Tag: industrial control systems
159 articles
Malware Targets Water Treatment Systems with Sabotage Capabilities
Meet ZionSiphon, a new and alarming type of malware designed to sabotage water treatment systems by stopping the flow of water, posing a significant threat to operational technology in these environments. This malicious software is purpose-built to disrupt, rather than spy or steal, highlighting a chilling new risk for the industry.
Industrial Automation Systems Face Rising Cyber Threats Globally
As cyber threats escalate globally, industrial automation systems are becoming a prime target, leaving factories and control rooms vulnerable to attack - but who's sounding the alarm and answering the call? A recent industry snapshot for Q4 2025 sheds light on the rising threat landscape, revealing key infection vectors, malware trends, and regional hotspots.
Venice Flood Defenses Breached by Hackers
Imagine a city's defenses against its greatest threat - water - being breached not by a natural disaster, but by an unknown cyber attacker. In a chilling turn of events, hackers have infiltrated Venice's hydraulic pump system, claiming they can wield the power to create floods at will.
Iranian Hackers Target Thousands of US Industrial Devices
Thousands of US industrial devices, including programmable logic controllers made by Rockwell Automation, have been targeted by Iranian-linked hackers, raising concerns about the vulnerability of critical infrastructure networks. This cyber campaign highlights the alarming risk to the networks we rely on every day.
OT Cybersecurity Sector Fears AI Exclusion
As artificial intelligence revolutionizes software security, the operational technology cybersecurity sector is sounding the alarm: will experts who safeguard factories, grids, and industrial sites be left behind? Pure-play OT security firms are pushing for a seat at the table, fearing they may be sidelined by the latest AI-driven initiatives.
Iranian Hackers Infiltrate US Critical Infrastructure via OT Weaknesses
US critical infrastructure providers are reeling from a wake-up call after Iranian-backed hackers exploited weaknesses in internet-exposed operational technology assets, causing disruption and financial loss. The alarming breach, revealed by the Cybersecurity and Infrastructure Security Agency, highlights the high stakes of vulnerable systems.
Iran-Linked Hackers Target Internet-Exposed PLCs in US Infrastructure
Iran-affiliated hackers are launching targeted cyber attacks on internet-exposed devices controlling US critical infrastructure, including power plants, water systems, and manufacturing lines. This urgent threat requires immediate attention to protect vulnerable systems from devastating intrusions that can diminish functionality and manipulate operations.
Iran-Backed Hackers Infiltrate US Industrial Controls
US cyber and intelligence agencies have sounded the alarm: pro-Iran hackers have infiltrated and disrupted critical US infrastructure, including water and energy systems, posing a pressing threat to national security. These foreign actors have breached government networks and industrial controls, sparking urgent concerns about the vulnerability of America's essential services.
Feds Warn of Iranian Cyberattacks on US Energy, Water Systems
US government agencies have issued an urgent warning that Iranian hackers are launching targeted cyberattacks on America's energy and water infrastructure, posing a serious threat to the communities that rely on them. These attacks have already caused harm to victims in the past month, highlighting the need for immediate vigilance.
Iranian Actors Exploit OT Vulnerabilities in US Critical Infrastructure
US critical infrastructure is under threat as Iranian-linked actors exploit vulnerabilities in operational technology (OT) systems, allowing them to gain network access and potentially disrupt operations. The alarming warning from federal agencies highlights the urgent need to secure the nation's industrial backbone from these increasingly targeted attacks.
US Warns of Iranian Hackers Targeting Exposed Industrial Controls
When devices that connect our physical and digital worlds are left exposed to the public internet, they become an open invitation for hackers - and Iranian-linked cybercriminals are now actively targeting Internet-exposed industrial control systems, specifically Rockwell/Allen-Bradley programmable logic controllers, in US critical infrastructure organizations.
OT Attacks Threaten £5m Downtime Hit on CNI Firms
A single cyberattack on operational technology systems could cripple critical infrastructure providers, causing up to £5m in downtime losses and days of operational paralysis. For organisations that underpin essential services, the stakes have never been higher.
