critical infrastructure

Your security program knows about the firewall, but does it know about the elevator?

critical infrastructure, cybersecurity, Don't miss, hardware, Honeywell, IIoT, Internet of Things, News, report /

Your security program knows about the firewall, but does it know about the elevator? 2026-09-24 at 07:30 By Anamarija Pogorelec By early August, attackers had hit water systems in at least seven U.S. states. The FBI and EPA said the intruders remotely accessed internet-facing programmable logic controllers, the small industrial computers that run pumps and […]

Your security program knows about the firewall, but does it know about the elevator? Read More »

CISA wants critical infrastructure orgs and smaller security teams to start using cyber decoys

CISA, critical infrastructure, deception, Don't miss, guide, honeypots, News, SMBs /

CISA wants critical infrastructure orgs and smaller security teams to start using cyber decoys 2026-09-17 at 15:51 By Zeljka Zorz Cyber deception has long been the domain of well-resourced security teams, but CISA’s latest guidance, titled “Using Cyber Decoys to Strengthen Detection and Response”, is an attempt to try and change that. Why decoys, and […]

CISA wants critical infrastructure orgs and smaller security teams to start using cyber decoys Read More »

CenterPoint Energy confirms data breach following claims on hacking forum

breach, critical infrastructure, cybercrime, data breach, News /

CenterPoint Energy confirms data breach following claims on hacking forum 2026-09-16 at 13:35 By Sinisa Markovic CenterPoint Energy disclosed that an unauthorized third party got into customer data through one of its external systems, after online claims by a hacker that millions of records had been stolen from the company. CenterPoint Energy is a Houston-based […]

CenterPoint Energy confirms data breach following claims on hacking forum Read More »

Turn it off and on again, but for critical infrastructure

agentic AI, critical infrastructure, cybersecurity, Don't miss, Hot stuff, ICS/SCADA, News, research /

Turn it off and on again, but for critical infrastructure 2026-09-14 at 09:00 By Anamarija Pogorelec Researchers at KTH Royal Institute of Technology built a container replica of a segmented industrial network, attacked it repeatedly across 14 days of running time, and used the captured traffic to train a defense agent that decides on its […]

Turn it off and on again, but for critical infrastructure Read More »

A battery storage cyberattack would look exactly like a badly tuned controller

critical infrastructure, Don't miss, Europe, Features, Hot stuff, News, research, Risk Management, smart grid, storage, UK /

A battery storage cyberattack would look exactly like a badly tuned controller 2026-09-02 at 12:00 By Mirko Zorz Batteries connected to the grid make money by reacting to frequency, pushing power out when it sags and soaking it up when it rises. A few hundred of them moving together, on command from someone who should […]

A battery storage cyberattack would look exactly like a badly tuned controller Read More »

Suspected Iran-linked attack knocked UK power plant offline for days

critical infrastructure, cyberattack, Don't miss, energy sector, Hot stuff, News, UK, UK NCSC /

Suspected Iran-linked attack knocked UK power plant offline for days 2026-08-24 at 17:22 By Zeljka Zorz News that suspected Iranian hackers caused the shutdown of a British power plant broke over the weekend, raising the question of whether UK’s power grid and, indeed, the country’s critical infrastructure can fend off destructive cyber attacks. According to […]

Suspected Iran-linked attack knocked UK power plant offline for days Read More »

CISA’s logging guidance works beyond government

CISA, critical infrastructure, Don't miss, enterprise, Government, guidelines, Hot stuff, logging, News, USA /

CISA’s logging guidance works beyond government 2026-08-24 at 13:56 By Zeljka Zorz The US Cybersecurity and Infrastructure Security Agency (CISA) wants federal agencies to (re)shape their logging strategy around one question: when an attack hits, can you actually use the logs you’ve collected to catch it and reconstruct what happened afterward? The Logging Reference Architecture […]

CISA’s logging guidance works beyond government Read More »

