critical infrastructure

US agencies warn of AI-powered attacks on Siemens industrial controllers

AI, CISA, critical infrastructure, FBI, News, NSA, Siemens /

US agencies warn of AI-powered attacks on Siemens industrial controllers 2026-08-20 at 12:07 By Sinisa Markovic Threat actors are using AI to write exploit scripts targeting internet-exposed Siemens S7 Series programmable logic controllers (PLCs) used across water, energy, manufacturing, and other critical infrastructure sectors, according to US federal agencies. PLCs are the small industrial computers […]

US agencies warn of AI-powered attacks on Siemens industrial controllers Read More »

Ransomware gangs don’t need control system access to disrupt industrial production

critical infrastructure, Dragos, News, Ransomware /

Ransomware gangs don’t need control system access to disrupt industrial production 2026-08-11 at 12:32 By Sinisa Markovic Disrupting IT systems that support industrial environments can be enough to interrupt production, even when ransomware operators do not gain direct access to industrial control systems (ICS), according to Dragos. The company identified 1,140 ransomware incidents involving industrial

Ransomware gangs don’t need control system access to disrupt industrial production Read More »

Previously unseen entry vector used to breach Polish energy plant

CERT-PL, critical infrastructure, cyberattack, energy sector, EU, News, poland /

Previously unseen entry vector used to breach Polish energy plant 2026-08-11 at 08:00 By Sinisa Markovic The December 29 cyberattack on a Polish combined heat and power (CHP) plant was the first observed case of attackers gaining access to an OT network through a private APN, according to CERT Polska. The private APN is a

Previously unseen entry vector used to breach Polish energy plant Read More »

US fuel gauge exposure fell by more than half in three months

BitSight, CISA, critical infrastructure, Don't miss, hardware, ICS/SCADA, Iran, News, report, USA /

US fuel gauge exposure fell by more than half in three months 2026-08-07 at 08:00 By Anamarija Pogorelec Every month for the better part of a year, about 4,800 US internet addresses answered a query in the protocol that fuel tank gauges speak. In June the number was 2,354. The count fell across April, May,

US fuel gauge exposure fell by more than half in three months Read More »

What stops attackers wrecking industrial plants is knowing how

AI, Anthropic, Cato Networks, Check Point, CISA, critical infrastructure, cybercrime, cybersecurity, Darktrace, Don't miss, Dragos, FBI, Hot stuff, ICS/SCADA, Israel, Kaspersky, LLMs, News, report, SentinelOne, Symantec, Threat Intelligence /

What stops attackers wrecking industrial plants is knowing how 2026-08-05 at 07:30 By Mirko Zorz Engineers at an Israeli food producer spent most of a week rebuilding a refrigeration system after an intruder switched the gas cooler and receiver valves to manual and pinned them open. Liquid CO2 flooded the compressors and destroyed them. The

What stops attackers wrecking industrial plants is knowing how Read More »

Coordinated cyberattack hits more than 30 Minnesota water utilities

CISA, critical infrastructure, cyber resilience, cyberattack, News, Tenable, USA /

Coordinated cyberattack hits more than 30 Minnesota water utilities 2026-07-30 at 11:59 By Sinisa Markovic A coordinated cyberattack on July 26 and 27 hit operational technology (OT) systems at more than 30 community water utilities across Minnesota, prompting an immediate response from Minnesota IT Services (MNIT) to contain the threat. MNIT confirmed the attack in

Coordinated cyberattack hits more than 30 Minnesota water utilities Read More »

US, Australia Release OT Isolation Guidance for Critical Infrastructure 

critical infrastructure, guidance, ICS, ICS/OT, isolation, OT, Risk Management /

US, Australia Release OT Isolation Guidance for Critical Infrastructure  2026-07-29 at 13:58 By Ionut Arghire The guidance details steps organizations can take to isolate vital OT and supporting systems, and operate in isolation for an extended period. The post US, Australia Release OT Isolation Guidance for Critical Infrastructure  appeared first on SecurityWeek. This article is

US, Australia Release OT Isolation Guidance for Critical Infrastructure  Read More »

Cloudflare reveals what’s behind major internet outages

Cloudflare, critical infrastructure, News, report, traffic monitoring /

Cloudflare reveals what’s behind major internet outages 2026-07-29 at 13:20 By Sinisa Markovic Storms, earthquakes, and infrastructure failures disrupted internet access throughout the second quarter, while governments deliberately shut networks down, according to Cloudflare’s latest Internet Disruption Summary. Based on Cloudflare Radar traffic data, the report covers internet disruptions recorded between April and June 2026.

