https://otasec.com/OT & ICS security news, filtered for asset ownersenhttps://csrc.nist.gov/pubs/sp/800/82/r4/ipdotasec-item-a58c58e6ddccSat, 17 Oct 2026 12:49:08 +0000NIST released a draft revision 4 of SP 800-82, a guide to securing operational technology across industrial and critical infrastructure systems.https://securityweek.com/only-13-of-ot-network-segments-are-fully-isolated-analysisotasec-item-88196369f563Fri, 16 Oct 2026 17:45:04 +0000Forescout research finds only 13% of OT network segments are fully isolated, with OT and medical devices often sharing segments with enterprise assets.https://industrialcyber.co/features/how-decades-of-disconnected-modernization-created-ot-security-debt-manufacturers-cant-escapeotasec-item-6124a498c474Fri, 16 Oct 2026 13:00:00 +0000An analysis argues that manufacturers' modernization adds connectivity without fixing architectural weaknesses, creating accumulated OT security debt.https://industrialcyber.co/critical-infrastructure/singapore-prioritizes-critical-infrastructure-in-quantum-safe-push-funds-cryptographic-discovery-legacy-ot-migrationotasec-item-817f84d5897bFri, 16 Oct 2026 10:25:41 +0000Singapore's CSA issued quantum-safe migration guidance for critical infrastructure and funds cryptographic discovery and legacy OT migration.https://industrialcyber.co/industrial-cyber-attacks/mitre-attck-v20-expands-critical-infrastructure-threat-coverage-with-new-it-and-ot-attack-techniquesotasec-item-3d99c138b16bFri, 16 Oct 2026 10:21:13 +0000MITRE released ATT&CK version 20, expanding critical infrastructure coverage with new IT and OT attack techniques.https://industrialcyber.co/control-device-security/french-supermarket-cyberattack-exposes-risks-of-unsecured-remote-access-and-legacy-refrigeration-systemsotasec-item-351b55202c4aFri, 16 Oct 2026 10:16:57 +0000Reports describe cyberattacks on French supermarket refrigeration systems that disrupted hundreds of stores overnight from October 11, highlighting risks of remote access and legacy systems.https://industrialcyber.co/utilities-energy-power-water-waste/ampyx-cyber-examines-ferc-2026-cip-audit-findings-on-generator-registration-shared-control-and-ai-access-risksotasec-item-4397993c866dFri, 16 Oct 2026 10:11:31 +0000Ampyx Cyber reviews FERC 2026 CIP audit findings, pointing to gaps in generator registration, risk categorization and AI access controls.https://industrialcyber.co/medical/microsoft-health-isac-dismantle-phishing-infrastructure-targeting-critical-infrastructure-healthcare-sectorotasec-item-79000086a8caFri, 16 Oct 2026 10:08:07 +0000Microsoft and Health-ISAC are working to dismantle three components of the YAM Store, CoGUI and Iron cybercrime marketplace used for phishing against healthcare and critical infrastructure.https://industrialcyber.co/news/randy-resnick-joins-igel-to-advance-zero-trust-and-cyber-resilience-across-it-and-ot-environmentsotasec-item-3546e86a0039Fri, 16 Oct 2026 10:04:30 +0000IGEL announced that Zero Trust expert Randy Resnick has joined the company to support IT and OT security initiatives.https://industrialcyber.co/news/sans-institute-launches-it-and-ot-training-tracks-to-strengthen-singapores-critical-infrastructure-cybersecurityotasec-item-0e36815a4920Fri, 16 Oct 2026 10:02:23 +0000SANS Institute launched IT and OT training tracks for practitioners in Singapore's critical information infrastructure sectors.https://advisories.ncsc.nl/advisory?id=NCSC-2026-0437otasec-item-b2439be1a491Fri, 16 Oct 2026 08:59:16 +0000BeyondTrust fixed critical vulnerability CVE-2026-102764 (CVSS 9.3) in Remote Support, allowing unauthenticated remote file placement or modification in versions up to 26.2.3.https://security.nl/posting/957887/Twaalfhonderd+Copeland-koelsystemen+supermarkten+online+toegankelijk?channel=rssotasec-item-23310a1cc660Fri, 