US agencies warn of AI-powered attacks on Siemens industrial controllers

AI, CISA, critical infrastructure, FBI, News, NSA, Siemens /

US agencies warn of AI-powered attacks on Siemens industrial controllers 2026-08-20 at 12:07 By Sinisa Markovic Threat actors are using AI to write exploit scripts targeting internet-exposed Siemens S7 Series programmable logic controllers (PLCs) used across water, energy, manufacturing, and other critical infrastructure sectors, according to US federal agencies. PLCs are the small industrial computers […]

US agencies warn of AI-powered attacks on Siemens industrial controllers Read More »

Ransomware gangs don’t need control system access to disrupt industrial production

critical infrastructure, Dragos, News, Ransomware /

Ransomware gangs don’t need control system access to disrupt industrial production 2026-08-11 at 12:32 By Sinisa Markovic Disrupting IT systems that support industrial environments can be enough to interrupt production, even when ransomware operators do not gain direct access to industrial control systems (ICS), according to Dragos. The company identified 1,140 ransomware incidents involving industrial […]

Ransomware gangs don’t need control system access to disrupt industrial production Read More »

Previously unseen entry vector used to breach Polish energy plant

CERT-PL, critical infrastructure, cyberattack, energy sector, EU, News, poland /

Previously unseen entry vector used to breach Polish energy plant 2026-08-11 at 08:00 By Sinisa Markovic The December 29 cyberattack on a Polish combined heat and power (CHP) plant was the first observed case of attackers gaining access to an OT network through a private APN, according to CERT Polska. The private APN is a […]

Previously unseen entry vector used to breach Polish energy plant Read More »

US fuel gauge exposure fell by more than half in three months

BitSight, CISA, critical infrastructure, Don't miss, hardware, ICS/SCADA, Iran, News, report, USA /

US fuel gauge exposure fell by more than half in three months 2026-08-07 at 08:00 By Anamarija Pogorelec Every month for the better part of a year, about 4,800 US internet addresses answered a query in the protocol that fuel tank gauges speak. In June the number was 2,354. The count fell across April, May, […]

US fuel gauge exposure fell by more than half in three months Read More »

What stops attackers wrecking industrial plants is knowing how

AI, Anthropic, Cato Networks, Check Point, CISA, critical infrastructure, cybercrime, cybersecurity, Darktrace, Don't miss, Dragos, FBI, Hot stuff, ICS/SCADA, Israel, Kaspersky, LLMs, News, report, SentinelOne, Symantec, Threat Intelligence /

What stops attackers wrecking industrial plants is knowing how 2026-08-05 at 07:30 By Mirko Zorz Engineers at an Israeli food producer spent most of a week rebuilding a refrigeration system after an intruder switched the gas cooler and receiver valves to manual and pinned them open. Liquid CO2 flooded the compressors and destroyed them. The […]

What stops attackers wrecking industrial plants is knowing how Read More »

Coordinated cyberattack hits more than 30 Minnesota water utilities

CISA, critical infrastructure, cyber resilience, cyberattack, News, Tenable, USA /

Coordinated cyberattack hits more than 30 Minnesota water utilities 2026-07-30 at 11:59 By Sinisa Markovic A coordinated cyberattack on July 26 and 27 hit operational technology (OT) systems at more than 30 community water utilities across Minnesota, prompting an immediate response from Minnesota IT Services (MNIT) to contain the threat. MNIT confirmed the attack in […]

Coordinated cyberattack hits more than 30 Minnesota water utilities Read More »

US, Australia Release OT Isolation Guidance for Critical Infrastructure 

critical infrastructure, guidance, ICS, ICS/OT, isolation, OT, Risk Management /

US, Australia Release OT Isolation Guidance for Critical Infrastructure  2026-07-29 at 13:58 By Ionut Arghire The guidance details steps organizations can take to isolate vital OT and supporting systems, and operate in isolation for an extended period. The post US, Australia Release OT Isolation Guidance for Critical Infrastructure  appeared first on SecurityWeek. This article is […]

US, Australia Release OT Isolation Guidance for Critical Infrastructure  Read More »