Cloudflare reveals what’s behind major internet outages Read More »

The energy sector’s OT cybersecurity talent is retiring faster than it can be replaced

Asimily, backup, CISO, critical infrastructure, cyber resilience, cyber risk, cybersecurity, Don't miss, Dragos, Features, Hexnode, Hot stuff, Insurance, Internet of Things, News, opinion, Risk Management, strategy, supply chain, tips, Waterfall Security Solutions /

The energy sector’s OT cybersecurity talent is retiring faster than it can be replaced 2026-07-29 at 08:30 By Mirko Zorz A ransomware hit lands a chemical plant in a safe state. Nobody is hurt, the site holds steady, and the operators begin the restart. The systems stay down. Every attempt to bring them online meets

The energy sector’s OT cybersecurity talent is retiring faster than it can be replaced Read More »

Swiss rail manufacturer Stadler refuses to pay $12.3 million ransom after cyberattack

critical infrastructure, data breach, EU, News, Ransomware /

Swiss rail manufacturer Stadler refuses to pay $12.3 million ransom after cyberattack 2026-07-23 at 11:54 By Sinisa Markovic Cybercriminal group Everest is demanding 10 million Swiss francs ($12.3 million) from Swiss rail vehicle manufacturer Stadler after breaching a data exchange platform shared with one of its suppliers through compromised credentials. Stadler operates 16 production and

Swiss rail manufacturer Stadler refuses to pay $12.3 million ransom after cyberattack Read More »

SecurityWeek Launches Critical Impact Awards to Recognize Excellence in Industrial Cybersecurity

critical infrastructure, ICS, ICS/OT, Industrial Cybersecurity, OT, SCADA /

SecurityWeek Launches Critical Impact Awards to Recognize Excellence in Industrial Cybersecurity 2026-07-21 at 15:30 By SecurityWeek News Independently judged and sponsor-neutral, the new awards program honors the people, organizations, and technologies delivering proven impact in industrial cybersecurity; winners to be announced live at the 2026 ICS Cybersecurity Conference in Nashville The post SecurityWeek Launches Critical

SecurityWeek Launches Critical Impact Awards to Recognize Excellence in Industrial Cybersecurity Read More »

The air gap is a myth and other OT security truths

CISO, critical infrastructure, cyber resilience, Don't miss, energy sector, Features, Hot stuff, interoperability, News, opinion, Risk Management, strategy, threat modeling, tips /

The air gap is a myth and other OT security truths 2026-07-21 at 09:00 By Mirko Zorz Benjamin Bachmann, Director Group Information Security at Bilfinger, speaks with Help Net Security about defending industrial plants. He explains why attackers want to control operations instead of stealing data, and why the air gap is mostly a myth.

The air gap is a myth and other OT security truths Read More »

White House Launches AI-Driven ‘Gold Eagle’ Vulnerability Coordination Initiative

AI, Artificial Intelligence, critical infrastructure, Featured, Gold Eagle, Government, Government Policy, vulnerability management, White House /

White House Launches AI-Driven ‘Gold Eagle’ Vulnerability Coordination Initiative 2026-07-15 at 13:18 By Eduard Kovacs The new program stems from an AI-focused Executive Order signed by President Trump on June 2. The post White House Launches AI-Driven ‘Gold Eagle’ Vulnerability Coordination Initiative appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original

White House Launches AI-Driven ‘Gold Eagle’ Vulnerability Coordination Initiative Read More »

US, Allies Warn of Russian Cyberattacks Targeting Critical Infrastructure Routers