16 Oct 2026 08:19:54 +0000About 1,200 Copeland refrigeration systems at supermarkets, including 48 in the Netherlands, are reported to be accessible online.https://security.nl/posting/957878/Kritiek+lek+in+BeyondTrust+Remote+Support+sinds+augustus+misbruikt+bij+aanvallen?channel=rssotasec-item-f594b10a4251Fri, 16 Oct 2026 07:13:51 +0000BeyondTrust says a critical vulnerability in Remote Support has been exploited in attacks since August 29.https://thehackernews.com/2026/10/china-linked-hackers-exploited.htmlotasec-item-1fd194e19c3dFri, 16 Oct 2026 06:55:55 +0000China-linked group Armory Castle exploited a zero-day in BeyondTrust Remote Support from late August 2026, tracked as CVE-2026-102764 (CVSS 9.3).https://bleepingcomputer.com/news/security/beyondtrust-patches-zero-day-exploited-in-attacks-since-augustotasec-item-ec520d18786aFri, 16 Oct 2026 06:18:08 +0000BeyondTrust warned customers to patch a critical Remote Support flaw that has been exploited in zero-day attacks since late August.https://cisa.gov/news-events/ics-advisoriesotasec-item-9c8e3a9223bcFri, 16 Oct 2026 05:50:54 +0000CISA's ICS advisories index page; the excerpt contains no specific advisory details.https://thehackernews.com/2026/10/attackers-exploit-fortios-flaw-to.htmlotasec-item-5fc8c6dd8c54Fri, 16 Oct 2026 04:59:36 +0000A suspected threat actor exploits CVE-2025-61624 in FortiOS to deploy PEERSTITCH, a memory-resident ARM64 malware bypassing tagged VPN session checks.https://industrialcyber.co/utilities-energy-power-water-waste/ferc-identifies-cybersecurity-compliance-gaps-in-us-power-sector-flags-risks-from-ai-tools-and-third-party-control-systemsotasec-item-6ca4ff2a3d7fThu, 15 Oct 2026 12:47:10 +0000FERC identified cybersecurity compliance gaps among US electricity sector entities, including delays and risks from AI tools and third-party control systems.https://industrialcyber.co/ransomware/n0n-extortion-claims-target-38-global-maritime-and-logistics-organizations-raising-port-data-exposure-concernsotasec-item-6cf04b489535Thu, 15 Oct 2026 12:41:16 +0000SOCRadar reported that the n0n extortion group claimed 38 maritime and logistics organizations worldwide, raising concerns about port data exposure.https://security.nl/posting/957699/Honderden+koelsystemen+supermarkten+toegankelijk+vanaf+internet?channel=rssotasec-item-cea651ef1002Thu, 15 Oct 2026 08:01:13 +0000Hundreds of supermarket refrigeration systems, 26 of them in the Netherlands, remain accessible from the internet.https://security.nl/posting/957698/Palo+Alto+Networks+waarschuwt+voor+misbruik+van+beveiligingslek+in+firewalls?channel=rssotasec-item-0501cbc46265Thu, 15 Oct 2026 07:38:03 +0000Attackers are actively exploiting a remote code execution vulnerability in Palo Alto Networks firewalls, which the company warns about.https://security.nl/posting/957694/Distributiecentra+Albert+Heijn+weer+operationeel%3A+%27In+toenemende+mate+vollere+schappen%27?channel=rssotasec-item-e7fd057ada66Thu, 15 Oct 2026 07:23:50 +0000All Albert Heijn distribution centres are operational again, with fuller shelves increasingly reported; the excerpt does not state the cause of the disruption.https://thehackernews.com/2026/10/palo-alto-networks-patches-pan-os.htmlotasec-item-fc3053d7e094Thu, 15 Oct 2026 06:17:58 +0000Palo Alto Networks released PAN-OS updates for CVE-2026-0322, a high-severity management interface RCE flaw under active exploitation.https://www.cisa.gov/news-events/ics-advisories/icsa-26-288-02otasec-item-cc3b7cd61609Thu, 15 Oct 2026 06:00:00 +0000CISA published advisory ICSA-26-288-02 on Guangzhou Juan IoT EseeCloud vulnerabilities that could let attackers gain control of affected IP