Archive

Successful exploitation of this vulnerability could reduce the computational cost required for an attacker to perform offline brute-force attacks against stored password hashes.

Recent Citrix NetScaler Vulnerability Exploited in the Wild  SecurityWeek

CISA Warns of Exploited Gitea Vulnerability  SecurityWeek

Microsoft Patches Exploited Entra ID Vulnerability  SecurityWeek

Hackers Target Zimbra Servers in Active Exploitation Campaign  SecurityWeek

Attackers Exploit MLflow SSRF Flaw to Steal Cloud Credentials and Secrets  The Hacker News

August 2026 Patch Tuesday: Microsoft Fixes 421 CVEs, One Exploited Zero-Day  SecurityWeek

Over 4,400 Rockwell PLCs Exposed Online, 22 Found in Water Attack Cities  The Hacker News

Feds Warn About Iranian Hackers Expanding the List of Targeted PLCs to Compromise Critical Infrastructure  CPO Magazine

Successful exploitation of this vulnerability could allow an attacker to cause a denial-of-service condition.

Iranian Hackers Exploited Unpatchable PLC Flaw to Breach 30 Minnesota Water Systems  Tech Times

Coordinated “cyberattack” on Minnesota water utilities: What you need to know  Security Boulevard

Russian hacker group Laundry Bear exploits Zimbra zero-click flaw to target Western government, critical infrastructure  industrialcyber.co

Iranian Hackers Exploit Rockwell, Schneider and Siemens PLCs Across U.S. Critical Infrastructure  gbhackers.com

Rockwell Patches Code Execution Flaws in Arena Simulation Software  SecurityWeek

Rockwell Patches Code Execution Flaws in Arena Simulation Software  SecurityWeek

Hackers Exploit Industrial PLCs and Manipulate HMI Displays to Hide Attacks  gbhackers.com

CISA, FBI warn that Iran-linked hackers are expanding target set for water, energy  Cybersecurity Dive

Iranian Hackers Infiltrate Siemens and Schneider PLCs, Blinding Operators With Fake Readings  Tech Times

New Check Point Zero-Day Vulnerability Exploited in the Wild  SecurityWeek

Successful exploitation of these vulnerabilities could allow for a local attacker to execute arbitrary files, alter configurations, or execute arbitrary code.

Successful exploitation of this vulnerability could allow for an attacker to cause a denial-of-service condition on the product.

Successful exploitation of this vulnerability could allow for an attacker to cause a denial-of-service condition on the product.

Successful exploitation of this vulnerability could allow an attacker to impersonate an authorized user on the FTSP server, resulting in unauthorized access to system configurations.

Unauthenticated Debug Port in Rockwell Adapter Gives Attackers Plant-Floor Control  Tech Times

Successful exploitation of this vulnerability could allow an authenticated attacker to inject malicious scripts on the server.

Successful exploitation of this vulnerability could allow an attacker to cause a denial-of-service condition on the affected product.

Successful exploitation of these vulnerabilities could allow an attacker to cause a denial-of-service condition.

Successful exploitation of this vulnerability could allow an attacker to cause a denial-of-service condition.

Successful exploitation these vulnerabilities could allow an attacker to execute arbitrary code in the context of the current process.

Microsoft Patches Record 622 Vulnerabilities, Including Two Exploited Zero-Days  SecurityWeek

Successful exploitation of this vulnerability could allow an attacker to read or delete files, stop tasks, modify memory, and change I/O states, potentially impacting the confidentiality, integrity, and availability of the device.

Successful exploitation of this vulnerability could allow an authenticated attacker to write arbitrary files to restricted system directories outside of the application's intended directory.

CVE-2024-2658 vulnerability in Schneider Electric software: risks to industrial control systems  Securelist

First-Ever Exploitation of PTC Windchill Vulnerability Discovered in the Wild  SecurityWeek

First-Ever Exploitation of PTC Windchill Vulnerability Discovered in the Wild  SecurityWeek

Lantronix Serial-to-IP Converter Flaw Exploited in Attacks After OT Threat Warning  SecurityWeek

Attackers Exploit Gravity SMTP Plugin Flaw to Harvest Valuable WordPress Data  SecurityWeek

Splunk Enterprise Vulnerability Exploited in Attacks Days After Disclosure  SecurityWeek

Splunk Enterprise Vulnerability Exploited in Attacks Days After Disclosure  SecurityWeek

Successful exploitation of these vulnerabilities could allow an attacker to obtain a valid authentication token, perform a denial of service, or crash the system.

Rockwell Automation: Patch for critical vulnerabilities in ICS Controllers  SecNews.gr

Rockwell Automation Patches Vulnerabilities in ICS Controllers and Software  SecurityWeek

Rockwell Automation Patches Vulnerabilities in ICS Controllers and Software  SecurityWeek

Successful exploitation of these vulnerabilities could allow an attacker to gain unauthorized access, account takeover, and cause loss of availability.

