Archive

CVE-2024-2658 vulnerability in Schneider Electric software: risks to industrial control systems  Securelist

First-Ever Exploitation of PTC Windchill Vulnerability Discovered in the Wild  SecurityWeek

First-Ever Exploitation of PTC Windchill Vulnerability Discovered in the Wild  SecurityWeek

Lantronix Serial-to-IP Converter Flaw Exploited in Attacks After OT Threat Warning  SecurityWeek

Attackers Exploit Gravity SMTP Plugin Flaw to Harvest Valuable WordPress Data  SecurityWeek

Splunk Enterprise Vulnerability Exploited in Attacks Days After Disclosure  SecurityWeek

Splunk Enterprise Vulnerability Exploited in Attacks Days After Disclosure  SecurityWeek

Successful exploitation of these vulnerabilities could allow an attacker to obtain a valid authentication token, perform a denial of service, or crash the system.

Rockwell Automation: Patch for critical vulnerabilities in ICS Controllers  SecNews.gr

Rockwell Automation Patches Vulnerabilities in ICS Controllers and Software  SecurityWeek

Rockwell Automation Patches Vulnerabilities in ICS Controllers and Software  SecurityWeek

Successful exploitation of these vulnerabilities could allow an attacker to gain unauthorized access, account takeover, and cause loss of availability.

Successful exploitation of these vulnerabilities could allow an attacker to cause a denial-of-service condition.

Successful exploitation of this vulnerability could cause a denial-of-service condition that may result in a major nonrecoverable fault (MNRF).

Successful exploitation of this vulnerability can lead to a denial of service, where the application will become unresponsive and will not recover on its own.

Successful exploitation of this vulnerability could result in an attacker executing privileged operations.

Microsoft Patches Exploited Exchange Server Vulnerability  SecurityWeek

Researcher Drops MiniPlasma Windows Exploit for Unpatched 2020 CVE  SecurityWeek

Critical Remote Code Execution Vulnerability Patched in Android  SecurityWeek

Iran-Linked CyberAv3ngers Sets Sights on Water Utilities and Industrial Controllers  CyberSecurityNews

What to Know About CyberAv3ngers: The IRGC-Linked Group Targeting Critical Infrastructure  Security Boulevard

ThreatsDay Bulletin: Hybrid P2P Botnet, 13-Year-Old Apache RCE and 18 More Stories  The Hacker News

Iran-linked hackers target water, energy in US, FBI and CISA warn  Cybersecurity Dive

Juniper, EV Charging & ICS Vulnerabilities Raise Risks  Cyble

Rockwell Vulnerability Allowing Remote ICS Hacking Exploited in Attacks  SecurityWeek

CISA Flags Hikvision Camera & Rockwell Logix Vulnerabilities as Actively Exploited  SOCRadar® Cyber Intelligence Inc.

3 Apple flaws from Coruna exploit kit added to CISA vulnerability list  SC Media

Hikvision and Rockwell Automation CVSS 9.8 Flaws Added to CISA KEV Catalog  The Hacker News

Multiple Rockwell products contain an insufficient protected credentials vulnerability. Studio 5000 Logix Designer software may allow a key to be discovered. This key is used to verify Logix controllers are communicating with Rockwell Automation design software. If successfully exploited, this vulnerability could allow an unauthorized application to connect with Logix controllers. To leverage this

Successful exploitation of this vulnerability could allow an attacker to cause a denial-of-service condition.

Successful exploitation of these vulnerabilities could allow an attacker to cause a denial-of-service condition.

Successful exploitation of this vulnerability could allow an attacker to cause a denial-of-service condition.

Successful exploitation of these vulnerabilities may allow an attacker to access sensitive information stored in variables within the ADI server.

CISA issues multiple ICS advisories, details DoS vulnerability risk in Rockwell devices used in critical manufacturing  Industrial Cyber

Successful exploitation of this vulnerability could allow an attacker to perform unauthorized sensitive database operations.

Successful exploitation of this vulnerability could result in a denial-of-service condition.

CISA flags ICS vulnerabilities in products from Siemens, Schneider Electric, Rockwell, and others  Industrial Cyber

Successful exploitation of these vulnerabilities could result in a denial-of-service condition.

CISA Warns of OpenPLC ScadaBR File Upload Vulnerability Exploited in Attacks  CyberSecurityNews

CISA Industrial Control Systems (ICS) Advisories Recap for 2025  SOCRadar® Cyber Intelligence Inc.

