyhttps://runtimerebel.com/blog/yorotrooper-campaign-hits-500-orgs-espionage-and-malware-tacticshttps://runtimerebel.com/blog/yorotrooper-campaign-hits-500-orgs-espionage-and-malware-tacticsAnalysis of the multi-year YoroTrooper phishing campaign targeting critical infrastructure, aviation, and government sectors with custom malware stealers.Mon, 11 May 2026 05:25:02 GMTYoroTrooperEspionageStink StealerCritical InfrastructurePhishinghttps://runtimerebel.com/blog/polish-water-ics-breaches-attackers-alter-operational-parametershttps://runtimerebel.com/blog/polish-water-ics-breaches-attackers-alter-operational-parametersPoland's ABW reports unauthorized access to five water treatment plants where attackers gained control over operational parameters, risking public safety.Fri, 08 May 2026 12:39:04 GMTICS SecurityPolandCritical InfrastructureOT SecuritySCADAhttps://runtimerebel.com/blog/uae-critical-infrastructure-faces-surge-in-geopolitical-cyberattackshttps://runtimerebel.com/blog/uae-critical-infrastructure-faces-surge-in-geopolitical-cyberattacksBreach attempts against the UAE have tripled following regional tensions, specifically targeting critical infrastructure and government sectors.Wed, 06 May 2026 12:49:45 GMTUAEMiddle EastCritical InfrastructureState SponsoredGeopolitical Conflicthttps://runtimerebel.com/blog/cisa-guidance-mastering-network-isolation-and-recoveryhttps://runtimerebel.com/blog/cisa-guidance-mastering-network-isolation-and-recoveryCISA urges critical infrastructure to prioritize network isolation and rapid recovery to counter persistent threats from foreign nation-state actors.Wed, 06 May 2026 12:49:04 GMTCISACritical InfrastructureVolt TyphoonNetwork SegmentationCyber Resiliencehttps://runtimerebel.com/blog/abb-symphony-plus-engineering-fix-postgresql-rce-vulnerabilitieshttps://runtimerebel.com/blog/abb-symphony-plus-engineering-fix-postgresql-rce-vulnerabilitiesABB Ability Symphony Plus Engineering is vulnerable to RCE via legacy PostgreSQL components. Learn how to mitigate CVE-2024-7348 and secure ICS networks.Thu, 30 Apr 2026 16:40:58 GMTABBPostgresqlICSCVE-2023-5869CVE-2024-7348RCECritical Infrastructurehttps://runtimerebel.com/blog/zero-trust-adoption-for-operational-technology-securityhttps://runtimerebel.com/blog/zero-trust-adoption-for-operational-technology-securityCISA guidance details adapting Zero Trust principles to Operational Technology (OT) to mitigate IT-OT convergence risks for critical infrastructure.Wed, 29 Apr 2026 20:32:48 GMTZero TrustOperational TechnologyOT SecurityCISA GuidanceCritical InfrastructureIT OT Convergencehttps://runtimerebel.com/blog/internet-facing-vnc-and-rdp-expose-ics-ot-systems-remediation-guidehttps://runtimerebel.com/blog/internet-facing-vnc-and-rdp-expose-ics-ot-systems-remediation-guideForescout research identifies hundreds of exposed VNC servers in critical sectors, posing severe risks to global industrial control systems and OT environments.Wed, 29 Apr 2026 12:42:01 GMTVNCRDPICS OTCritical InfrastructureForescouthttps://runtimerebel.com/blog/uk-cyber-chief-russia-iran-china-drive-top-cyber-threatshttps://runtimerebel.com/blog/uk-cyber-chief-russia-iran-china-drive-top-cyber-threatsNCSC warns British businesses of escalating cyber threats from state-sponsored groups in Russia, Iran, and China, urging preparedness for potential large-scale attacks.Wed, 22 Apr 2026 20:26:36 GMTUKNCSCRussiaIranChinaNation StateCyber WarfareCritical Infrastructurehttps://runtimerebel.com/blog/lotus-wiper-analysis-destructive-malware-targets-venezuelan-energyhttps://runtimerebel.com/blog/lotus-wiper-analysis-destructive-malware-targets-venezuelan-energyAnalysis of Lotus Wiper malware shows how it targets Venezuelan energy infrastructure by overwriting disks and disabling critical system recovery mechanisms.Wed, 22 Apr 2026 12:33:39 GMTLotus WiperVenezuelaEnergy SectorWiper MalwareCritical Infrastructurehttps://runtimerebel.com/blog/lotus-data-wiper-targets-venezuelan-energy-utilitieshttps://runtimerebel.com/blog/lotus-data-wiper-targets-venezuelan-energy-utilitiesAnalysis of the Lotus data wiper targeting Venezuelan energy and utility firms in 2023. Understand its destructive capabilities and TTPs for defense.Tue, 21 Apr 2026 20:23:47 GMTLotusData WiperVenezuelaEnergy SectorUtilitiesCritical InfrastructureIndustrial Control SystemsCybereasonhttps://runtimerebel.com/blog/zionsiphon-malware-detecting-ot-threats-to-israeli-water-systemshttps://runtimerebel.com/blog/zionsiphon-malware-detecting-ot-threats-to-israeli-water-systemsZionSiphon malware targets Israeli water treatment and desalination infrastructure, establishing persistence and scanning local subnets for OT services.Mon, 20 Apr 2026 08:52:37 GMTZionSiphonOT SecurityDarktraceIsraelCritical Infrastructure