Cybersecurity articles tagged #Energy Sector on RuntimeRebel.https://runtimerebel.comhttps://runtimerebel.com/blog/origin-energy-data-breach-2-million-customers-data-compromisedhttps://runtimerebel.com/blog/origin-energy-data-breach-2-million-customers-data-compromisedAustralian energy giant Origin Energy confirms a data breach impacting 2 million customers. A hacker claims to have stolen information and threatens public disclosure.Fri, 24 Jul 2026 06:26:59 GMTOrigin EnergyData BreachAustraliaCustomer DataEnergy SectorThreat Disclosurehttps://runtimerebel.com/blog/origin-energy-data-breach-exposes-client-piihttps://runtimerebel.com/blog/origin-energy-data-breach-exposes-client-piiAustralian energy provider Origin Energy confirms a data breach exposed sensitive Personally Identifiable Information of its clients, heightening fraud risks.Thu, 23 Jul 2026 21:06:35 GMTOrigin EnergyData BreachPII ExposureAustraliaEnergy Sectorhttps://runtimerebel.com/blog/siemens-kaco-blueplanet-inverter-vulnerabilities-cve-2025-40946-cve-2026-41125https://runtimerebel.com/blog/siemens-kaco-blueplanet-inverter-vulnerabilities-cve-2025-40946-cve-2026-41125Critical Siemens KACO Blueplanet Inverters are vulnerable to credential derivation (CVE-2025-40946) and SQL injection (CVE-2026-41125).Tue, 09 Jun 2026 17:02:56 GMTSiemensKACO Blueplanet InvertersICSEnergy SectorCVE-2025-40946CVE-2026-41125Hard Coded KeySQL InjectionOperational Technologyhttps://runtimerebel.com/blog/abb-terra-ac-wallbox-1-8-33-buffer-overflows-patch-nowhttps://runtimerebel.com/blog/abb-terra-ac-wallbox-1-8-33-buffer-overflows-patch-nowCISA warns of three buffer overflow vulnerabilities (CVE-2025-10504, CVE-2025-12142, CVE-2025-12143) in ABB Terra AC Wallbox EV chargers, leading to potential remote…Thu, 21 May 2026 20:43:05 GMTABBTerra AC WallboxEV ChargerCVE-2025-10504CVE-2025-12142CVE-2025-12143Buffer OverflowHeap Based Buffer OverflowStack Based Buffer OverflowEnergy Sectorhttps://runtimerebel.com/blog/famoussparrow-apt-china-linked-group-targets-caucasus-energy-sectorhttps://runtimerebel.com/blog/famoussparrow-apt-china-linked-group-targets-caucasus-energy-sectorChina-linked FamousSparrow APT expands targeting to include Azerbaijani energy infrastructure, signaling a shift in strategic objectives for the threat group.Wed, 13 May 2026 16:54:43 GMTFamousSparrowEnergy SectorCVE-2021-26855South CaucasusSparrowDoorhttps://runtimerebel.com/blog/famoussparrow-exploits-microsoft-exchange-in-azerbaijani-energy-campaignhttps://runtimerebel.com/blog/famoussparrow-exploits-microsoft-exchange-in-azerbaijani-energy-campaignBitdefender reveals a multi-wave intrusion by FamousSparrow targeting an Azerbaijani oil and gas firm via repeated Microsoft Exchange exploitation.Wed, 13 May 2026 16:52:22 GMTFamousSparrowUAT 9244AzerbaijanMicrosoft ExchangeEnergy Sectorhttps://runtimerebel.com/blog/subnet-solutions-powersystem-center-vulnerabilities-patch-nowhttps://runtimerebel.com/blog/subnet-solutions-powersystem-center-vulnerabilities-patch-nowCISA warns of high-severity vulnerabilities in Subnet Solutions PowerSYSTEM Center that allow sensitive data exposure and CRLF injection. Patch immediately.Tue, 12 May 2026 20:41:06 GMTCVE-2026-26289CVE-2026-35504Industrial