UK proposes 14-year jail terms for subsea cable saboteurs 2026-10-23 at 15:37 By Sinisa Markovic Damaging a cable on the seabed off the UK coast could soon cost someone 14 years of their life behind bars, under plans the British government published this week. The proposal comes from a White Paper by the Department for […]
UK proposes 14-year jail terms for subsea cable saboteurs Read More »
Frontier AI cleared every OT attack goal Booz Allen set in its lab 2026-10-13 at 08:00 By Anamarija Pogorelec Booz Allen set frontier AI models against an isolated industrial-control testbed in its Chantilly, Virginia lab and watched them clear all eight attack objectives it had defined. The Booz Allen frontier AI OT test architecture (Source: […]
Frontier AI cleared every OT attack goal Booz Allen set in its lab Read More »
FBI disrupts Flax Typhoon hacking tools used in global cyberattacks 2026-10-09 at 12:44 By Sinisa Markovic The FBI seized seven domains used to operate Microscan and FishHub, two hacking tools linked to Chinese state-sponsored hackers known as Flax Typhoon that were used to target critical infrastructure and other organizations in the US and abroad. Seizure […]
FBI disrupts Flax Typhoon hacking tools used in global cyberattacks Read More »
Thousands of wind and solar park systems sit exposed on the internet across Europe 2026-10-09 at 08:30 By Mirko Zorz Modat and NCSC-NL, the Dutch government’s cybersecurity center, found 8,547 internet-facing systems at wind farms and solar parks in 35 countries in and around the EU that should not be reachable from the internet. The […]
Thousands of wind and solar park systems sit exposed on the internet across Europe Read More »
What is MATCHBOIL? The Russia-aligned malware that installs a spying backdoor 2026-10-08 at 12:00 By Mirko Zorz ESET researchers traced almost two years of changes to MATCHBOIL, a downloader that the Russia-aligned group UAC-0099 uses to plant a second program on Windows machines in Ukraine. GUI displayed at MATCHBOIL’s runtime (Source: ESET) Every victim in […]
What is MATCHBOIL? The Russia-aligned malware that installs a spying backdoor Read More »
Even with OT network visibility, critical infrastructure operators struggle with legacy equipment 2026-10-07 at 07:50 By Anamarija Pogorelec Large critical infrastructure operators run seven separate security tools on average, and most still cannot see every asset on their operational technology (OT) networks. That is the picture from a Palo Alto Networks survey of more than […]
Your security program knows about the firewall, but does it know about the elevator? 2026-09-24 at 07:30 By Anamarija Pogorelec By early August, attackers had hit water systems in at least seven U.S. states. The FBI and EPA said the intruders remotely accessed internet-facing programmable logic controllers, the small industrial computers that run pumps and […]
Your security program knows about the firewall, but does it know about the elevator? Read More »
CISA wants critical infrastructure orgs and smaller security teams to start using cyber decoys 2026-09-17 at 15:51 By Zeljka Zorz Cyber deception has long been the domain of well-resourced security teams, but CISA’s latest guidance, titled “Using Cyber Decoys to Strengthen Detection and Response”, is an attempt to try and change that. Why decoys, and […]
CenterPoint Energy confirms data breach following claims on hacking forum 2026-09-16 at 13:35 By Sinisa Markovic CenterPoint Energy disclosed that an unauthorized third party got into customer data through one of its external systems, after online claims by a hacker that millions of records had been stolen from the company. CenterPoint Energy is a Houston-based […]
CenterPoint Energy confirms data breach following claims on hacking forum Read More »
Turn it off and on again, but for critical infrastructure 2026-09-14 at 09:00 By Anamarija Pogorelec Researchers at KTH Royal Institute of Technology built a container replica of a segmented industrial network, attacked it repeatedly across 14 days of running time, and used the captured traffic to train a defense agent that decides on its […]
Turn it off and on again, but for critical infrastructure Read More »
