Cybersecurity articles tagged #OT Security on RuntimeRebel.https://runtimerebel.comhttps://runtimerebel.com/blog/enhancing-ot-security-with-cyber-deception-strategieshttps://runtimerebel.com/blog/enhancing-ot-security-with-cyber-deception-strategiesImplement cyber deception in OT to detect, deter, and understand threats targeting critical infrastructure. Gain vital intelligence from attacker interactions.Tue, 08 Sep 2026 12:26:26 GMTOT SecurityICS SecurityCyber DeceptionThreat DetectionCritical Infrastructurehttps://runtimerebel.com/blog/dod-refrigeration-outages-hacking-or-malfunctionhttps://runtimerebel.com/blog/dod-refrigeration-outages-hacking-or-malfunctionMultiple U.S. DoD commissaries report refrigeration outages, leading to speculation of cyberattack amidst a lack of official cause.Tue, 01 Sep 2026 02:42:53 GMTOT SecurityDoDRefrigerationInfrastructureSupply Chain Resiliencehttps://runtimerebel.com/blog/tsn-protocols-vulnerabilities-threaten-ot-securityhttps://runtimerebel.com/blog/tsn-protocols-vulnerabilities-threaten-ot-securityNew research reveals how unprotected Time-Sensitive Networking protocols in industrial systems could allow attackers to disrupt physical processes.Sun, 23 Aug 2026 16:17:17 GMTOT SecurityIndustrial Control SystemsNetwork SecurityVulnerabilitieshttps://runtimerebel.com/blog/rce-vulnerabilities-in-copeland-xweb-pro-danfoss-ak-sm-800a-controllershttps://runtimerebel.com/blog/rce-vulnerabilities-in-copeland-xweb-pro-danfoss-ak-sm-800a-controllersClaroty Team82 discovered multiple RCE vulnerabilities in Copeland XWEB Pro and Danfoss AK-SM 800A commercial refrigeration controllers.Fri, 14 Aug 2026 16:42:26 GMTRCEIndustrial Control SystemsOT SecurityCopeland XWEB ProDanfoss AK SM 800Ahttps://runtimerebel.com/blog/multistate-water-system-attacks-target-exposed-plcshttps://runtimerebel.com/blog/multistate-water-system-attacks-target-exposed-plcsAttacks targeting poorly secured, internet-exposed PLCs in water systems are widening across multiple U.S. states, with Iran suspected.Tue, 11 Aug 2026 08:46:26 GMTICSOT SecurityCritical InfrastructureIranWater Utilitieshttps://runtimerebel.com/blog/private-apn-misconfiguration-led-to-polish-energy-plant-ot-compromisehttps://runtimerebel.com/blog/private-apn-misconfiguration-led-to-polish-energy-plant-ot-compromiseHackers compromised a Polish energy plant's OT network by exploiting a private APN misconfiguration, shutting down a steam turbine and water treatment system.Tue, 11 Aug 2026 00:59:03 GMTOT SecurityCritical InfrastructureFortiGatePrivate APNWAGO PLChttps://runtimerebel.com/blog/siemens-rox-ii-zero-day-trilogy-chained-ot-switch-flawshttps://runtimerebel.com/blog/siemens-rox-ii-zero-day-trilogy-chained-ot-switch-flawsSiemens and Unit 42 disclose three zero-day vulnerabilities in ROX II switches enabling full root compromise. Patch to firmware V2.17.1.Sat, 08 Aug 2026 08:34:36 GMTZero-DayOT SecurityCVE-2025-40948CVE-2025-40947CVE-2025-40949https://runtimerebel.com/blog/cisa-warns-cyberattacks-disrupting-us-water-utilities-plcshttps://runtimerebel.com/blog/cisa-warns-cyberattacks-disrupting-us-water-utilities-plcsCISA issues an urgent warning regarding increased cyberattacks targeting internet-exposed Programmable Logic Controllers (PLCs) in US water and wastewater systems…Fri, 31 Jul 2026 17:42:45 GMTCISAWater UtilitiesWastewater SystemsPLCsIndustrial Control SystemsOT Securityhttps://runtimerebel.com/blog/cisa-urges-water-sector-to-secure-ot-plcs-amid-coordinated-attackshttps://runtimerebel.com/blog/cisa-urges-water-sector-to-secure-ot-plcs-amid-coordinated-attacksCISA warns water and wastewater utilities to secure internet-exposed OT controllers after coordinated intrusions targeted dozens of Minnesota systems.Fri, 31 Jul 2026 02:56:02 GMTCISAWater SectorWastewaterOT SecurityPLCsIndustrial Control SystemsMinnesotahttps://runtimerebel.com/blog/data-center-risk-20-of-cps-assets-exposed-to-attackhttps://runtimerebel.com/blog/data-center-risk-20-of-cps-assets-exposed-to-attackClaroty