Latest Industrial Control Systems news

Energy giant Schneider Electric hit by Cactus ransomware attack

Energy management and automation giant Schneider Electric suffered a Cactus ransomware attack leading to the theft of corporate data, according to people familiar with the matter.
- Lawrence Abrams
- January 29, 2024
- 03:10 PM
- 0
Hackers breach US water facility via exposed Unitronics PLCs

CISA (Cybersecurity & Infrastructure Security Agency) is warning that threat actors breached a U.S. water facility by hacking into Unitronics programmable logic controllers (PLCs) exposed online.
- Bill Toulas
- November 29, 2023
- 01:07 PM
- 2
Researchers warn of 100,000 industrial control systems exposed online

About 100,000 industrial control systems (ICS) were found on the public web, exposed to attackers probing them for vulnerabilities and at risk of unauthorized access. Among them are power grids, traffic light systems, security and water systems.
- Bill Toulas
- October 04, 2023
- 01:35 PM
- 0
Industrial PLCs worldwide impacted by CODESYS V3 RCE flaws

Millions of PLC (programmable logic controllers) used in industrial environments worldwide are at risk to 15 vulnerabilities in the CODESYS V3 software development kit, allowing remote code execution (RCE) and denial of service (DoS) attacks.
- Bill Toulas
- August 11, 2023
- 10:33 AM
- 0
New Russian-linked CosmicEnergy malware targets industrial systems

Mandiant security researchers have discovered a new OT known as CosmicEnergy that targets operational technology (OT), raising concerns about potential disruptions to electric power systems worldwide.
- Sergiu Gatlan
- May 25, 2023
- 11:27 AM
- 0
Multinational tech firm ABB hit by Black Basta ransomware attack

Swiss multinational company ABB, a leading electrification and automation technology provider, has suffered a Black Basta ransomware attack, reportedly impacting business operations.
- Lawrence Abrams
- May 11, 2023
- 05:05 PM
- 0
Password recovery tool infects industrial systems with Sality malware

A threat actor is infecting industrial control systems (ICS) to create a botnet through password "cracking" software for programmable logic controllers (PLCs).
- Bill Toulas
- July 15, 2022
- 01:46 PM
- 0
Icefall: 56 flaws impact thousands of exposed industrial devices

A security report has been published on a set of 56 vulnerabilities that are collectively called Icefall and affect operational technology (OT) equipment used in various critical infrastructure environments.
- Bill Toulas
- June 21, 2022
- 07:20 AM
- 0
OAS platform vulnerable to critical RCE and API access flaws

Threat analysts have disclosed vulnerabilities affecting the Open Automation Software (OAS) platform, leading to device access, denial of service, and remote code execution.
- Bill Toulas
- May 26, 2022
- 03:11 PM
- 0
LockBit, Conti most active ransomware targeting industrial sector

Ransomware attacks extended into the industrial sector last year to such a degree that this type of incident became the number one threat in the industrial sector.
- Ionut Ilascu
- February 23, 2022
- 05:48 AM
- 0
‘Anomalous’ spyware stealing credentials in industrial firms

Researchers have uncovered several spyware campaigns that target industrial enterprises, aiming to steal email account credentials and conduct financial fraud or resell them to other actors.
- Bill Toulas
- January 20, 2022
- 04:29 PM
- 0
Bluetooth BrakTooth bugs could affect billions of devices

Vulnerabilities collectively referred to as BrakTooth are affecting Bluetooth stacks implemented on system-on-a-chip (SoC) circuits from over a dozen vendors.
- Ionut Ilascu
- September 02, 2021
- 07:22 PM
- 0
CISA: BadAlloc impacts critical infrastructure using BlackBerry QNX

CISA today warned that IoT and OT security flaws known as BadAlloc impact BlackBerry's QNX Real Time Operating System (RTOS) used by critical infrastructure organizations.
- Sergiu Gatlan
- August 17, 2021
- 02:16 PM
- 0
INFRA:HALT security bugs impact critical industrial control devices

High-severity and critical vulnerabilities collectively referred to as INFRA:HALT are affecting all versions of NicheStack below 4.3, a proprietary TCP/IP stack used by at least 200 industrial automation vendors, many in the leading segment of the market.
- Ionut Ilascu
- August 04, 2021
- 10:16 AM
- 0
Saudi Aramco data breach sees 1 TB stolen data for sale

Attackers have stolen 1 TB of proprietary data belonging to Saudi Aramco and are offering it for sale on the darknet. The Saudi Arabian Oil Company, better known as Saudi Aramco, is one of the largest public petroleum and natural gas companies in the world. The sales price, albeit negotiable, is set at $5 million.
- Ax Sharma
- July 19, 2021
- 08:02 AM
- 0
New Actors Attack Industrial Control Systems, Old Ones Mature

Industrial control systems (ICS) across the world have become a larger target in 2019 as researchers discovered new threat actors attacking this sector while old ones have evolved and expanded their operations.
- Ionut Ilascu
- February 20, 2020
- 07:49 AM
- 0
Pwn2Own Hacking Event Expands to Industrial Control Systems

The Pwn2Own hacking competition that will take place in Miami South Beach in January 2020 will also include popular Industrial Control Systems (ICS) software for the first time.
- Sergiu Gatlan
- October 28, 2019
- 09:07 AM
- 0
HVACking: Remotely Exploiting Bugs in Building Control Systems

Security researchers have found a zero-day vulnerability in a popular building controller used for managing various systems, including HVAC (heating, ventilation, and air conditioning), alarms, or pressure level in controlled environments.
- Ionut Ilascu
- August 13, 2019
- 04:33 AM
- 0