cameras.https://www.cisa.gov/news-events/ics-advisories/icsa-26-288-01otasec-item-093b66f08af6Thu, 15 Oct 2026 06:00:00 +0000CISA published advisory ICSA-26-288-01 on Eclipse Milo vulnerabilities that could allow data deletion, credential theft, impersonation, or server unresponsiveness.https://helpnetsecurity.com/2026/10/15/exposed-ai-infrastructure-reportotasec-item-ca31951d18c3Thu, 15 Oct 2026 05:00:02 +0000Censys reports exposed industrial control systems rose about 4% in two and a half years, while AI-related software exposure grew 63% in nine months.https://cert-portal.siemens.com/productcert/html/ssa-580366.htmlotasec-item-d1f6f4a1b7b4Thu, 15 Oct 2026 00:00:00 +0000Siemens disclosed a DLL sideloading vulnerability in Siemens Software Center allowing authenticated local attackers to execute code; fixes are expected in the week of 19 October 2026.https://bleepingcomputer.com/news/security/cisa-warns-admins-to-immediately-fix-ivanti-flaw-exploited-as-zero-dayotasec-item-cca51efef3cdWed, 14 Oct 2026 12:58:07 +0000CISA urges immediate patching of an Ivanti Connect Secure flaw exploited as a zero-day since at least October 1st.https://security.nl/posting/957588/Kabinet+wijst+bezwaar+DigiD-beheerder+Solvinity+af%3A+%27Overnameverbod+noodzakelijk%27?channel=rssotasec-item-3d84fff2016eWed, 14 Oct 2026 12:36:31 +0000The Dutch cabinet rejects the objection of DigiD administrator Solvinity and maintains that a US takeover must be prohibited as a threat to the public interest.https://thehackernews.com/2026/10/cisa-urges-immediate-ivanti-connect.htmlotasec-item-c8c2a8e77f0cWed, 14 Oct 2026 12:30:42 +0000CISA urges immediate updates to Ivanti Connect Secure after an actively exploited authentication bypass, CVE-2026-104935, was disclosed.https://security.nl/posting/957584/CCB%3A+%27Hang+koelsystemen+niet+direct+aan+internet+en+installeer+updates%27?channel=rssotasec-item-7b42452ccc59Wed, 14 Oct 2026 12:21:02 +0000Belgian and German authorities urge supermarkets and businesses not to connect refrigeration systems directly to the internet and to install updates.https://security.nl/posting/957542/Kabinet+maakt+risicobeoordeling+digitale+infrastructuur+niet+openbaar?channel=rssotasec-item-05ded444a44eWed, 14 Oct 2026 09:23:04 +0000The Dutch cabinet will not publish its risk assessment of the country's digital infrastructure, citing national security.https://helpnetsecurity.com/2026/10/14/ivanti-zero-days-gain-root-patched-vpn-appliancesotasec-item-5b4c475b9b3bWed, 14 Oct 2026 08:59:19 +0000UTA0576 chained three Ivanti Connect Secure zero-days to gain root on fully patched VPN appliances, enabling credential theft and reconnaissance.https://security.nl/posting/957517/Ivanti+vpn-servers+volledig+gehackt+bij+aanval%2C+aanvallers+zoeken+BitLocker+keys?channel=rssotasec-item-e4e9d03d0ed5Wed, 14 Oct 2026 08:20:46 +0000Attackers combined three Ivanti VPN vulnerabilities to fully compromise servers during recent attacks, and are reportedly seeking BitLocker keys.https://industrialcyber.co/ai/hscc-publishes-ai-clinical-resilience-playbook-to-help-healthcare-organizations-manage-patient-safety-cybersecurity-risksotasec-item-142dd37babcaWed, 14 Oct 2026 07:27:39 +0000The HSCC published a playbook to help healthcare organizations manage patient safety and cybersecurity risks from clinical AI.https://industrialcyber.co/secure-remote-access/ecso-outlines-six-priorities-for-eu-space-cybersecurity-policy-from-secure-by-design-systems-to-threat-intelligence-sharingotasec-item-22f2e9b4cdacWed, 14 Oct 2026 07:19:50 +0000ECSO calls for a dedicated European industrial policy for space cybersecurity, including secure-by-design and threat intelligence sharing.https://industrialcyber.co/news/thinklabs-ai-names-dragos-robert-lee-to-board-to-accelerate-ai-driven-grid-planning-modernizationotasec-item-645e5d9edb5aWed, 