research reveals 1 in 5 data center cyber-physical systems are exposed to the internet, creating risks for physical disruption and lateral movement.Thu, 30 Jul 2026 10:27:18 GMTClarotyCyber Physical SystemsBMSData Center SecurityOT Securityhttps://runtimerebel.com/blog/coordinated-ot-attack-targets-30-minnesota-water-utilitieshttps://runtimerebel.com/blog/coordinated-ot-attack-targets-30-minnesota-water-utilitiesOver 30 Minnesota water utilities were targeted in a coordinated cyberattack on operational technology, prompting a statewide incident response and investigation.Wed, 29 Jul 2026 17:17:22 GMTOT SecurityCritical InfrastructureMinnesotaICSWater Utilityhttps://runtimerebel.com/blog/cisa-acsc-advise-isolating-ot-systems-during-cyberattackshttps://runtimerebel.com/blog/cisa-acsc-advise-isolating-ot-systems-during-cyberattacksCISA and ACSC urge critical infrastructure to prepare isolating operational technology systems during cyberattacks to maintain essential services and limit impact.Tue, 28 Jul 2026 21:10:24 GMTCISAACSCCritical InfrastructureOT SecurityCyberattack PreparednessIndustrial Control SystemsIncident Responsehttps://runtimerebel.com/blog/ot-security-startup-frenos-secures-1-52-million-for-ai-r-dhttps://runtimerebel.com/blog/ot-security-startup-frenos-secures-1-52-million-for-ai-r-dFrenos raises $1.52 million in seed funding to expand AI research and development focused on securing industrial control systems and operational technology.Tue, 28 Jul 2026 14:10:52 GMTFrenosOT SecurityICS SecurityAI SecurityCritical Infrastructurehttps://runtimerebel.com/blog/iranian-hackers-target-siemens-schneider-rockwell-ics-plcshttps://runtimerebel.com/blog/iranian-hackers-target-siemens-schneider-rockwell-ics-plcsUS federal agencies warn of Iranian hackers actively targeting Siemens, Schneider Electric, and Rockwell Automation ICS PLCs. Defenders must secure OT environments.Thu, 23 Jul 2026 06:32:12 GMTIranian HackersICS SecurityOT SecuritySiemensSchneider ElectricRockwell AutomationPLCshttps://runtimerebel.com/blog/recognizing-excellence-the-critical-impact-awards-in-industrial-cybersecurityhttps://runtimerebel.com/blog/recognizing-excellence-the-critical-impact-awards-in-industrial-cybersecuritySecurityWeek launches Critical Impact Awards to honor innovations and proven impact in industrial cybersecurity, highlighting the importance of OT security.Tue, 21 Jul 2026 13:56:33 GMTIndustrial CybersecurityICS SecurityOT SecuritySecurityWeekCritical Impact AwardsCybersecurity AwardsIndustry Recognitionhttps://runtimerebel.com/blog/ot-security-legacy-system-vulnerabilities-in-critical-infrastructurehttps://runtimerebel.com/blog/ot-security-legacy-system-vulnerabilities-in-critical-infrastructureAddressing the complex challenges of securing legacy OT systems in critical infrastructure, balancing vulnerability disclosure with operational continuity and safety.Thu, 16 Jul 2026 17:24:03 GMTOT SecurityLegacy SystemsCritical InfrastructureVulnerability ManagementICS Securityhttps://runtimerebel.com/blog/cal-water-incident-no-ot-impact-confirmed-after-handala-claimshttps://runtimerebel.com/blog/cal-water-incident-no-ot-impact-confirmed-after-handala-claimsAn investigation revealed no operational technology compromise at Cal Water despite claims by Iranian hacker group Handala to disrupt water supply.Thu, 25 Jun 2026 13:05:10 GMTCal WaterHandalaCritical InfrastructureOT SecurityCyberattackWater UtilityDisinformationhttps://runtimerebel.com/blog/the-gentlemen-ransomware-halts-mackay-sugar-operationshttps://runtimerebel.com/blog/the-gentlemen-ransomware-halts-mackay-sugar-operationsMackay Sugar, Australia's second-largest sugar producer, suffered a ransomware attack by 'The Gentlemen' group, halting mill operations and impacting critical…Mon, 15 Jun 2026 17:49:18 GMTRansomwareThe GentlemenMackay SugarCritical