Advertisement
CISA Warns: Cyberattacks Disrupting US Water Utilities' PLCs
CISA issues an urgent warning regarding increased cyberattacks targeting internet-exposed Programmable Logic Controllers (PLCs) in US water and wastewater systems,
CISA Urges Water Sector to Secure OT PLCs Amid Coordinated Attacks
CISA warns water and wastewater utilities to secure internet-exposed OT controllers after coordinated intrusions targeted dozens of Minnesota systems. Prioritize network
CISA & ACSC Advise Isolating OT Systems During Cyberattacks
CISA and ACSC urge critical infrastructure to prepare isolating operational technology systems during cyberattacks to maintain essential services and limit impact.
Multi-Threat Brief: AI Malware, Zimbra Exploits, Linux Kernel Flaws
Analysis of recent threats including DolphinX AI malware, state-sponsored Zimbra exploits, Siemens industrial switch vulnerabilities, and 400 Linux kernel flaws.
Exposed US Gas Station ATG Systems Threaten Critical Infrastructure
Over 900 US-based Automatic Tank Gauge (ATG) systems are exposed online, risking fuel theft, physical damage, and environmental incidents via remote access.
CVE-2026-21404: NAVTOR NavBox SOAP Credential Bypass and Mitigation
NAVTOR NavBox version 4.16.1.20 is vulnerable to hard-coded credentials in its SOAP implementation, allowing local attackers to manipulate application files.
Russian Intelligence Intensifies Tech Procurement and Infrastructure Recon
Russian spies are leveraging front companies and cyber espionage to bypass sanctions and gather intelligence for potential attacks on Western infrastructure.

OT Robot OS Command Injection: Unauthenticated RCE — Patch Now
Critical command injection vulnerability in OT Robot OS allows unauthenticated attackers to gain remote control, posing significant disruption risks to industrial

Fast16: Pre-Stuxnet Lua Malware Targets Nuclear Physics Simulations
New analysis reveals Fast16 malware tampered with uranium-compression simulations, predating Stuxnet as a sophisticated tool for nuclear cyber sabotage.
Subnet Solutions PowerSYSTEM Center Vulnerabilities - Patch Now
CISA warns of high-severity vulnerabilities in Subnet Solutions PowerSYSTEM Center that allow sensitive data exposure and CRLF injection. Patch immediately.

Fast16 Malware: Revising the History of Cyber Sabotage
Researchers have uncovered 'fast16,' a sophisticated malware framework from two decades ago, predating Stuxnet and rewriting the timeline of cyber sabotage.
Lotus Data Wiper Targets Venezuelan Energy Utilities
Analysis of the Lotus data wiper targeting Venezuelan energy and utility firms in 2023. Understand its destructive capabilities and TTPs for defense.