Tag: operational technology
138 articles
Hackers Exploit Refrigeration Systems in 700+ Retailers
Cyberattacks on retailers just got a whole lot chillier - literally, as hackers exploited refrigeration systems in over 700 stores, causing food spoilage, fires, and massive losses. By breaching outdated software, attackers remotely cranked up temperatures to as high as 122°F, leaving a trail of destruction in their wake.
AI Systems Expose Infrastructure to Nightmare Attacks
AI systems are capable of unleashing devastating nightmare attacks on our infrastructure, and the alarming truth is that we're woefully unprepared. The threat is real, and it's only a matter of time before we face the consequences.
AI Models Expose Vulnerability of Critical Infrastructure to Cyberattacks
AI-powered attacks can now outmaneuver traditional defenses, putting critical infrastructure at risk of devastating breaches if essential cybersecurity practices aren't in place. Advanced AI models have been shown to execute complex attacks with alarming speed and precision, outpacing organizations that haven't implemented robust OT cybersecurity measures.
CISA Warns of Flax Typhoon Exploiting Five Vulnerabilities
Chinese government-affiliated hackers, known as Flax Typhoon, are exploiting five newly identified vulnerabilities to gain a foothold in critical infrastructure networks, including operational technology systems, with the potential to disrupt essential functions at a later time. This has prompted CISA to add these flaws to its Known Exploited Vulnerabilities catalog, triggering a federal remediation requirement.
Coalition Pushes CISA for Mandatory OT Security Rules
The Operational Technology Cybersecurity Coalition is urging CISA to set mandatory security rules for operational technology used in over 8,000 federal facilities, including labs, hospitals, and ports, to protect critical systems like HVAC, power, and water. A binding directive would establish much-needed minimum security practices for federal OT systems.
Coalition Urges CISA to Mandate OT Security Standards for Agencies
The Operational Technology Cybersecurity Coalition is urging CISA to set mandatory OT security standards for federal agencies, ensuring the government practices what it preaches when it comes to cybersecurity. By doing so, agencies will have clear responsibility for OT cybersecurity and a baseline for protection.
Hackers Breach US-Bound Oil Supertanker's Propulsion System
A cyberattack on a US-bound oil supertanker, the VL Prosperity, sparked a swift response from the FBI and US Coast Guard, who boarded the vessel to investigate a suspected network breach. The incident raised concerns about the security of critical maritime infrastructure.
Tax Policy Targets Threat Actors Breaching US Water Systems
A small town's entire 2023 revenue was just $3.37 million, yet it had zero budget for cybersecurity - a stark reality that highlights the vulnerability of US water systems to threat actors.
Municipal Utility Cyberattack Exposes Infrastructure Vulnerabilities
A recent cyberattack on municipal utility Stadtwerke Landsberg highlights the importance of separating business IT networks from operational technology to prevent widespread disruptions. Thanks to robust segmentation, the utility's core services remained online, avoiding a costly service outage.
Operational Technology Exposes AI's Cybersecurity Weak Point
With over 3,000 cyber incidents recorded in Ukraine in the first half of 2025 alone, it's clear that even the most critical infrastructure - from hospitals to energy systems - is vulnerable to devastating attacks. This alarming trend highlights a glaring weak point in our cybersecurity defenses, one that's being exploited by hostile forces with alarming precision.
CISA Warns Against PR Spin in IT Outages
When IT outages strike, clear communication is key - and that means ditching the PR spin and getting straight to the facts. The CISA and FBI recommend a straightforward approach: provide regular, transparent updates that separate knowns from unknowns.
Utilities Face Unseen Network Threats
The water and wastewater sector is under attack, with over 100 compromised systems identified in July alone, often due to vulnerable controllers linked directly to cellular modems. This alarming trend has prompted joint warnings from CISA, the FBI, and the EPA, highlighting the urgent need for utilities to bolster their network defenses.
US Air Force Accelerates Innovation with Modernization-as-a-Service
Meet the Kessel Run team, the US Air Force's elite unit tasked with delivering cutting-edge operational air power to protect and defend the nation. Led by Col. Richard Lopez, this innovative team is revolutionizing the way the Air Force approaches modernization with a bold, modern approach.
Cyberattack on Texas Battery Fleet Threatens Grid Stability
A shocking 92% of battery infrastructure is likely to face a notable cyberattack by 2031, putting millions of lives at risk. Compromising just 1,500 battery units, or 5.4% of Texas' battery fleet, could destabilize the entire grid, impacting 30 million people and causing up to $65 billion in economic damages.
US Cyber Defenses Targeted in 100-Plus Water System Attacks
In a shocking revelation, over 100 US water and wastewater systems were targeted by malicious cyber attacks in just one month, with hackers commonly exploiting programmable logic controllers connected to cellular modems. This alarming trend highlights the vulnerability of critical infrastructure to cyber threats.
US Water Systems Targeted in Surge of Cyberattacks
In a shocking revelation, over 100 internet-exposed US water systems were hit with cyberattacks in just one month, highlighting a systemic risk that demands immediate attention. This alarming surge in targeted attacks has raised serious concerns about the security of America's water sector.
US Warns of AI-Powered Attacks on Siemens PLCs
The US government has issued a stark warning: hackers are harnessing the power of artificial intelligence to launch targeted attacks on vulnerable Siemens PLCs, critical infrastructure devices used in water, energy, and manufacturing sectors. This is no hypothetical threat - it's a very real and active danger.
Iranian Hackers Expose UK Power Plant Vulnerability
Can a UK power plant vulnerability leave millions in the dark? Iranian hackers recently caused a four-day blackout at an unnamed UK facility, raising concerns about the potential for a larger, more critical attack.
AI-Generated Scripts Target Siemens PLCs in US Critical Infrastructure
The US government has issued a warning about an active threat targeting critical infrastructure organizations, where hackers are using artificial intelligence to create exploit scripts that target industrial programmable logic controllers, specifically Siemens S7 Series PLCs. This AI-assisted attack has the potential to affect a wide range of industries and is not limited to Siemens PLCs.
US Agencies Warn Siemens PLC Operators of AI-Driven Attacks
US agencies are sounding the alarm: hackers are now using artificial intelligence to launch targeted attacks on Siemens PLC operators, making it easier for them to breach industrial systems. This emerging threat has prompted a joint warning from CISA, the FBI, and partner agencies.
Feds Warn of AI-Generated Code Threat to Critical Infrastructure Controllers
The feds have issued a dire warning: AI-generated code is being used to actively threaten critical infrastructure controllers, putting industries like water, energy, and manufacturing at risk. This is a very real and present danger, not just a hypothetical threat.
US Agencies Warn of AI-Driven Attacks on Siemens PLCs
US agencies have sounded the alarm on a growing threat: hackers are using artificial intelligence to launch automated attacks on critical infrastructure, including factories, power plants, and water systems, by targeting Siemens PLCs. This active threat has prompted a joint warning from the NSA, CISA, FBI, Department of Energy, and Environmental Protection Agency.
Russian Hackers Breach Polish Power Plant via Private APN
In a chilling cyberattack, Russian hackers infiltrated a Polish power plant by breaching a wind farm's VPN and firewall, then exploited a cellular router to gain control of the plant's systems. The attackers forced a combined heat and power plant into a controlled shutdown, overriding its operations with a password-protected lock.
Thousands of U.S. Water System Controllers Remain Exposed Online
A recent scan revealed over 4,000 vulnerable water system controllers exposed to the public internet, including 22 in cities that have already faced cyberattacks on their water and wastewater systems. This alarming discovery highlights the urgent need for increased security measures to protect these critical systems.