14 Oct 2026 07:11:15 +0000ThinkLabs AI appointed Dragos' Robert Lee to its board to advance AI-driven grid planning and modernization.https://industrialcyber.co/news/doe-inl-launch-weekly-series-on-cyber-informed-engineering-to-advance-cybersecurity-in-energy-infrastructureotasec-item-df7b9967c645Wed, 14 Oct 2026 07:05:36 +0000The US DOE and Idaho National Laboratory launched a weekly series on cyber-informed engineering for energy infrastructure security.https://thehackernews.com/2026/10/attacker-chains-three-ivanti-connect.htmlotasec-item-fb99d329a170Tue, 13 Oct 2026 17:33:11 +0000Volexity reports an attacker chained three Ivanti Connect Secure zero-days for unauthenticated root access; fixes exist for two, the third is pending.https://security.nl/posting/957434/Ivanti+waarschuwt+voor+misbruik+van+lek+in+Connect+Secure+vpn-servers?channel=rssotasec-item-fb5c73176d69Tue, 13 Oct 2026 15:01:04 +0000Ivanti warns customers of active exploitation of a vulnerability in Ivanti Connect Secure VPN servers.https://advisories.ncsc.nl/advisory?id=NCSC-2026-0416otasec-item-9bef2c57ef4cTue, 13 Oct 2026 15:00:43 +0000NCSC reports Ivanti fixed a Connect Secure flaw allowing unauthenticated command execution, reportedly exploited as a zero-day, with public PoC expected soon.https://industrialcyber.co/industrial-cyber-attacks/intermarche-cyberattack-exposes-refrigeration-security-risks-as-french-supermarkets-face-operational-disruptionotasec-item-640ffc118056Tue, 13 Oct 2026 14:41:58 +0000French supermarket chain Intermarché was hit by a cyberattack that manipulated connected refrigeration systems, disrupting operations at several French retailers.https://security.nl/posting/957395/NCSC+ziet+geen+verband+tussen+incident+bij+Ahold+en+Franse+supermarkten?channel=rssotasec-item-a6fef62911f7Tue, 13 Oct 2026 12:56:02 +0000The Dutch NCSC sees no link between the cybersecurity incident at Ahold Delhaize and the attacks on French supermarkets.https://industrialcyber.co/ai/uk-expands-ai-powered-cyber-defense-pilots-prepares-incident-response-measures-as-autonomous-ai-risks-growotasec-item-7b86a9afc696Tue, 13 Oct 2026 12:40:10 +0000The UK government announced measures to expand AI-powered cyber defense pilots and prepare incident response against autonomous AI risks.https://industrialcyber.co/critical-infrastructure/space-sector-faces-satellite-cybersecurity-blind-spots-calls-for-stronger-threat-intelligence-and-information-sharingotasec-item-dfc0f7460cf6Tue, 13 Oct 2026 12:36:12 +0000An ETH Zurich researcher identifies satellite cybersecurity gaps and calls for better threat intelligence and information sharing in the space sector.https://security.nl/posting/957379/Franse+overheid+adviseert+supermarkten+om+koelsystemen+offline+te+halen?channel=rssotasec-item-bc0d5f353ad4Tue, 13 Oct 2026 11:42:14 +0000The French government advises supermarkets and other businesses to take refrigeration systems offline after some were hacked.https://security.nl/posting/957367/Albert+Heijn+herstelt+reguliere+prijzen+op+digitale+prijskaartjes?channel=rssotasec-item-50c6eefaa8c1Tue, 13 Oct 2026 10:18:54 +0000Albert Heijn has restored regular prices on its digital price tags, following an incident that altered them.https://advisories.ncsc.nl/advisory?id=NCSC-2026-0415otasec-item-ac20d5e24983Tue, 13 Oct 2026 09:43:45 +0000NCSC reports Siemens fixed vulnerabilities in Desigo, Industrial Plus, RUGGEDCOM, SIMATIC and SIPLUS products that could enable DoS, code execution and privilege escalation.https://thehackernews.com/2026/10/attackers-heat-french-supermarket.htmlotasec-item-6ebfc31532eeTue, 13 Oct 2026 08:48:41 +0000Attackers remotely took control of refrigeration controllers at hundreds of French supermarkets