ICS/OT
Honeywell has patched several critical and high-severity vulnerabilities in its Experion PKS industrial process control and automation product.
Hi, what are you looking for?
SecurityWeek
ICS/OT
CISA has published an advisory to inform organizations about three vulnerabilities found by a researcher in Daktronics controllers.
ICS/OT
CISA has added the remote code execution flaw CVE-2026-12569 to its Known Exploited Vulnerabilities catalog.
ICS/OT
Mandiant has helped the California water utility investigate the cyberattack launched by Iranian hacker group Handala.
ICS/OT
The exploited flaw, CVE-2025-67038, is one of the vulnerabilities disclosed in April as part of the BRIDGE:BREAK research project.
ICS/OT
The need for secure encryption in IoT and IIoT devices is obvious, and potentially critical for OT and, by extension, much of the critical...
ICS/OT
The proposed cyber regulations include the implementation of incident reporting, response plans, and cybersecurity controls, training, and certification of compliance.
ICS/OT
Eight vulnerabilities, including ones allowing full control over a device, have been discovered and patched in Helmholz REX 100 industrial routers.
ICS/OT
A vulnerability affecting systems named End-of-Train and Head-of-Train can be exploited by hackers to cause trains to brake.
ICS/OT
Industrial solutions providers Siemens, Schneider Electric and Phoenix Contact have released July 2025 Patch Tuesday ICS security advisories.
ICS/OT
Nova Scotia Power is notifying individuals affected by the recent data breach, including in the United States.
ICS/OT
CISA has informed organizations about critical authentication bypass and remote code execution vulnerabilities in Microsens NMP Web+.
ICS/OT
The US government is again warning about potential Iranian cyberattacks as researchers find that hackers’ favorite ICS targets remain exposed.
ICS/OT
Siemens is working with Microsoft to address a Defender Antivirus problem that can lead to no malware alerts or plant disruptions.
ICS/OT
Industrial solutions providers Siemens, Schneider Electric and Aveva have released June 2025 Patch Tuesday ICS security advisories.
ICS/OT
Censys researchers follow some clues and find hundreds of control-room dashboards for US water utilities on the public internet.
ICS/OT
Industrial giant Honeywell has published its 2025 Cybersecurity Threat Report with information on the latest trends.
ICS/OT
Researchers from Forescout have analyzed the prevalence of internet-exposed solar power devices and shared a list of the top vendors and devices.
ICS/OT
A critical command execution vulnerability has been found by a researcher in Instantel Micromate monitoring units.
ICS/OT
More than 100 AutomationDirect MB-Gateway devices may be vulnerable to attacks from the internet due to CVE-2025-36535.
ICS/OT
Many of the industrial control system (ICS) instances seen in internet scanning are likely or possibly honeypots, not real devices.
ICS/OT
American steel giant Nucor on Wednesday disclosed a cybersecurity incident that bears the hallmarks of a ransomware attack.
ICS/OT
Industrial giants Siemens, Schneider Electric and Phoenix Contact have released ICS security advisories on the May 2025 Patch Tuesday.
ICS/OT
Agencies say the attacks leverage basic intrusion techniques, but poor cyber hygiene within critical infrastructure organizations could lead to disruptions and damage.
Join this live webinar as we break down why email-layer defenses alone can't keep pace with the modern phishing ecosystem, how agentic AI is changing the capacity equation for security teams, and more.
RegisterThis year's summit will help organizations learn how to utilize tools, controls, and design models needed to properly secure cloud environments. Interact with leading solution providers and other end users facing similar challenges in securing a variety of cloud deployments.
RegisterExpert Insights
As AI-generated code becomes commonplace, CISOs need new audit strategies to measure developer practices, govern AI tool usage, and identify software risks before they reach production.
(Matias Madou)
From model selection and automation to validation and measurable results, the right questions can help enterprises separate genuine AI capabilities from marketing hype.
(Joshua Goldfarb)
As cybersecurity platforms embrace agentic AI, organizations must balance detection performance against the escalating costs of token consumption, deployment architecture, and AI credits.
(Danelle Au)
From hidden content injections to cognitive state poisoning, attackers are turning trusted data sources into traps for autonomous AI.
(Etay Maor)
Groups like ShinyHunters are demonstrating that attackers do not necessarily need malware or zero-day exploits to cause massive damage.
(Torsten George)