building automation security

ABB’s KNX Update Tool advisory is an uncomfortable reminder that the most consequential security problems in building automation are not always traditional software bugs that disappear with the next patch. The newly disclosed CVE-2026-12705 affects the ABB and Busch-Jaeger (BJE) variants of the...

CISA republished ABB’s October 7, 2025 EIBPORT security advisory on May 28, 2026, warning that EIBPORT V3 KNX and EIBPORT V3 KNX GSM firmware before version 3.9.2 contains a high-severity web vulnerability that can expose sensitive device data and allow configuration changes. The advisory is not...

The latest CISA industrial control systems advisory puts a sharp spotlight on Contemporary Controls BASC-20T and, more specifically, on an old building automation controller that should probably never have been left to age quietly on live networks. According to the advisory, successful...