and warmed fridges and freezers, forcing food disposal.https://industrialcyber.co/news/ionq-to-acquire-elisity-in-1-3-billion-stock-deal-to-expand-zero-trust-post-quantum-security-offeringsotasec-item-31d714a8a7a2Tue, 13 Oct 2026 08:43:43 +0000IonQ agreed to acquire Elisity in a $1.3 billion stock deal to expand zero trust and post-quantum security offerings.https://waterfall-security.com/ot-insights-center/ot-cybersecurity-insights-center/ot-visibility-waterfall-siemens-energyotasec-item-5e95e91c3259Tue, 13 Oct 2026 08:38:46 +0000Waterfall and Siemens Energy present a joint MDR solution offering OT visibility through unidirectional gateways.https://security.nl/posting/957310/%27Duizenden+online+koelsystemen+gebruiken+datum+als+wachtwoord%27?channel=rssotasec-item-71b95bd9d755Tue, 13 Oct 2026 08:19:00 +0000Thousands of internet-exposed Danfoss cooling systems reportedly use the date as password, leaving them easily accessible to attackers.https://www.cisa.gov/news-events/ics-advisories/icsa-26-286-02otasec-item-4d435f7c22a1Tue, 13 Oct 2026 06:00:00 +0000CISA published advisory on Swann SWIFI-SE2KIC vulnerabilities that could allow video information to be viewed without authentication.https://www.cisa.gov/news-events/ics-advisories/icsa-26-286-01otasec-item-d48f7e0fef4aTue, 13 Oct 2026 06:00:00 +0000CISA published advisory ICSA-26-286-01 on an Inductive Automation Ignition vulnerability allowing authenticated low-level users to escalate privileges.https://cert-portal.siemens.com/productcert/html/ssa-968435.htmlotasec-item-db7f0f7c8c23Tue, 13 Oct 2026 00:00:00 +0000Siemens advisory SSA-968435 describes a vulnerability chain in Industrial Edge App Publisher allowing network attackers to impersonate the server and execute code; update released.https://cert-portal.siemens.com/productcert/html/ssa-967325.htmlotasec-item-e513fdeee4e8Tue, 13 Oct 2026 00:00:00 +0000Siemens advisory SSA-967325 lists PAN-OS vulnerabilities affecting RUGGEDCOM APE1808 devices; a new version is released and workarounds are provided.https://cert-portal.siemens.com/productcert/html/ssa-911336.htmlotasec-item-16cad5dcec61Tue, 13 Oct 2026 00:00:00 +0000Siemens advisory SSA-911336 reports multiple vulnerabilities in Nozomi Guardian/CMC on RUGGEDCOM APE1808 devices; Siemens advises contacting support for patches.https://cert-portal.siemens.com/productcert/html/ssa-864900.htmlotasec-item-c8eccc714120Tue, 13 Oct 2026 00:00:00 +0000Siemens advisory SSA-864900 lists FortiOS vulnerabilities affecting RUGGEDCOM APE1808 devices; a new version is released for update.https://cert-portal.siemens.com/productcert/html/ssa-858251.htmlotasec-item-0628f59f1fb5Tue, 13 Oct 2026 00:00:00 +0000Siemens advisory SSA-858251 reports two OPC UA authentication bypass vulnerabilities allowing access to server-managed data; updates or countermeasures are provided.https://cert-portal.siemens.com/productcert/html/ssa-832641.htmlotasec-item-5a0e6ef5d374Tue, 13 Oct 2026 00:00:00 +0000Siemens advisory SSA-832641 reports path traversal vulnerabilities in Industrial Edge Devices that could expose sensitive internal information to authenticated attackers.https://cert-portal.siemens.com/productcert/html/ssa-800126.htmlotasec-item-a4e020d2718cTue, 13 Oct 2026 00:00:00 +0000Siemens advisory SSA-800126 describes a deserialization flaw in engineering platforms before V20 that could allow arbitrary code execution; updates are released.https://cert-portal.siemens.com/productcert/html/ssa-794697.htmlotasec-item-3f1cbabf33cdTue, 13 Oct 2026 00:00:00 +0000Siemens advisory SSA-794697 reports vulnerabilities in the GNU/Linux subsystem of SIMATIC S7-1500 TM MFP V1.0, which is no longer maintained; updating to V1.1 is advised.https://cert-portal.siemens.com/productcert/html/ssa-794185.htmlotasec-item-43438ce5ee19Tue, 