Successful exploitation of these vulnerabilities could allow an attacker to cause a denial-of-service condition.

Successful exploitation of this vulnerability could cause a denial-of-service condition that may result in a major nonrecoverable fault (MNRF).

Successful exploitation of this vulnerability can lead to a denial of service, where the application will become unresponsive and will not recover on its own.

Successful exploitation of this vulnerability could result in an attacker executing privileged operations.

Microsoft Patches Exploited Exchange Server Vulnerability  SecurityWeek

Researcher Drops MiniPlasma Windows Exploit for Unpatched 2020 CVE  SecurityWeek

Critical Remote Code Execution Vulnerability Patched in Android  SecurityWeek

Organizations Warned of Exploited Cisco, Kentico, Zimbra Vulnerabilities  SecurityWeek

Adobe Acrobat and Reader CVE-2026-34621: Critical Prototype Pollution Vulnerability Actively Exploited, Urgent Patch Released  Rescana

Iran-Linked CyberAv3ngers Sets Sights on Water Utilities and Industrial Controllers  CyberSecurityNews

Adobe Patches Reader Zero-Day Exploited for Months  SecurityWeek

What to Know About CyberAv3ngers: The IRGC-Linked Group Targeting Critical Infrastructure  Security Boulevard

ThreatsDay Bulletin: Hybrid P2P Botnet, 13-Year-Old Apache RCE and 18 More Stories  The Hacker News

Censys warns systemic exposure of Rockwell PLCs enable Iran-linked targeting of critical infrastructure OT networks  Industrial Cyber

Iran-linked hackers target water, energy in US, FBI and CISA warn  Cybersecurity Dive

Vulnerability assessment and mitigation for siemens S7-1200 and S7-1500 PLCs in industrial networks  Nature

Juniper, EV Charging & ICS Vulnerabilities Raise Risks  Cyble

Rockwell Vulnerability Allowing Remote ICS Hacking Exploited in Attacks  SecurityWeek

CISA Flags Hikvision Camera & Rockwell Logix Vulnerabilities as Actively Exploited  SOCRadar® Cyber Intelligence Inc.

3 Apple flaws from Coruna exploit kit added to CISA vulnerability list  SC Media

Hikvision and Rockwell Automation CVSS 9.8 Flaws Added to CISA KEV Catalog  The Hacker News

Multiple Rockwell products contain an insufficient protected credentials vulnerability. Studio 5000 Logix Designer software may allow a key to be discovered. This key is used to verify Logix controllers are communicating with Rockwell Automation design software. If successfully exploited, this vulnerability could allow an unauthorized application to connect with Logix controllers. To leverage this

6 Actively Exploited Zero-Days Patched by Microsoft With February 2026 Updates  SecurityWeek

Successful exploitation of this vulnerability could allow an attacker to cause a denial-of-service condition.

Successful exploitation of these vulnerabilities could allow an attacker to cause a denial-of-service condition.

Successful exploitation of this vulnerability could allow an attacker to cause a denial-of-service condition.

Successful exploitation of these vulnerabilities may allow an attacker to access sensitive information stored in variables within the ADI server.

CISA issues multiple ICS advisories, details DoS vulnerability risk in Rockwell devices used in critical manufacturing  Industrial Cyber

Successful exploitation of this vulnerability could allow an attacker to perform unauthorized sensitive database operations.

Successful exploitation of this vulnerability could result in a denial-of-service condition.

CISA flags ICS vulnerabilities in products from Siemens, Schneider Electric, Rockwell, and others  Industrial Cyber

Successful exploitation of these vulnerabilities could result in a denial-of-service condition.

Microsoft Issues Security Fixes for 56 Flaws, Including Active Exploit and Two Zero-Days  The Hacker News

CISA Warns of OpenPLC ScadaBR File Upload Vulnerability Exploited in Attacks  CyberSecurityNews

CISA Industrial Control Systems (ICS) Advisories Recap for 2025  SOCRadar® Cyber Intelligence Inc.

CISA Warns of ScadaBR Vulnerability After Hacktivist ICS Attack  securityweek.com

Weekly IT & ICS Vulnerabilities Report — Top Risks of 2025  Cyble

Successful exploitation of this vulnerability could allow local attackers to execute arbitrary code on affected installations of Arena.

Successful exploitation of this vulnerability may allow remote code execution.

Successful exploitation of this vulnerability could lead to resource exhaustion and denial of service.

Successful exploitation of these vulnerabilities could allow an attacker to take over accounts, steal credentials, redirect users to a malicious website, or bypass MFA.