Cloudflare reveals what’s behind major internet outages

Cloudflare, critical infrastructure, News, report, traffic monitoring /

Cloudflare reveals what’s behind major internet outages 2026-07-29 at 13:20 By Sinisa Markovic Storms, earthquakes, and infrastructure failures disrupted internet access throughout the second quarter, while governments deliberately shut networks down, according to Cloudflare’s latest Internet Disruption Summary. Based on Cloudflare Radar traffic data, the report covers internet disruptions recorded between April and June 2026. […]

Cloudflare reveals what’s behind major internet outages Read More »

The energy sector’s OT cybersecurity talent is retiring faster than it can be replaced

Asimily, backup, CISO, critical infrastructure, cyber resilience, cyber risk, cybersecurity, Don't miss, Dragos, Features, Hexnode, Hot stuff, Insurance, Internet of Things, News, opinion, Risk Management, strategy, supply chain, tips, Waterfall Security Solutions /

The energy sector’s OT cybersecurity talent is retiring faster than it can be replaced 2026-07-29 at 08:30 By Mirko Zorz A ransomware hit lands a chemical plant in a safe state. Nobody is hurt, the site holds steady, and the operators begin the restart. The systems stay down. Every attempt to bring them online meets […]

The energy sector’s OT cybersecurity talent is retiring faster than it can be replaced Read More »

Swiss rail manufacturer Stadler refuses to pay $12.3 million ransom after cyberattack

critical infrastructure, data breach, EU, News, Ransomware /

Swiss rail manufacturer Stadler refuses to pay $12.3 million ransom after cyberattack 2026-07-23 at 11:54 By Sinisa Markovic Cybercriminal group Everest is demanding 10 million Swiss francs ($12.3 million) from Swiss rail vehicle manufacturer Stadler after breaching a data exchange platform shared with one of its suppliers through compromised credentials. Stadler operates 16 production and […]

Swiss rail manufacturer Stadler refuses to pay $12.3 million ransom after cyberattack Read More »

SecurityWeek Launches Critical Impact Awards to Recognize Excellence in Industrial Cybersecurity

critical infrastructure, ICS, ICS/OT, Industrial Cybersecurity, OT, SCADA /

SecurityWeek Launches Critical Impact Awards to Recognize Excellence in Industrial Cybersecurity 2026-07-21 at 15:30 By SecurityWeek News Independently judged and sponsor-neutral, the new awards program honors the people, organizations, and technologies delivering proven impact in industrial cybersecurity; winners to be announced live at the 2026 ICS Cybersecurity Conference in Nashville The post SecurityWeek Launches Critical […]

SecurityWeek Launches Critical Impact Awards to Recognize Excellence in Industrial Cybersecurity Read More »

The air gap is a myth and other OT security truths

CISO, critical infrastructure, cyber resilience, Don't miss, energy sector, Features, Hot stuff, interoperability, News, opinion, Risk Management, strategy, threat modeling, tips /

The air gap is a myth and other OT security truths 2026-07-21 at 09:00 By Mirko Zorz Benjamin Bachmann, Director Group Information Security at Bilfinger, speaks with Help Net Security about defending industrial plants. He explains why attackers want to control operations instead of stealing data, and why the air gap is mostly a myth. […]

The air gap is a myth and other OT security truths Read More »

White House Launches AI-Driven ‘Gold Eagle’ Vulnerability Coordination Initiative

AI, Artificial Intelligence, critical infrastructure, Featured, Gold Eagle, Government, Government Policy, vulnerability management, White House /

White House Launches AI-Driven ‘Gold Eagle’ Vulnerability Coordination Initiative 2026-07-15 at 13:18 By Eduard Kovacs The new program stems from an AI-focused Executive Order signed by President Trump on June 2. The post White House Launches AI-Driven ‘Gold Eagle’ Vulnerability Coordination Initiative appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original […]

White House Launches AI-Driven ‘Gold Eagle’ Vulnerability Coordination Initiative Read More »

Scroll to Top