13 Oct 2026 00:00:00 +0000Siemens advisory SSA-794185 documents the impact of RADIUS forgery vulnerability CVE-2024-3596 on SIPROTEC, SICAM and related products.https://cert-portal.siemens.com/productcert/html/ssa-784472.htmlotasec-item-0d23c9475681Tue, 13 Oct 2026 00:00:00 +0000Siemens advisory SSA-784472 reports vulnerabilities in the GNU/Linux subsystem of SIMATIC S7-1500 TM MFP V1.1.1; Siemens is preparing fixes and recommends mitigations.https://cert-portal.siemens.com/productcert/html/ssa-765416.htmlotasec-item-12c4f0904c6cTue, 13 Oct 2026 00:00:00 +0000Siemens reports multiple SQLite vulnerabilities in RUGGEDCOM CROSSBOW Station Access Controller that could enable code execution, denial of service or information disclosure; a fixed version is available.https://cert-portal.siemens.com/productcert/html/ssa-693808.htmlotasec-item-35d50624f1faTue, 13 Oct 2026 00:00:00 +0000Siemens engineering platforms have a deserialization flaw via a local Windows Named Pipe that lets an authenticated local attacker execute arbitrary code; updates are released for several products.https://cert-portal.siemens.com/productcert/html/ssa-628843.htmlotasec-item-bb1e0703356eTue, 13 Oct 2026 00:00:00 +0000Siemens lists several products with an out-of-bound read vulnerability in TPM 2.0 that could cause information disclosure or denial of service; fixes are partly available.https://cert-portal.siemens.com/productcert/html/ssa-591731.htmlotasec-item-4804138cc7d5Tue, 13 Oct 2026 00:00:00 +0000Siemens reports multiple web server vulnerabilities in SIMATIC S7-1500 PLCs that could let attackers run malicious code in a user's browser session and perform PLC operations; fixes are pending.https://cert-portal.siemens.com/productcert/html/ssa-563922.htmlotasec-item-de738199f297Tue, 13 Oct 2026 00:00:00 +0000Siemens reports a local privilege escalation in several SIMOTION tools that applies only during setup and installation, allowing SYSTEM-level code execution; a fixed version is available.https://cert-portal.siemens.com/productcert/html/ssa-550198.htmlotasec-item-e81653b91397Tue, 13 Oct 2026 00:00:00 +0000Siemens reports a database privilege escalation in multiple SIMATIC WinCC versions that lets an authenticated database user execute commands on the host system; updates are released for several versions.https://cert-portal.siemens.com/productcert/html/ssa-545643.htmlotasec-item-0af0c492f9bbTue, 13 Oct 2026 00:00:00 +0000Multiple vulnerabilities in KACO blueplanet inverters could allow attackers to derive credentials from the device serial number and gain unauthorized access; updates are released for several products.https://cert-portal.siemens.com/productcert/html/ssa-508506.htmlotasec-item-624627f4572bTue, 13 Oct 2026 00:00:00 +0000Siemens reports multiple RUGGEDCOM CROSSBOW vulnerabilities allowing SQL command execution, retrieval of admin credentials and privilege escalation; a new version is available.https://cert-portal.siemens.com/productcert/html/ssa-493396.htmlotasec-item-bc6ca6aad5aeTue, 13 Oct 2026 00:00:00 +0000Siemens engineering platforms fail to sanitize input when parsing project files, allowing a crafted file to trigger type confusion and arbitrary code execution; updates are released for several products.https://cert-portal.siemens.com/productcert/html/ssa-457936.htmlotasec-item-18dfec1cd0eeTue, 13 Oct 2026 00:00:00 +0000Siemens reports multiple vulnerabilities in the GNU/Linux subsystem of the SIMATIC S7-1500 CPU 1518(F)-4 PN/DP MFP firmware V3.1.7; fixes are not yet available and mitigations are recommended.https://cert-portal.siemens.com/productcert/html/ssa-434797.htmlotasec-item-477a4405d5ceTue, 13 Oct 2026 00:00:00 +0000Siemens products are affected by a stack-based