Cybersecurity articles tagged #SCADA on RuntimeRebel.https://runtimerebel.comhttps://runtimerebel.com/blog/siemens-and-schneider-patch-critical-ics-flaws-october-2024https://runtimerebel.com/blog/siemens-and-schneider-patch-critical-ics-flaws-october-2024Siemens, Schneider Electric, and Rockwell Automation release critical updates for ICS products including SCALANCE, SINEC, and EcoStruxure platforms.Wed, 15 Jul 2026 10:07:48 GMTSiemensSchneider ElectricRockwell AutomationICS SecuritySCADACVE-2024-42359CVE-2024-38311https://runtimerebel.com/blog/jesse-mcgraw-ghostexodus-examining-the-first-ics-hacking-convictionhttps://runtimerebel.com/blog/jesse-mcgraw-ghostexodus-examining-the-first-ics-hacking-convictionA technical analysis of Jesse McGraw (GhostExodus), his compromise of hospital HVAC systems, and the evolution of industrial control system security threats.Mon, 13 Jul 2026 14:43:16 GMTGhostExodusJesse McGrawICS SecuritySCADAInsider Threathttps://runtimerebel.com/blog/cve-2024-2821-critical-rce-in-daktronics-controllers-patch-nowhttps://runtimerebel.com/blog/cve-2024-2821-critical-rce-in-daktronics-controllers-patch-nowCritical vulnerabilities (CVE-2024-2821, CVE-2024-2822, CVE-2024-2823) in Daktronics Venus 1500 and Vanguard controllers allow remote hacking of highway signs and…Tue, 30 Jun 2026 05:28:50 GMTDaktronicsCVE-2024-2821CVE-2024-2822CVE-2024-2823ICSSCADAIoTImproper AuthenticationRemote HackingCritical Infrastructurehttps://runtimerebel.com/blog/cve-2026-6332-schneider-electric-ecostruxure-hvac-source-code-disclosurehttps://runtimerebel.com/blog/cve-2026-6332-schneider-electric-ecostruxure-hvac-source-code-disclosureA cleartext storage vulnerability in Schneider Electric EcoStruxure Machine Expert HVAC (CVE-2026-6332) exposes sensitive source code. Update to v1.10.0.Thu, 28 May 2026 17:27:39 GMTCVE-2026-6332Schneider ElectricEcoStruxure Machine Expert HVACICSSCADACWE-312Source Code DisclosureOThttps://runtimerebel.com/blog/polish-water-ics-breaches-attackers-alter-operational-parametershttps://runtimerebel.com/blog/polish-water-ics-breaches-attackers-alter-operational-parametersPoland's ABW reports unauthorized access to five water treatment plants where attackers gained control over operational parameters, risking public safety.Fri, 08 May 2026 12:39:04 GMTICS SecurityPolandCritical InfrastructureOT SecuritySCADAhttps://runtimerebel.com/blog/ai-driven-cyberattack-fails-to-breach-ot-systems-via-scada-loginhttps://runtimerebel.com/blog/ai-driven-cyberattack-fails-to-breach-ot-systems-via-scada-loginAnalysis of the first AI-driven cyberattack targeting OT. Despite advanced automation, the campaign failed to bypass standard SCADA login interfaces.Thu, 07 May 2026 16:43:36 GMTAI Driven AttackICS SecuritySCADAOT DefenseAutomationhttps://runtimerebel.com/blog/cve-2025-14510-abb-ability-optimax-azure-ad-sso-auth-bypasshttps://runtimerebel.com/blog/cve-2025-14510-abb-ability-optimax-azure-ad-sso-auth-bypassCISA warns of CVE-2025-14510 impacting ABB Ability OPTIMAX, allowing authentication bypass on Azure AD SSO integrations. Patch immediately.Fri, 01 May 2026 00:56:01 GMTCVE-2025-14510ABB Ability OPTIMAXAuthentication BypassAzure Active Directory SSOICSSCADAEnergy SectorWater and Wastewaterhttps://runtimerebel.com/blog/iranian-apt-exploits-rockwell-automation-plcs-securing-critical-infrastructure-ot-deviceshttps://runtimerebel.com/blog/iranian-apt-exploits-rockwell-automation-plcs-securing-critical-infrastructure-ot-devicesIranian-affiliated