Weekly IT & ICS Vulnerabilities Report — Top Risks of 2025  Cyble

Successful exploitation of this vulnerability could allow local attackers to execute arbitrary code on affected installations of Arena.

Successful exploitation of this vulnerability may allow remote code execution.

Successful exploitation of this vulnerability could lead to resource exhaustion and denial of service.

Successful exploitation of these vulnerabilities could allow an attacker to take over accounts, steal credentials, redirect users to a malicious website, or bypass MFA.

Successful exploitation of these vulnerabilities could allow attackers to trigger outbound SMB requests to capture NTLM hashes and execute scripts with Administrator privileges upon system reboot.

Successful exploitation of this vulnerability could result in an attacker accessing or altering user data.

Successful exploitation of this vulnerability could result in a denial-of-service.

Successful exploitation of these vulnerabilities could result in a denial-of-service, data modification, or in an attacker obtaining sensitive information.

Successful exploitation of this vulnerability could allow an attacker to cause a denial-of-service condition on the affected product.

Successful exploitation of this vulnerability could allow unauthenticated attackers to achieve XML external entity injection, resulting in a temporary denial-of-service condition.

Successful exploitation of these vulnerabilities may allow full access to all files, processes, and system resources.

Successful exploitation of these vulnerabilities could allow an unauthenticated attacker to access to the device's file system.

Successful exploitation of these vulnerabilities could allow an attacker to cause the web server to crash, requiring a restart to recover.

Successful exploitation of this vulnerability could result in arbitrary code execution.

Successful exploitation of this vulnerability could result in arbitrary code execution.

Libraesva Email Security Gateway Vulnerability Exploited by Nation-State Hackers  SecurityWeek

CISA flags critical ICS vulnerabilities across Rockwell and ABB Systems, exposing OT networks to potential exploits  Industrial Cyber

Successful exploitation of this vulnerability could allow an attacker to cause a memory corruption on the product.

Successful exploitation of this vulnerability could allow an attacker to access sensitive information.

Successful exploitation of this vulnerability could result in a major nonrecoverable fault on the controller.

Successful exploitation of this vulnerability could result in arbitrary code execution.

Successful exploitation of this vulnerability could result in in data exposure, session hijacking, or full communication compromise.

Successful exploitation of this vulnerability could result in an attacker achieving remote code execution.

Successful exploitation of this vulnerability could allow an attacker to run malicious configurations without authentication.

Successful exploitation of this vulnerability could expose the ThinServer service account NTLM hash.

Top IT Vulnerabilities: 908 Tracked, 188 Have Public PoCs  Cyble

Weekly Cybersecurity News Recap : Apple 0-day, Chrome, Copilot Vulnerabilities and Cyber Attacks  CyberSecurityNews

Rockwell ControlLogix Ethernet Vulnerability Let Attackers Execute Remote Code  CyberSecurityNews

Rockwell ControlLogix Ethernet Vulnerability Let Attackers Execute Remote Code  CyberSecurityNews

Critical Flaws Patched in Rockwell FactoryTalk, Micro800, ControlLogix Products  SecurityWeek

Successful exploitation of these vulnerabilities could result in an attacker causing a denial of service condition.

Successful exploitation of this vulnerability could allow a local unauthenticated attacker to listen to communications and manipulate the device.

Successful exploitation of this vulnerability could allow an attacker to crash the device or execute malicious code.

Successful exploitation of this vulnerability could allow remote attackers to perform memory dumps, modify memory, and control execution flow.

Successful exploitation of these vulnerabilities could allow an attacker to predict session numbers or perform privileged actions.

Successful exploitation of these vulnerabilities could create a denial-of-service condition.

Successful exploitation of these vulnerabilities could result in remote code execution or may lead to privilege escalation.

Successful exploitation of this vulnerability could allow an attacker to to create, update, and delete FTLinx drivers.

Successful exploitation of this vulnerability could result in full privilege escalation.

ICS systems face elevated cyber risk as CISA issues advisories covering multiple vendor vulnerabilities  Industrial Cyber

CISA Issues 10 ICS Advisories Detailing Vulnerabilities and Exploits  cyberpress.org

Successful exploitation of these vulnerabilities could allow an attacker to disclose information and execute arbitrary code.