InfrastructureAustraliaOT Securityhttps://runtimerebel.com/blog/ics-exposure-persists-as-ot-attack-surface-expandshttps://runtimerebel.com/blog/ics-exposure-persists-as-ot-attack-surface-expandsAnalysis of Industrial Control System (ICS) exposure, its persistence amidst expanding attack surfaces, and vital steps for operational technology security.Sat, 13 Jun 2026 01:04:32 GMTICSOT SecurityCritical InfrastructureAttack Surfacehttps://runtimerebel.com/blog/exposed-fuel-tank-gauges-us-gas-stations-face-active-cyberattackshttps://runtimerebel.com/blog/exposed-fuel-tank-gauges-us-gas-stations-face-active-cyberattacksThreat actors are actively exploiting Internet-exposed fuel tank gauges at US gas stations, risking significant disruption to fuel supply and operations.Fri, 05 Jun 2026 20:42:04 GMTFuel Tank GaugesGas StationsCritical InfrastructureOT SecurityExposed DevicesUSICS Securityhttps://runtimerebel.com/blog/exposed-us-gas-station-atg-systems-threaten-critical-infrastructurehttps://runtimerebel.com/blog/exposed-us-gas-station-atg-systems-threaten-critical-infrastructureOver 900 US-based Automatic Tank Gauge (ATG) systems are exposed online, risking fuel theft, physical damage, and environmental incidents via remote access.Fri, 05 Jun 2026 16:55:14 GMTATGCritical InfrastructureIndustrial Control SystemsOT Securityhttps://runtimerebel.com/blog/cisa-warns-critical-infrastructure-atg-systems-under-attackhttps://runtimerebel.com/blog/cisa-warns-critical-infrastructure-atg-systems-under-attackCISA, FBI, and NSA warn of active cyberattacks targeting internet-exposed Automatic Tank Gauge (ATG) systems in critical infrastructure. Learn to defend.Wed, 03 Jun 2026 21:11:09 GMTCISAFBINSAAutomatic Tank GaugeATGCritical InfrastructureOT SecurityICS Securityhttps://runtimerebel.com/blog/cve-2026-4293-kieback-peter-ddc-xss-mitigate-building-controller-riskshttps://runtimerebel.com/blog/cve-2026-4293-kieback-peter-ddc-xss-mitigate-building-controller-risksCISA warns of CVE-2026-4293, a Cross-site Scripting vulnerability in Kieback & Peter DDC Building Controllers.Tue, 19 May 2026 20:43:11 GMTKieback PeterDDC Building ControllersCVE-2026-4293XSSCross Site ScriptingICSOT SecurityBuilding AutomationCWE-79https://runtimerebel.com/blog/universal-robots-polyscope-5-rce-via-cve-2024-8153-patch-nowhttps://runtimerebel.com/blog/universal-robots-polyscope-5-rce-via-cve-2024-8153-patch-nowCritical OS command injection vulnerability in Universal Robots PolyScope 5 allows attackers to compromise industrial robot fleets. Patch to version 5.19.0.Tue, 19 May 2026 09:21:38 GMTCVE-2024-8153Universal RobotsPolyScopeOT SecurityCommand Injectionhttps://runtimerebel.com/blog/iranian-cyber-offensive-targets-critical-fuel-tank-gauge-systemshttps://runtimerebel.com/blog/iranian-cyber-offensive-targets-critical-fuel-tank-gauge-systemsIranian threat actors are targeting insecure automatic tank gauges in fuel infrastructure, posing risks of physical disruption and environmental damage.Mon, 18 May 2026 17:04:16 GMTIranATGCritical InfrastructureOT SecurityCyber Physicalhttps://runtimerebel.com/blog/polish-water-ics-breaches-attackers-alter-operational-parametershttps://runtimerebel.com/blog/polish-water-ics-breaches-attackers-alter-operational-parametersPoland's ABW reports unauthorized access to five water treatment plants where attackers gained control over operational parameters, risking public safety.Fri, 08 May 2026 12:39:04 GMTICS SecurityPolandCritical InfrastructureOT SecuritySCADAhttps://runtimerebel.com/blog/claude-ai-guided-hackers-toward-ot-assets-during-water-utility-intrusionhttps://runtimerebel.com/blog/claude-ai-guided-hackers-toward-ot-assets-during-water-utility-intrusionThreat actors utilized Anthropic’s Claude AI to navigate OT environments during a water utility breach, highlighting the rising risk of AI-assisted ICS attacks.Thu, 07 May 2026 08:59:57 GMTClaude AIOT SecurityWater Utility