buffer overflow in OpenSSL that allows remote denial of service or potentially remote code execution; updates are released for several products.https://cert-portal.siemens.com/productcert/html/ssa-398330.htmlotasec-item-4e5b5b5b7db2Tue, 13 Oct 2026 00:00:00 +0000Siemens reports GNU/Linux subsystem vulnerabilities in SIMATIC S7-1500 CPU 1518(F)-4 PN/DP MFP firmware V3.1.0 to V3.1.5, which is no longer maintained; updating to a newer version is advised.https://cert-portal.siemens.com/productcert/html/ssa-392859.htmlotasec-item-f075f01334f5Tue, 13 Oct 2026 00:00:00 +0000Siemens engineering platforms before V20 contain a local arbitrary code execution vulnerability affecting the operating system of the environment; updates and countermeasures are provided.https://cert-portal.siemens.com/productcert/html/ssa-390352.htmlotasec-item-534612e9136aTue, 13 Oct 2026 00:00:00 +0000Siemens reports multiple vulnerabilities in the .NET Client Library for SIMATIC S7 Webserver API that could expose sensitive information or write files outside the download directory; a new version is available.https://cert-portal.siemens.com/productcert/html/ssa-377139.htmlotasec-item-2ada5b999224Tue, 13 Oct 2026 00:00:00 +0000Industrial Edge Device Kit contains multiple path traversal vulnerabilities that could let an authenticated remote attacker access sensitive internal information; new versions are released.https://cert-portal.siemens.com/productcert/html/ssa-333035.htmlotasec-item-0224bacba9e3Tue, 13 Oct 2026 00:00:00 +0000Multiple vulnerabilities in APOGEE, TALON and Desigo PXC/PXM building automation products could cause denial of service and impact device availability; fixes or mitigations are provided.https://cert-portal.siemens.com/productcert/html/ssa-282044.htmlotasec-item-578172bac43eTue, 13 Oct 2026 00:00:00 +0000Siemens Web Installer used for Online Software Delivery is affected by DLL hijacking that could enable code execution during application setup; new versions are released.https://cert-portal.siemens.com/productcert/html/ssa-267056.htmlotasec-item-52086eff18b8Tue, 13 Oct 2026 00:00:00 +0000Siemens reports multiple LOGO! 8 BM vulnerabilities that could allow remote code execution, denial of service or altered device behavior; updated versions are released.https://cert-portal.siemens.com/productcert/html/ssa-265688.htmlotasec-item-0f88ca6393c2Tue, 13 Oct 2026 00:00:00 +0000Multiple vulnerabilities were identified in the GNU/Linux subsystem of SIMATIC S7-1500 TM MFP V1.1, which is no longer maintained; a new version is available and updating is advised.https://cert-portal.siemens.com/productcert/html/ssa-159454.htmlotasec-item-b9c30cc1219fTue, 13 Oct 2026 00:00:00 +0000SIMATIC IPCs contain a hard-coded test key that allows booting operating systems or UEFI applications signed with it, bypassing Secure Boot even when enabled; updates are released.https://cert-portal.siemens.com/productcert/html/ssa-148322.htmlotasec-item-03825ea13e69Tue, 13 Oct 2026 00:00:00 +0000Siemens advisory SSA-148322 reports an out-of-bounds write in the WibuKey component of PSS SINCAL, allowing denial of service when the legacy dongle license type is used.https://cert-portal.siemens.com/productcert/html/ssa-127084.htmlotasec-item-9d69ad316714Tue, 13 Oct 2026 00:00:00 +0000Siemens advisory SSA-127084 lists multiple FortiOS vulnerabilities affecting RUGGEDCOM APE1808 devices running Fortigate NGFW before V7.6.7, with Fortinet workarounds recommended.https://cert-portal.siemens.com/productcert/html/ssa-104023.htmlotasec-item-97ace648d2f2Tue, 13 Oct 2026 00:00:00 +0000Siemens advisory SSA-104023 lists PAN-OS vulnerabilities affecting RUGGEDCOM APE1808 devices, with customers referred to Palo Alto Networks