A battery storage cyberattack would look exactly like a badly tuned controller 2026-09-02 at 12:00 By Mirko Zorz Batteries connected to the grid make money by reacting to frequency, pushing power out when it sags and soaking it up when it rises. A few hundred of them moving together, on command from someone who should […]
A battery storage cyberattack would look exactly like a badly tuned controller Read More »
Suspected Iran-linked attack knocked UK power plant offline for days 2026-08-24 at 17:22 By Zeljka Zorz News that suspected Iranian hackers caused the shutdown of a British power plant broke over the weekend, raising the question of whether UK’s power grid and, indeed, the country’s critical infrastructure can fend off destructive cyber attacks. According to […]
Suspected Iran-linked attack knocked UK power plant offline for days Read More »
CISA’s logging guidance works beyond government 2026-08-24 at 13:56 By Zeljka Zorz The US Cybersecurity and Infrastructure Security Agency (CISA) wants federal agencies to (re)shape their logging strategy around one question: when an attack hits, can you actually use the logs you’ve collected to catch it and reconstruct what happened afterward? The Logging Reference Architecture […]
CISA’s logging guidance works beyond government Read More »
US agencies warn of AI-powered attacks on Siemens industrial controllers 2026-08-20 at 12:07 By Sinisa Markovic Threat actors are using AI to write exploit scripts targeting internet-exposed Siemens S7 Series programmable logic controllers (PLCs) used across water, energy, manufacturing, and other critical infrastructure sectors, according to US federal agencies. PLCs are the small industrial computers […]
US agencies warn of AI-powered attacks on Siemens industrial controllers Read More »
Ransomware gangs don’t need control system access to disrupt industrial production 2026-08-11 at 12:32 By Sinisa Markovic Disrupting IT systems that support industrial environments can be enough to interrupt production, even when ransomware operators do not gain direct access to industrial control systems (ICS), according to Dragos. The company identified 1,140 ransomware incidents involving industrial […]
Ransomware gangs don’t need control system access to disrupt industrial production Read More »
Previously unseen entry vector used to breach Polish energy plant 2026-08-11 at 08:00 By Sinisa Markovic The December 29 cyberattack on a Polish combined heat and power (CHP) plant was the first observed case of attackers gaining access to an OT network through a private APN, according to CERT Polska. The private APN is a […]
Previously unseen entry vector used to breach Polish energy plant Read More »
US fuel gauge exposure fell by more than half in three months 2026-08-07 at 08:00 By Anamarija Pogorelec Every month for the better part of a year, about 4,800 US internet addresses answered a query in the protocol that fuel tank gauges speak. In June the number was 2,354. The count fell across April, May, […]
US fuel gauge exposure fell by more than half in three months Read More »
What stops attackers wrecking industrial plants is knowing how 2026-08-05 at 07:30 By Mirko Zorz Engineers at an Israeli food producer spent most of a week rebuilding a refrigeration system after an intruder switched the gas cooler and receiver valves to manual and pinned them open. Liquid CO2 flooded the compressors and destroyed them. The […]
What stops attackers wrecking industrial plants is knowing how Read More »
Coordinated cyberattack hits more than 30 Minnesota water utilities 2026-07-30 at 11:59 By Sinisa Markovic A coordinated cyberattack on July 26 and 27 hit operational technology (OT) systems at more than 30 community water utilities across Minnesota, prompting an immediate response from Minnesota IT Services (MNIT) to contain the threat. MNIT confirmed the attack in […]
Coordinated cyberattack hits more than 30 Minnesota water utilities Read More »
US, Australia Release OT Isolation Guidance for Critical Infrastructure 2026-07-29 at 13:58 By Ionut Arghire The guidance details steps organizations can take to isolate vital OT and supporting systems, and operate in isolation for an extended period. The post US, Australia Release OT Isolation Guidance for Critical Infrastructure appeared first on SecurityWeek. This article is […]
US, Australia Release OT Isolation Guidance for Critical Infrastructure Read More »