Rockwell Arena Simulation Flaws Allow Remote Execution of Malicious Code  gbhackers.com

Rockwell Arena Simulation Vulnerabilities Allow Remote Code Execution by Attackers  cyberpress.org

Rockwell Arena Simulation Vulnerabilities Let Attackers Execute Malicious Code Remotely  CyberSecurityNews

Rockwell Arena Simulation Vulnerabilities Let Attackers Execute Malicious Code Remotely  CyberSecurityNews

Rockwell Arena Simulation Vulnerabilities Allow Remote Code Execution by Attackers  cyberpress.org

Successful exploitation of these vulnerabilities could lead to code execution on the host or leakage of memory from processes communicating with vSockets.

Critical Flaws in Niagara Framework Threaten Smart Buildings and Industrial Systems Worldwide  The Hacker News

VMware Flaws That Earned Hackers $340,000 at Pwn2Own Patched  SecurityWeek

New Report Highlights the Internet as the Primary Threat to Industrial Automation Systems  gbhackers.com

Mirai Botnets Exploiting Wazuh Security Platform Vulnerability  SecurityWeek

Successful exploitation of this vulnerability could allow an attacker to launch XXE-based attacks on applications that accept malicious log4net configuration files.

Critical Flaw Allows Remote Hacking of AutomationDirect Industrial Gateway  SecurityWeek

Successful exploitation of these vulnerabilities could allow an attacker to escalate privileges and cause a denial-of-service condition.

CISA Issues Five Security Advisories on ICS Vulnerabilities and Exploits  cyberpress.org

Successful exploitation of these vulnerabilities could disclose information to an attacker or allow execution of arbitrary code on the system.

CVE-2025-29824 Vulnerability: Exploitation of a Windows CLFS Zero-Day Could Trigger Ransomware Attacks  SOC Prime

Microsoft Patches 125 Flaws Including Actively Exploited Windows CLFS Vulnerability  The Hacker News

CVE-2025-1449: Rockwell Automation Verve Asset Manager Vulnerability Enables Adversaries to Gain Access to Run Arbitrary Commands  SOC Prime

CISA Releases Two ICS Advisories for Vulnerabilities, & Exploits Surrounding ICS  CyberSecurityNews

CISA Releases Two ICS Advisories for Vulnerabilities, & Exploits Surrounding ICS  CyberSecurityNews

Rockwell Automation Flaw Exposes Systems to Remote Command Execution  cyberpress.org

Rockwell Automation Vulnerability Allows Attackers to Execute Arbitrary Commands  gbhackers.com

Rockwell Automation Vulnerability Let Attackers Gain Access to Run Arbitrary Commands  CyberSecurityNews

Successful exploitation of this vulnerability could allow an attacker with administrative privileges to execute code on the target system.

Successful exploitation of this vulnerability could allow an attacker to take over the device.

Successful exploitation of this vulnerability could allow an attacker with administrative access to run arbitrary commands in the context of the container running the service.

Successful exploitation of these vulnerabilities could allow an attacker with local administrative privileges to execute code.

Successful exploitation of this vulnerability could result in exposure of sensitive data.

Latest CISA ICS Alerts: Exploits & Vulnerability News  Cyble

CISA Issues Nine Critical Industrial Control Systems Advisories  Cyble

CISA Releases Nine Advisories Detailing Vulnerabilities and Exploits Surrounding ICS  CyberSecurityNews

Successful exploitation of this vulnerability could allow a remote, non-privileged user to send malicious requests resulting in a major nonrecoverable fault causing a denial-of-service condition.

Successful exploitation of these vulnerabilities could allow an attacker to extract passwords, access, credentials, or impersonate other users.

Successful exploitation of this vulnerability could cause the device to crash.

Rockwell Patches Critical, High-Severity Vulnerabilities in Several Products  SecurityWeek

CISA flags hardware vulnerabilities in ICS and medical devices; affects B&R, Schneider Electric, Rockwell, BD Systems  Industrial Cyber

Successful exploitation of these vulnerabilities could overwrite reports, including user projects.

Successful exploitation of these vulnerabilities could allow an attacker to gain unauthenticated access to system configuration files and execute DLLs with elevated privileges.

Successful exploitation of these vulnerabilities could allow an attacker to execute code on the device with elevated privileges.

CISA reports security vulnerabilities in ICS equipment from Schneider Electric, Delta Electronics, Rockwell Automation  Industrial Cyber