Successful exploitation of these vulnerabilities could allow attackers to trigger outbound SMB requests to capture NTLM hashes and execute scripts with Administrator privileges upon system reboot.

Successful exploitation of this vulnerability could result in an attacker accessing or altering user data.

Another Chinese security firm has its data leaked  Risky Business Newsletters

Successful exploitation of this vulnerability could result in a denial-of-service.

Successful exploitation of these vulnerabilities could result in a denial-of-service, data modification, or in an attacker obtaining sensitive information.

Successful exploitation of this vulnerability could allow an attacker to cause a denial-of-service condition on the affected product.

Successful exploitation of this vulnerability could allow unauthenticated attackers to achieve XML external entity injection, resulting in a temporary denial-of-service condition.

Successful exploitation of these vulnerabilities may allow full access to all files, processes, and system resources.

Successful exploitation of these vulnerabilities could allow an unauthenticated attacker to access to the device's file system.

Two CVSS 10.0 Bugs in Red Lion RTUs Could Hand Hackers Full Industrial Control  The Hacker News

Successful exploitation of these vulnerabilities could allow an attacker to cause the web server to crash, requiring a restart to recover.

Successful exploitation of this vulnerability could result in arbitrary code execution.

Successful exploitation of this vulnerability could result in arbitrary code execution.

Oracle E-Business Suite Zero-Day Exploited in Cl0p Attacks  SecurityWeek

Libraesva Email Security Gateway Vulnerability Exploited by Nation-State Hackers  SecurityWeek

CISA warns of exploited flaw in DELMIA Apriso manufacturing software  Field Effect

CISA flags critical ICS vulnerabilities across Rockwell and ABB Systems, exposing OT networks to potential exploits  Industrial Cyber

Successful exploitation of this vulnerability could allow an attacker to cause a memory corruption on the product.

Successful exploitation of this vulnerability could allow an attacker to access sensitive information.

Successful exploitation of this vulnerability could result in a major nonrecoverable fault on the controller.

Successful exploitation of this vulnerability could result in arbitrary code execution.

Successful exploitation of this vulnerability could result in in data exposure, session hijacking, or full communication compromise.

Successful exploitation of this vulnerability could result in an attacker achieving remote code execution.

Successful exploitation of this vulnerability could allow an attacker to run malicious configurations without authentication.

Successful exploitation of this vulnerability could expose the ThinServer service account NTLM hash.

WhatsApp Zero-Day Exploited in Attacks Targeting Apple Users  SecurityWeek

Top IT Vulnerabilities: 908 Tracked, 188 Have Public PoCs  Cyble

Weekly Cybersecurity News Recap : Apple 0-day, Chrome, Copilot Vulnerabilities and Cyber Attacks  CyberSecurityNews

FBI, Cisco warn of Russia-linked hackers targeting critical infrastructure organizations  Cybersecurity Dive

Rockwell ControlLogix Ethernet Vulnerability Let Attackers Execute Remote Code  CyberSecurityNews

Rockwell ControlLogix Ethernet Vulnerability Let Attackers Execute Remote Code  CyberSecurityNews

Critical Flaws Patched in Rockwell FactoryTalk, Micro800, ControlLogix Products  SecurityWeek

Successful exploitation of these vulnerabilities could result in an attacker causing a denial of service condition.

Successful exploitation of this vulnerability could allow a local unauthenticated attacker to listen to communications and manipulate the device.

Successful exploitation of this vulnerability could allow an attacker to crash the device or execute malicious code.

Successful exploitation of this vulnerability could allow remote attackers to perform memory dumps, modify memory, and control execution flow.

Successful exploitation of these vulnerabilities could allow an attacker to predict session numbers or perform privileged actions.

Successful exploitation of these vulnerabilities could create a denial-of-service condition.

Successful exploitation of these vulnerabilities could result in remote code execution or may lead to privilege escalation.

Successful exploitation of this vulnerability could allow an attacker to to create, update, and delete FTLinx drivers.

Successful exploitation of this vulnerability could result in full privilege escalation.

ICS systems face elevated cyber risk as CISA issues advisories covering multiple vendor vulnerabilities  Industrial Cyber

CISA Issues 10 ICS Advisories Detailing Vulnerabilities and Exploits  cyberpress.org

Successful exploitation of these vulnerabilities could allow an attacker to disclose information and execute arbitrary code.

Rockwell Arena Simulation Flaws Allow Remote Execution of Malicious Code  gbhackers.com

Rockwell Arena Simulation Vulnerabilities Allow Remote Code Execution by Attackers  cyberpress.org

Rockwell Arena Simulation Vulnerabilities Let Attackers Execute Malicious Code Remotely  CyberSecurityNews

Rockwell Arena Simulation Vulnerabilities Let Attackers Execute Malicious Code Remotely  CyberSecurityNews

Rockwell Arena Simulation Vulnerabilities Allow Remote Code Execution by Attackers  cyberpress.org

Successful exploitation of these vulnerabilities could lead to code execution on the host or leakage of memory from processes communicating with vSockets.

