Briefings ·
OTASEC Daily Briefing | 03-11-2026
A critical Siemens SIMATIC IoT2050 flaw is now under active exploitation, while the supermarket refrigeration attacks in Europe prompt official guidance. The UK NCSC also warns of AI-powered attacks on critical infrastructure.
1Update: supermarket refrigeration attacks bring OT exposure warnings
Industrial Cyber reports that hackers manipulated freezer temperatures in a new spree across Europe, pointing to weaknesses in connected OT systems. The Dutch NCSC now advises that supermarkets and other businesses should not connect cooling systems directly to the internet and should use strong passwords.
For asset owners: Check whether any refrigeration or building control systems are reachable from the internet, remove direct exposure and replace default or weak passwords.
2Siemens SIMATIC IoT2050 flaw CVE-2026-58115 actively exploited
VulnCheck reports active exploitation of CVE-2026-58115 (CVSS 10.0) in SIMATIC IoT2050 Advanced devices. The missing authentication flaw lets an unauthenticated remote attacker run arbitrary code, and attackers are reported to be planting remote command backdoors.
For asset owners: Identify any SIMATIC IoT2050 Advanced devices, apply the Siemens fix or mitigations, restrict network access to them and check for signs of compromise.
3UK NCSC warns of AI-powered attacks on critical infrastructure within two years
The UK NCSC warns that 'tech on the cheap' has left UK organisations exposed to AI that can uncover and exploit longstanding security weaknesses. It calls for urgent investment in resilience.
For asset owners: Review long-standing weaknesses and legacy systems in your OT environment and prioritise resilience investment before AI-assisted attackers find them.