BreachICS SecurityDragoshttps://runtimerebel.com/blog/zero-trust-adoption-for-operational-technology-securityhttps://runtimerebel.com/blog/zero-trust-adoption-for-operational-technology-securityCISA guidance details adapting Zero Trust principles to Operational Technology (OT) to mitigate IT-OT convergence risks for critical infrastructure.Wed, 29 Apr 2026 20:32:48 GMTZero TrustOperational TechnologyOT SecurityCISA GuidanceCritical InfrastructureIT OT Convergencehttps://runtimerebel.com/blog/securing-serial-to-ip-devices-mitigating-thousands-of-ot-bugshttps://runtimerebel.com/blog/securing-serial-to-ip-devices-mitigating-thousands-of-ot-bugsIndustrial serial-to-IP converters are riddled with thousands of vulnerabilities, posing a significant risk to legacy infrastructure and OT environments.Mon, 20 Apr 2026 20:19:45 GMTOT SecurityICSSerial to IPIndustrial NetworkingLegacy Systemshttps://runtimerebel.com/blog/zionsiphon-malware-detecting-ot-threats-to-israeli-water-systemshttps://runtimerebel.com/blog/zionsiphon-malware-detecting-ot-threats-to-israeli-water-systemsZionSiphon malware targets Israeli water treatment and desalination infrastructure, establishing persistence and scanning local subnets for OT services.Mon, 20 Apr 2026 08:52:37 GMTZionSiphonOT SecurityDarktraceIsraelCritical Infrastructurehttps://runtimerebel.com/blog/analyzing-zionsiphon-malware-targeting-water-treatment-ot-systemshttps://runtimerebel.com/blog/analyzing-zionsiphon-malware-targeting-water-treatment-ot-systemsInvestigate ZionSiphon malware, an OT-specific threat designed to sabotage water treatment and desalination facilities.Fri, 17 Apr 2026 00:44:40 GMTZionSiphonOT SecurityICS SecurityWater TreatmentCritical InfrastructureSabotagehttps://runtimerebel.com/blog/ot-cryptographic-readiness-addressing-the-pqc-attestation-gaphttps://runtimerebel.com/blog/ot-cryptographic-readiness-addressing-the-pqc-attestation-gapOT asset owners struggle to meet regulatory PQC attestation requirements due to a lack of visibility tools, creating a false sense of security in ICS environments.Mon, 13 Apr 2026 20:26:06 GMTICS SecurityOT SecurityPost Quantum CryptographyCompliancePQChttps://runtimerebel.com/blog/iranian-hackers-targeting-u-s-critical-infrastructure-via-plcshttps://runtimerebel.com/blog/iranian-hackers-targeting-u-s-critical-infrastructure-via-plcsU.S. agencies warn of Iran-linked hackers disrupting critical infrastructure by exploiting internet-exposed PLCs to manipulate data and halt operations.Wed, 08 Apr 2026 08:32:44 GMTPLC SecurityCritical InfrastructureOT SecurityIran Affiliated HackersICShttps://runtimerebel.com/blog/iran-linked-cyber-av3ngers-target-us-water-sector-plcshttps://runtimerebel.com/blog/iran-linked-cyber-av3ngers-target-us-water-sector-plcsUS federal agencies warn of Iran-linked Cyber Av3ngers targeting Unitronics PLCs in critical infrastructure. Learn how to detect and mitigate these OT attacks.Wed, 08 Apr 2026 04:54:42 GMTCyber Av3ngersPLCUnitronicsOT SecurityIranhttps://runtimerebel.com/blog/iranian-apt-exploits-rockwell-automation-plcs-securing-critical-infrastructure-ot-deviceshttps://runtimerebel.com/blog/iranian-apt-exploits-rockwell-automation-plcs-securing-critical-infrastructure-ot-devicesIranian-affiliated APT actors are exploiting internet-facing Rockwell Automation PLCs, disrupting US critical infrastructure.Tue, 07 Apr 2026 20:21:14 GMTIranian APTCyber Av3ngersRockwell AutomationAllen BradleyPLCOT SecurityCritical InfrastructureHMISCADAGovernmentWater and WastewaterEnergyhttps://runtimerebel.com/blog/iranian-linked-actors-target-rockwell-allen-bradley-plcs-in-u-s-critical-infrastructurehttps://runtimerebel.com/blog/iranian-linked-actors-target-rockwell-allen-bradley-plcs-in-u-s-critical-infrastructureU.S. critical infrastructure faces threats from Iranian-linked actors targeting internet-exposed Rockwell/Allen-Bradley PLCs. Learn about the risk and mitigations.Tue, 07 Apr 