UK Manufacturers Face Rampant Cyberattacks, ESET Report Finds
UK manufacturers are under siege, with a staggering eight in ten experiencing a cyberattack in the past year, resulting in financial losses and a growing sense of vulnerability. As our critical infrastructure comes under threat, the question on everyone's mind is: how long before the chaos spills into our daily lives?
UK Manufacturers Hit by Widespread Cyberattacks
UK manufacturers are under attack, with nearly 80 percent experiencing a cyber incident in the past year, causing factory outages, lost revenue, and supply chain disruption. As cyber threats increasingly target the machines that keep production lines moving, manufacturers face a harsh reality: one devastating breach can bring their entire operation to a grinding halt.
Critical Railroad Cybersecurity Threats Demand Urgent Attention
With millions of people and billions of dollars' worth of goods relying on America's rail network daily, the risk of cyberattacks poses a critical threat that demands immediate attention and robust security measures. The nation's economic stability is at stake, making it essential to safeguard this vital infrastructure from disruption.
CISA Exclusive: Critical XSS in OpenPLC ScadaBR
CISA has added an actively exploited XSS (CVE‑2021‑26829) in OpenPLC ScadaBR to its KEV catalog — a stark reminder that even “moderate” web bugs can let attackers hijack operator sessions and issue commands to PLCs. If you run OpenPLC/ScadaBR, prioritize assessment and mitigation now.
Google Forecasts Stunning 2026 EU Cyber-Physical Threats
Google warns Europe is likely to face a surge of cyber-physical attacks in 2026 — digital intrusions paired with disinformation that could disrupt power, transport and industry. With legacy control systems, rushed digitization and weak third-party security widening the attack surface, now’s the time to shore up defenses.
JLR Hack: Stunning, Devastating £1.9bn Hit to UK
Who knew the silence of a factory could cost billions? A cyber-attack on Jaguar Land Rover knocked production and deliveries about 25%—a blow analysts put at roughly £1.9bn—as disrupted IT systems rippled through factories, supply chains and dealer networks.
Critical infrastructure: Must-Have Best Defenses
When budgets fall short but threats keep coming, operators must spend smart—prioritize asset visibility, segmentation, access controls and practiced response to get the biggest risk reduction per dollar. With focused basics, shared services and available grants, even small utilities can dramatically shrink their attack surface and speed recovery.
industrial control systems: Stunning Risky Honeypot Exposed
Researchers built a realistic fake water-utility honeypot that fooled a pro‑Russia hacktivist crew into bragging about an attack, revealing how online bravado can mask real impact while letting defenders safely harvest vital intelligence. The quiet takedown highlights both the power of deception to strengthen critical‑infrastructure security and the tricky legal and ethical questions it raises.
water utility attack: Exclusive Risky Honeypot Revelation
Security researchers watched a pro‑Russia hacktivist group walk straight into a lifelike water‑utility honeypot, giving defenders a rare, risk‑free look at their reconnaissance and tools. That intel shows how deception can turn attacker curiosity into actionable defenses—vital for protecting water systems that, if disrupted, could threaten public safety.
OT security Must-Have: Best International Standard
National cyber authorities from the Five Eyes, Germany and the Netherlands have unveiled a coordinated OT security standard to help protect the industrial systems that run our power, water and factories from disruptive, safety‑threatening attacks. If paired with funding and industry buy‑in, this practical guidance could finally turn years of OT neglect into measurable resilience—otherwise it risks staying on paper while attackers probe the weakest links.
ransomware attack Devastating: Must-Have Supplier Resilience
When Data I/O took systems offline after a ransomware attack, it showed how a single supplier can ripple delays through entire production lines — a wake-up call for manufacturers to shore up supplier cyber-hygiene, backups, and contingency plans before the next outage.
OT security taxonomy: Must-Have, Best Defense Framework
Imagine industrial control systems finally speaking the same security language — the US and five partners unveiled a unified OT taxonomy and common asset inventory to cut through confusion, speed incident response, and make cross-border coordination far easier. If widely adopted, this shared framework could turn fragmented asset lists into actionable data, helping operators and defenders act faster when it matters most.