APT actors are exploiting internet-facing Rockwell Automation PLCs, disrupting US critical infrastructure.Tue, 07 Apr 2026 20:21:14 GMTIranian APTCyber Av3ngersRockwell AutomationAllen BradleyPLCOT SecurityCritical InfrastructureHMISCADAGovernmentWater and WastewaterEnergyhttps://runtimerebel.com/blog/mitsubishi-electric-ics-vulnerabilities-expose-sql-credentialshttps://runtimerebel.com/blog/mitsubishi-electric-ics-vulnerabilities-expose-sql-credentialsHigh-severity vulnerabilities (CVE-2025-14815, CVE-2025-14816) in Mitsubishi Electric ICS/SCADA products risk SQL credential exposure and data compromise.Tue, 07 Apr 2026 16:31:20 GMTCVE-2025-14815CVE-2025-14816Mitsubishi ElectricGENESIS64ICONICS SuiteICSSCADACleartext StorageCritical ManufacturingSQL Serverhttps://runtimerebel.com/blog/cve-2025-13957-hard-coded-credentials-in-schneider-ecostruxure-dcehttps://runtimerebel.com/blog/cve-2025-13957-hard-coded-credentials-in-schneider-ecostruxure-dceHard-coded credentials in Schneider Electric EcoStruxure Data Center Expert v9.0 and prior (CVE-2025-13957) allow information disclosure and RCE if SOCKS Proxy is…Tue, 17 Mar 2026 20:17:31 GMTCVE-2025-13957Schneider ElectricEcoStruxure IT Data Center ExpertHard Coded CredentialsICSSCADAOperational Technologyhttps://runtimerebel.com/blog/cve-2026-3611-critical-auth-bypass-in-honeywell-iq4x-bms-controllershttps://runtimerebel.com/blog/cve-2026-3611-critical-auth-bypass-in-honeywell-iq4x-bms-controllersCISA warns of a critical authentication bypass (CVE-2026-3611) in Honeywell IQ4x BMS Controllers, allowing unauthenticated attackers administrative access and potential…Tue, 10 Mar 2026 20:15:15 GMTCVE-2026-3611Honeywell IQ4xBMS ControllerICSSCADAAuthentication BypassCritical InfrastructureCWE-306https://runtimerebel.com/blog/honeywell-iq4-vulnerability-assessing-internet-exposure-impacthttps://runtimerebel.com/blog/honeywell-iq4-vulnerability-assessing-internet-exposure-impactA researcher claims thousands of internet-exposed Honeywell IQ4 building controllers are vulnerable. Understand the potential impact and mitigation strategies.Tue, 03 Mar 2026 16:24:11 GMTHoneywell IQ4Building Management SystemsICS SecurityOT SecuritySCADAhttps://runtimerebel.com/blog/multiple-dos-rce-vulnerabilities-in-yokogawa-centum-vp-r6-r7https://runtimerebel.com/blog/multiple-dos-rce-vulnerabilities-in-yokogawa-centum-vp-r6-r7CISA alerts to multiple medium-severity vulnerabilities in Yokogawa CENTUM VP R6 and R7, allowing DoS and RCE via crafted packets in critical infrastructure…Thu, 26 Feb 2026 20:16:44 GMTYokogawaCENTUM VPICSSCADACVE-2025-1924CVE-2025-48019CVE-2025-48020CVE-2025-48021CVE-2025-48022CVE-2025-48023Denial of ServiceArbitrary Code ExecutionCritical ManufacturingEnergyFood and Agriculturehttps://runtimerebel.com/blog/critical-rce-flaws-in-insat-masterscada-buk-ts-affect-icshttps://runtimerebel.com/blog/critical-rce-flaws-in-insat-masterscada-buk-ts-affect-icsTwo critical vulnerabilities (SQLi, OS Command Injection) in InSAT MasterSCADA BUK-TS lead to remote code execution, impacting critical infrastructure sectors globally.Wed, 25 Feb 2026 04:43:53 GMTCVE-2026-21410CVE-2026-22553InSAT MasterSCADA BUK TSSQL InjectionOS Command InjectionRCEICSSCADACritical ManufacturingEnergyWater and Wastewater