#ICS security
16 stories taggedICS security.
Securing Siemens PLCs Without Shutting Down the Factory
US agencies are warning that industrial controllers running critical infrastructure are being actively targeted. The advice is sound. Applying it carelessly could cause the very outages attackers are hoping for.
Rockwell Automation Fixes More Than a Dozen Security Flaws Across Its Industrial Software
The manufacturing technology company has issued patches for vulnerabilities in products used to control factory equipment worldwide, including RSLinx Classic and FactoryTalk.
AI Took Eight Hours and $500 to Copy a Hacking Tool Onto a Second Industrial Controller
Researchers used Anthropic's Claude to adapt a known exploit for water-sector control hardware. It worked, eventually, but it also permanently destroyed one of the test devices.
CISA Warns of 13 Critical Flaws in Ebyte NA111-M Gateways, No Patch in Sight
The Chinese vendor stopped responding to coordination requests, leaving industrial network gateways exposed to remote takeover.
Trump Signs Emergency Order to Block Foreign-Made Backdoors From US Power Grid
Executive Order 14420 bars untrusted foreign equipment from America's high-voltage electricity network, citing hidden remote-access capabilities that could let hostile governments cut the lights.
ICS Cybersecurity Conference Brings Back Hands-On Industrial Attack Training
A practical course on attacking and defending industrial control systems returns to Nashville this October, giving security professionals rare access to live hardware scenarios.
Iran-Linked Hackers Knocked a UK Power Plant Offline for Four Days
A cyberattack tied to Iran shut down a British power station for nearly a working week, raising hard questions about how well the country's energy grid can withstand a determined digital assault.
August 2026 ICS Patch Tuesday: Siemens, Schneider Electric and Phoenix Contact Fix Serious Flaws in Factory Equipment
A batch of August security updates covers industrial control systems that run factories, power networks and buildings. One Siemens flaw scores the maximum possible severity rating and lets attackers run any code they like on a connected device without needing a password.
Iranian Hackers Hit Water Systems in at Least 12 US States
New Jersey and Alabama are the latest to confirm attacks on water infrastructure. So far, no taps have run dry and no water has been contaminated, but the campaign is still expanding.
Russian Hackers Used an Obscure Telecom Back Door to Shut Down a Polish Heating Plant
A second cyberattack on Poland's energy sector, running alongside a previously disclosed assault, exploited a rarely scrutinised type of private mobile network to reach deep inside a plant supplying heat to 50,000 people.
A Safety Recall on a Truck Brake Controller Was Also Quietly Fixing Security Flaws
NMFTA researchers found that a Bendix EC-80 recall patched serious software vulnerabilities, including one that could let an attacker run their own code on a commercial truck's braking system, with no cybersecurity advisory ever issued.
The criminals behind the Minnesota water attacks may have a better backup of your plant than you do
Hackers hit more than 30 small water utilities in two days. The most alarming detail isn't how they got in: they may have walked out with the only complete copy of control logic the operators ever had.
New York Hands $9 Million to 153 Water Utilities to Plug Cyber Gaps
The grants come as hackers step up attacks on water and wastewater systems across multiple US states. Here is what the money buys, and what it means for the people who drink the water.
A Decade of Iranian Cyberattacks on America: What We Know
From wiping casino hard drives to targeting children's hospitals, a pattern of disruptive attacks tied to Iran stretches back more than a decade. Now investigators are asking whether the same playbook was used against water systems in seven US states.
Rockwell Automation Fixes Four Code-Execution Bugs in Arena Simulation Software
A booby-trapped file is all it takes to trigger the flaws. Defence contractors, hospitals and supply-chain firms all run the software.