2026 20:18:47 GMTIranian Linked Threat ActorsCritical InfrastructureICS SCADARockwell AutomationAllen Bradley PLCsOT SecurityU S Critical Infrastructurehttps://runtimerebel.com/blog/industrial-ot-attacks-with-physical-consequences-decline-25https://runtimerebel.com/blog/industrial-ot-attacks-with-physical-consequences-decline-25Physical-impact cyberattacks on operational technology fell 25% in 2023, driven by a ransomware lull and complex technical barriers in OT environments.Fri, 27 Mar 2026 16:26:47 GMTOT SecurityCritical InfrastructureIndustrial Control SystemsWaterfall SecurityVolt Typhoonhttps://runtimerebel.com/blog/cve-2025-57176-unauthenticated-file-upload-in-ceragon-siklu-deviceshttps://runtimerebel.com/blog/cve-2025-57176-unauthenticated-file-upload-in-ceragon-siklu-devicesAn unauthenticated file upload vulnerability (CVE-2025-57176) in Ceragon Siklu MultiHaul and EtherHaul series devices poses risks to critical communications…Tue, 10 Mar 2026 20:15:45 GMTCVE-2025-57176CeragonSikluMultiHaulEtherHaulUnauthenticated File UploadCWE-434ICSOT Securityhttps://runtimerebel.com/blog/kai-emerges-with-125m-for-ai-driven-it-ot-security-platformhttps://runtimerebel.com/blog/kai-emerges-with-125m-for-ai-driven-it-ot-security-platformKai Security launches from stealth with $125M to address IT and OT convergence risks using an AI-powered platform for industrial environment protection.Tue, 10 Mar 2026 16:29:03 GMTKai SecurityOT SecurityIT OT ConvergenceIndustrial Control SystemsAmir Zilbersteinhttps://runtimerebel.com/blog/nation-state-cyber-operation-israel-s-compromise-of-iranian-traffic-camerashttps://runtimerebel.com/blog/nation-state-cyber-operation-israel-s-compromise-of-iranian-traffic-camerasAnalysis of the reported Israeli cyber operation targeting Iranian traffic cameras, detailing implications for critical infrastructure security and cyber-physical…Thu, 05 Mar 2026 20:17:25 GMTIsraelIranTraffic CamerasCyber EspionageNation State AttackCritical InfrastructureOT Securityhttps://runtimerebel.com/blog/mobiliti-e-mobi-hu-ev-chargers-critical-auth-bypass-dos-vulnerabilitieshttps://runtimerebel.com/blog/mobiliti-e-mobi-hu-ev-chargers-critical-auth-bypass-dos-vulnerabilitiesCritical vulnerabilities in Mobiliti e-mobi.hu EV charging stations (all versions) allow unauthenticated attackers to gain administrative control or disrupt services.Tue, 03 Mar 2026 20:14:21 GMTCVE-2026-26051CVE-2026-20882CVE-2026-27764CVE-2026-27777Mobiliti E Mobi HuEV ChargingICS SecurityOT SecurityEnergy SectorTransportation SystemsMissing AuthenticationDenial of Servicehttps://runtimerebel.com/blog/honeywell-iq4-vulnerability-assessing-internet-exposure-impacthttps://runtimerebel.com/blog/honeywell-iq4-vulnerability-assessing-internet-exposure-impactA researcher claims thousands of internet-exposed Honeywell IQ4 building controllers are vulnerable. Understand the potential impact and mitigation strategies.Tue, 03 Mar 2026 16:24:11 GMTHoneywell IQ4Building Management SystemsICS SecurityOT SecuritySCADAhttps://runtimerebel.com/blog/quantitative-scoring-for-ot-incidents-the-richter-scale-modelhttps://runtimerebel.com/blog/quantitative-scoring-for-ot-incidents-the-richter-scale-modelAnalysis of a new logarithmic scoring system designed to quantify the physical magnitude and technical severity of operational technology (OT) cyberattacks.Wed, 25 Feb 2026 12:28:19 GMTOT SecurityICSIncident ResponseRisk AssessmentCyber Physical SystemsIndustrial Securityhttps://runtimerebel.com/blog/analysis-of-ics-vulnerability-surges-and-targeted-healthcare-ransomware-campaignshttps://runtimerebel.com/blog/analysis-of-ics-vulnerability-surges-and-targeted-healthcare-ransomware-campaignsAn investigation into the escalation of vulnerabilities within Industrial Control Systems (ICS) and the resulting operational disruptions in the US healthcare sector…Mon, 23 Feb 2026 05:34:16 GMTICSRansomwareHealthcareOT SecurityData Breach