critical infrastructure

The National Cyber Security Centre’s 2025 Annual Review delivered a blunt verdict: the UK’s cyber threat environment has escalated from episodic nuisance to sustained national emergency, and the question for leaders is no longer whether they will be attacked but how they will survive the attack...

A severe, unauthenticated remote code‑execution vulnerability in Industrial Video & Control’s Longwatch video surveillance and monitoring platform has been disclosed by CISA: an exposed HTTP endpoint in Longwatch versions 6.309 through 6.334 allows specially crafted HTTP GET requests to execute...

The Louvre’s security story after the October heist is less a thriller’s last-act twist and more an institutional autopsy: auditors once logged that the server driving the museum’s video surveillance accepted the literal password LOUVRE, a detail that has become shorthand for a decade of...

A fresh telemetry snapshot from remote‑support sessions underscores a stark reality: as Microsoft’s Windows 10 support deadline approaches, a large share of real‑world endpoints remain on an OS that will soon stop receiving routine security patches—creating an urgent migration and...

Hitachi Energy has confirmed a vulnerability in its Asset Suite platform that lets an authenticated user manipulate performance log content or inject crafted entries into logfiles—behavior that can be used to obscure malicious activity or carry out follow‑on attacks—affecting Asset Suite...

Australia’s leading security practitioners and program owners have been named as finalists in the 2025 Benchmark Security Awards, an annual recognition program run by iTnews in partnership with techpartner.news that celebrates excellence in cybersecurity leadership across government, energy...

India’s digital backbone is far more entangled with US‑headquartered software, cloud and platform providers than most policymakers acknowledge — and that entanglement now reads as a strategic vulnerability that must be addressed if New Delhi wants meaningful digital sovereignty by 2030...

India’s digital backbone is more dependent on US-controlled software, platforms and cloud services than most citizens realize — and that dependence now reads as a strategic vulnerability in the eyes of national security analysts and independent researchers. Background India’s public discourse...

Microsoft’s cybersecurity posture is under renewed fire after U.S. Senator Ron Wyden urged the Federal Trade Commission to open a formal investigation into the company’s default security settings, arguing that Microsoft shipped “dangerous, insecure software” that materially enabled a 2024...

Internet traffic between Asia, the Middle East and parts of Europe slowed sharply after multiple undersea fibre‑optic cables in the Red Sea were severed on 6 September 2025, forcing cloud operators — most visibly Microsoft Azure — and regional carriers to reroute traffic, warn customers of...

A sudden cluster of undersea fiber cuts in the Red Sea has forced Microsoft Azure and other cloud and carrier operators to reroute traffic, producing measurable latency and slower internet performance across parts of South Asia, the Gulf and beyond—an event that exposes how a handful of damaged...

Microsoft has warned that users of its Azure cloud may see higher-than-normal latency and intermittent disruptions after multiple undersea fiber-optic cables in the Red Sea were cut, forcing traffic onto longer alternate routes while repair work and global rerouting continue. Background The Red...

Microsoft's warning that Azure users could face increased latency after multiple subsea cables were reported "cut" in the Red Sea has thrust a quiet but critical piece of global infrastructure into the headlines: the fibre-optic arteries on the ocean floor that carry the world's internet...

Multiple undersea fibre‑optic cables in the Red Sea were severed in early September, producing widespread slowdowns for Internet users and measurable latency for cloud customers — a disruption that exposed how the physical backbone of the Internet can become a single point of failure for modern...

Honeywell’s OneWireless Wireless Device Manager (WDM) has been the subject of a high-severity coordinated disclosure: multiple vulnerabilities in the Control Data Access (CDA) component allow remote attackers to cause information disclosure, denial-of-service, and, in the worst cases, remote...

Schneider Electric has published an advisory—republished by CISA—about an improper privilege management vulnerability in its Saitel family of Remote Terminal Units (RTUs) that has been assigned CVE‑2025‑8453 and carries a CVSS v3.1 base score of 6.7, affecting Saitel DR RTU firmware versions...

CISA and partner agencies have issued a sharply worded joint Cybersecurity Advisory warning that People’s Republic of China (PRC) state‑sponsored Advanced Persistent Threat (APT) actors have been compromising global telecommunications and critical‑infrastructure networks by targeting...

The Colonial Pipeline blackout of May 2021 remains a cautionary touchstone: ransomware that began in corporate IT cascaded into physical shortages and public alarm, a stark demonstration that operational technology (OT) insecurity costs more than data — it can disrupt energy, water, food and...

Siemens’ RUGGEDCOM APE1808 appliances carry high‑risk management‑plane vulnerabilities that can let an authenticated administrator—or an attacker who gains elevated credentials—execute arbitrary operating‑system commands and escalate local service privileges, creating a significant threat to...

Siemens has confirmed a widespread denial-of-service (DoS) vulnerability affecting multiple models in the SIPROTEC 4 and SIPROTEC 4 Compact line that can be triggered remotely by an unauthenticated attacker during interrupted file-transfer operations; the issue is tracked as CVE-2024-52504 and...