Critical Flaws in Niagara Framework Threaten Smart Buildings and Industrial Systems Worldwide  The Hacker News

VMware Flaws That Earned Hackers $340,000 at Pwn2Own Patched  SecurityWeek

FreeType Zero-Day Found by Meta Exploited in Paragon Spyware Attacks  SecurityWeek

New Report Highlights the Internet as the Primary Threat to Industrial Automation Systems  gbhackers.com

Mirai Botnets Exploiting Wazuh Security Platform Vulnerability  SecurityWeek

Successful exploitation of this vulnerability could allow an attacker to launch XXE-based attacks on applications that accept malicious log4net configuration files.

Critical Flaw Allows Remote Hacking of AutomationDirect Industrial Gateway  SecurityWeek

Successful exploitation of these vulnerabilities could allow an attacker to escalate privileges and cause a denial-of-service condition.

CISA Issues Five Security Advisories on ICS Vulnerabilities and Exploits  cyberpress.org

CISA Releases 10 ICS Advisories Covering Vulnerabilities & Exploits  CyberSecurityNews

Successful exploitation of these vulnerabilities could disclose information to an attacker or allow execution of arbitrary code on the system.

CVE-2025-29824 Vulnerability: Exploitation of a Windows CLFS Zero-Day Could Trigger Ransomware Attacks  SOC Prime

Microsoft Patches 125 Flaws Including Actively Exploited Windows CLFS Vulnerability  The Hacker News

Two CVEs, One Critical Flaw: Inside the CrushFTP Vulnerability Controversy  SecurityWeek

CVE-2025-1449: Rockwell Automation Verve Asset Manager Vulnerability Enables Adversaries to Gain Access to Run Arbitrary Commands  SOC Prime

CISA Releases Two ICS Advisories for Vulnerabilities, & Exploits Surrounding ICS  CyberSecurityNews

CISA Releases Two ICS Advisories for Vulnerabilities, & Exploits Surrounding ICS  CyberSecurityNews

Rockwell Automation Flaw Exposes Systems to Remote Command Execution  cyberpress.org

Rockwell Automation Vulnerability Allows Attackers to Execute Arbitrary Commands  gbhackers.com

Rockwell Automation Vulnerability Let Attackers Gain Access to Run Arbitrary Commands  CyberSecurityNews

Successful exploitation of this vulnerability could allow an attacker with administrative privileges to execute code on the target system.

CISA Warns of Four Vulnerabilities, and Exploits Surrounding ICS  CyberSecurityNews

Successful exploitation of this vulnerability could allow an attacker to take over the device.

Successful exploitation of this vulnerability could allow an attacker with administrative access to run arbitrary commands in the context of the container running the service.

Successful exploitation of these vulnerabilities could allow an attacker with local administrative privileges to execute code.

Multiple vulnerabilities found in ICONICS industrial SCADA software  CyberScoop

Broadcom Patches 3 VMware Zero-Days Exploited in the Wild  securityweek.com

Successful exploitation of this vulnerability could result in exposure of sensitive data.

Latest CISA ICS Alerts: Exploits & Vulnerability News  Cyble

CISA Releases Two New ICS Advisories Exploits Following Vulnerabilities  CyberSecurityNews

CISA Issues Nine Critical Industrial Control Systems Advisories  Cyble

CISA Releases Nine Advisories Detailing Vulnerabilities and Exploits Surrounding ICS  CyberSecurityNews

Successful exploitation of this vulnerability could allow a remote, non-privileged user to send malicious requests resulting in a major nonrecoverable fault causing a denial-of-service condition.

Successful exploitation of these vulnerabilities could allow an attacker to extract passwords, access, credentials, or impersonate other users.

Successful exploitation of this vulnerability could cause the device to crash.

Rockwell Patches Critical, High-Severity Vulnerabilities in Several Products  SecurityWeek

CISA flags hardware vulnerabilities in ICS and medical devices; affects B&R, Schneider Electric, Rockwell, BD Systems  Industrial Cyber

Successful exploitation of these vulnerabilities could overwrite reports, including user projects.

Successful exploitation of these vulnerabilities could allow an attacker to gain unauthenticated access to system configuration files and execute DLLs with elevated privileges.

Successful exploitation of these vulnerabilities could allow an attacker to execute code on the device with elevated privileges.

CISA reports security vulnerabilities in ICS equipment from Schneider Electric, Delta Electronics, Rockwell Automation  Industrial Cyber