APT, critical infrastructure, Government, Nation-State, router, Russia /

US, Allies Warn of Russian Cyberattacks Targeting Critical Infrastructure Routers 2026-07-14 at 13:51 By Ionut Arghire Multiple state-sponsored APTs are compromising poorly secured devices across critical infrastructure sector networks. The post US, Allies Warn of Russian Cyberattacks Targeting Critical Infrastructure Routers appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

US, Allies Warn of Russian Cyberattacks Targeting Critical Infrastructure Routers Read More »

Critical open-source projects get a new security framework

AI, critical infrastructure, cybersecurity, News, open source, software development, The Linux Foundation /

Critical open-source projects get a new security framework 2026-06-26 at 14:41 By Anamarija Pogorelec Open source software projects are getting a new framework for handling security vulnerabilities as AI shortens the time between flaw discovery and exploitation. The Linux Foundation has launched Akrites, an industry initiative that brings together technology companies, financial institutions, security vendors,

Critical open-source projects get a new security framework Read More »

74,000 Fortinet firewall credentials exposed in FortiBleed data leak

credentials, critical infrastructure, Data leak, data theft, Don't miss, enterprise, firewall, Fortinet, Government, Hot stuff, Hudson Rock, News, VPN /

74,000 Fortinet firewall credentials exposed in FortiBleed data leak 2026-06-18 at 15:10 By Zeljka Zorz A Russian-speaking cybercriminal group has stolen credentials contained in the configuration files of nearly 74,000 Fortinet firewalls and VPN gateways around the world. The data was accidentally exposed by the group on a server, along with other artifacts and tools,

74,000 Fortinet firewall credentials exposed in FortiBleed data leak Read More »

The checklist problem behind critical infrastructure cyber safety

asset discovery, Compliance, critical infrastructure, cyber resilience, cyber risk, cybersecurity, Don't miss, Government, ICS/SCADA, News, policy, regulation, research, USA /

The checklist problem behind critical infrastructure cyber safety 2026-06-17 at 07:00 By Anamarija Pogorelec An asset owner can meet major federal cyber compliance standards and still run equipment that lacks the engineering to withstand an attack or a failure. New research from George Mason University examines how United States cyber policy defines reasonable care for

The checklist problem behind critical infrastructure cyber safety Read More »

CISA: Critical Infrastructure Must Master Isolation, Recovery

CI Fortify, CISA, critical infrastructure, Government, guidance, ICS/OT, Incident Response, isolation, OT, recovery /

CISA: Critical Infrastructure Must Master Isolation, Recovery 2026-05-06 at 16:42 By Eduard Kovacs The agency has issued guidance to help critical infrastructure operators prepare for cyberattacks by foreign threat actors. The post CISA: Critical Infrastructure Must Master Isolation, Recovery appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

CISA: Critical Infrastructure Must Master Isolation, Recovery Read More »

Iranian cyber activity hits US energy, water, and government networks

CISA, critical infrastructure, cybersecurity, energy sector, FBI, Government, News, NIST, NSA /

Iranian cyber activity hits US energy, water, and government networks 2026-04-08 at 15:06 By Anamarija Pogorelec U.S. government agencies on Tuesday warned American organizations about ongoing cyber activity targeting OT and PLC devices, including those manufactured by Rockwell Automation and Allen-Bradley, across multiple critical infrastructure sectors. The activity has been attributed to Iranian-affiliated APT actors

Iranian cyber activity hits US energy, water, and government networks Read More »

Researchers release tool to detect stealthy BPFDoor implants in critical infrastructure networks

backdoor, critical infrastructure, Don't miss, Hot stuff, Linux, Malware, News, Rapid7, remote access, telecommunications /

Researchers release tool to detect stealthy BPFDoor implants in critical infrastructure networks 2026-03-26 at 15:52 By Zeljka Zorz Telecommunications providers around the world have been dealing with the burrowing efforts of the China-linked APTs for many years now. To help them identify hard-to-detect implants used by the China-based group dubbed Red Menshen, Rapid7 researchers have

Researchers release tool to detect stealthy BPFDoor implants in critical infrastructure networks Read More »

Scroll to Top