workarounds.https://cert-portal.siemens.com/productcert/html/ssa-099819.htmlotasec-item-caab5c6e03deTue, 13 Oct 2026 00:00:00 +0000Siemens advisory SSA-099819 reports a denial-of-service flaw in SENTRON 3NA COM Fuse caused by improper handling of network management messages, possibly requiring network re-establishment.https://cert-portal.siemens.com/productcert/html/ssb-091449.htmlotasec-item-ed2d67e07580Tue, 13 Oct 2026 00:00:00 +0000Siemens security bulletin SSB-091449 reports that per-variable access attributes for HMI, OPC UA and Web API are not enforced on PG/HMI communication in SIMATIC S7 PLCs.https://cert-portal.siemens.com/productcert/html/ssa-082556.htmlotasec-item-60954788450eTue, 13 Oct 2026 00:00:00 +0000Siemens advisory SSA-082556 reports multiple vulnerabilities in the GNU/Linux subsystem of SIMATIC S7-1500 CPU 1518(F)-4 PN/DP MFP firmware V3.1.5, which is no longer maintained.https://cert-portal.siemens.com/productcert/html/ssa-055299.htmlotasec-item-f2b7d644eeb7Tue, 13 Oct 2026 00:00:00 +0000Siemens advisory SSA-055299 reports an out-of-bounds read in Capital Embedded AR Classic, an automotive embedded software product, with a fixed version released for R20-11.https://cert-portal.siemens.com/productcert/html/ssa-019113.htmlotasec-item-ead26fc1820fTue, 13 Oct 2026 00:00:00 +0000Siemens advisory SSA-019113 reports multiple vulnerabilities in the GNU/Linux subsystem of SIMATIC S7-1500 CPU 1518(F)-4 PN/DP MFP firmware V3.1.6, which is no longer maintained.https://security.nl/posting/957217/Distributiecentra+Albert+Heijn+liggen+stil+door+cybersecurity-incident?channel=rssotasec-item-dc18681987feMon, 12 Oct 2026 15:01:00 +0000Several Albert Heijn distribution centres are offline due to a cybersecurity incident that also affects the website and deliveries.https://security.nl/posting/957175/Koelsystemen+Franse+supermarkten+getroffen+door+cyberaanval?channel=rssotasec-item-7008f7282a14Mon, 12 Oct 2026 13:11:00 +0000Cooling systems of French supermarkets were hit by a cyberattack in which attackers targeted temperature settings.https://industrialcyber.co/news/stormshield-appoints-christophe-canguilhem-as-president-and-ceo-succeeding-pierre-yves-hentzenotasec-item-0f0726687e21Mon, 12 Oct 2026 11:30:20 +0000Stormshield announced Christophe Canguilhem will succeed Pierre-Yves Hentzen as president and CEO.https://thehackernews.com/2026/10/cyberxero-uses-claude-code-in-campaign.htmlotasec-item-d261b6b9e669Mon, 12 Oct 2026 07:26:12 +0000A campaign using Cobalt Strike and an AI orchestration layer based on Claude Code targeted WordPress sites, e-commerce platforms and Ukrainian critical infrastructure, stealing over 628,000 records.https://thehackernews.com/2026/10/flax-typhoon-exploits-five-flaws-as.htmlotasec-item-83f8612997a5Fri, 09 Oct 2026 12:21:51 +0000CISA added five flaws to its KEV catalog after China-linked Flax Typhoon exploited them, with federal agencies given an October 11 deadline.https://advisories.ncsc.nl/advisory?id=NCSC-2026-0411otasec-item-9c4387e2e3e4Fri, 09 Oct 2026 08:00:34 +0000Cisco fixed multiple IOS XE vulnerabilities involving access control, buffer management and input validation, affecting autonomous and controller modes.https://thehackernews.com/2026/10/fbi-seizes-7-domains-disrupts-flax.htmlotasec-item-5448277fa97eFri, 09 Oct 2026 06:39:29 +0000The FBI and DoJ seized seven domains and disrupted tools used by China-linked Flax Typhoon to scan and infiltrate US critical infrastructure.https://waterfall-security.com/ot-insights-center/ot-cybersecurity-insights-center/consequence-based-risk-matrices-iec-62443-3-2otasec-item-02f7996d1933Tue, 06 Oct 2026 05:55:38 +0000A proposed IEC 62443-3-2 Appendix C introduces consequence-based risk matrices that replace likelihood with credibility for high-impact OT cyber attacks.