Control SystemsSubnet SolutionsEnergy Sectorhttps://runtimerebel.com/blog/cve-2025-14510-abb-ability-optimax-azure-ad-sso-auth-bypasshttps://runtimerebel.com/blog/cve-2025-14510-abb-ability-optimax-azure-ad-sso-auth-bypassCISA warns of CVE-2025-14510 impacting ABB Ability OPTIMAX, allowing authentication bypass on Azure AD SSO integrations. Patch immediately.Fri, 01 May 2026 00:56:01 GMTCVE-2025-14510ABB Ability OPTIMAXAuthentication BypassAzure Active Directory SSOICSSCADAEnergy SectorWater and Wastewaterhttps://runtimerebel.com/blog/lotus-wiper-analysis-destructive-malware-targets-venezuelan-energyhttps://runtimerebel.com/blog/lotus-wiper-analysis-destructive-malware-targets-venezuelan-energyAnalysis of Lotus Wiper malware shows how it targets Venezuelan energy infrastructure by overwriting disks and disabling critical system recovery mechanisms.Wed, 22 Apr 2026 12:33:39 GMTLotus WiperVenezuelaEnergy SectorWiper MalwareCritical Infrastructurehttps://runtimerebel.com/blog/lotus-wiper-malware-targets-venezuelan-energy-sectorhttps://runtimerebel.com/blog/lotus-wiper-malware-targets-venezuelan-energy-sectorKaspersky researchers uncover Lotus Wiper, a destructive malware targeting Venezuelan energy and utility systems via malicious batch scripts.Wed, 22 Apr 2026 12:29:41 GMTLotus WiperVenezuelaEnergy SectorData WiperKasperskyhttps://runtimerebel.com/blog/lotus-data-wiper-targets-venezuelan-energy-utilitieshttps://runtimerebel.com/blog/lotus-data-wiper-targets-venezuelan-energy-utilitiesAnalysis of the Lotus data wiper targeting Venezuelan energy and utility firms in 2023. Understand its destructive capabilities and TTPs for defense.Tue, 21 Apr 2026 20:23:47 GMTLotusData WiperVenezuelaEnergy SectorUtilitiesCritical InfrastructureIndustrial Control SystemsCybereasonhttps://runtimerebel.com/blog/venezuela-geopolitical-risk-navigating-post-maduro-transitionhttps://runtimerebel.com/blog/venezuela-geopolitical-risk-navigating-post-maduro-transitionAnalysis of the Venezuelan political landscape following the 2026 US operation, focusing on Delcy Rodríguez’s strategy and PSUV internal rivalries.Thu, 09 Apr 2026 08:44:29 GMTVenezuelaGeopolitical RiskDelcy RodriguezEnergy SectorPsuvhttps://runtimerebel.com/blog/mobiliti-e-mobi-hu-ev-chargers-critical-auth-bypass-dos-vulnerabilitieshttps://runtimerebel.com/blog/mobiliti-e-mobi-hu-ev-chargers-critical-auth-bypass-dos-vulnerabilitiesCritical vulnerabilities in Mobiliti e-mobi.hu EV charging stations (all versions) allow unauthenticated attackers to gain administrative control or disrupt services.Tue, 03 Mar 2026 20:14:21 GMTCVE-2026-26051CVE-2026-20882CVE-2026-27764CVE-2026-27777Mobiliti E Mobi HuEV ChargingICS SecurityOT SecurityEnergy SectorTransportation SystemsMissing AuthenticationDenial of Servicehttps://runtimerebel.com/blog/critical-authentication-flaws-in-chargemap-ev-infrastructurehttps://runtimerebel.com/blog/critical-authentication-flaws-in-chargemap-ev-infrastructureCISA warns of critical vulnerabilities in Chargemap EV charging stations, including unauthenticated WebSocket access and session hijacking (CVE-2026-25851).Thu, 26 Feb 2026 20:16:22 GMTCVE-2026-25851ChargemapEV ChargingICSEnergy SectorOCPPWebSocket