critical infrastructure

A critical new vulnerability in the Johnson Controls FX80 and FX90 platforms has brought the cyber-physical security of critical infrastructure sharply into focus, as industrial operators worldwide brace for the fallout from the recently disclosed CVE-2025-43867. Affecting building automation...

A newly disclosed vulnerability in Delta Electronics’ DIAView industrial automation management system has put critical infrastructure sectors on high alert, as experts warn of the significant risk posed by remotely exploitable path traversal flaws that could allow attackers to access or alter...

A major security vulnerability has been discovered in Packet Power’s EMX and EG products, exposing critical infrastructure worldwide to the risk of unauthorized remote access and control. The vulnerability, designated CVE-2025-8284, allows attackers to bypass authentication entirely, offering a...

A significant security vulnerability has emerged for the Mitsubishi Electric ICONICS Product Suite and MC Works64, one that underscores the critical importance of proactive patch management and robust network segmentation across industrial environments. Marked as CVE-2025-7376, the flaw...

A sweeping new security advisory has sent ripples through the solar and critical infrastructure communities, revealing multiple severe vulnerabilities in Tigo Energy’s Cloud Connect Advanced (CCA) platform—an essential part of solar optimization and inverter systems deployed worldwide. With a...

Microsoft’s abrupt suspension of cloud service access to Nayara Energy, a leading Indian oil refiner, has sent shockwaves through the global technology and energy sectors, shining a spotlight on the increasingly complex interplay between geopolitics, corporate structure, and digital sovereignty...

Amid a rapidly evolving cyber threat landscape, the recent joint advisory from the Cybersecurity and Infrastructure Security Agency (CISA) and the United States Coast Guard (USCG) shines a spotlight on the importance—and ongoing challenges—of cyber hygiene across America’s most vital...

In early 2024, a proactive collaboration between the Cybersecurity and Infrastructure Security Agency (CISA) and the United States Coast Guard (USCG) brought renewed scrutiny to the state of cyber hygiene across America’s critical infrastructure. The joint threat hunt, conducted at the behest of...

Here is a summary of the CISA ICS advisory ICSA-25-212-01 for the Güralp FMUS Series Seismic Monitoring Devices, published on July 31, 2025: 1. Executive Summary CVSS v4 Score: 9.3 (Critical) Vendor: Güralp Systems Equipment: Güralp FMUS Series Seismic Monitoring Devices (All versions)...

Rockwell Automation’s Lifecycle Services—with key offerings powered by VMware—have become foundational in modernizing industrial infrastructures, integrating both critical manufacturing systems and advanced cybersecurity managed services at global scale. Yet as these digital transformation...

For organizations safeguarding the integrity of seismic monitoring, the Güralp FMUS Series has historically stood as a trusted solution—a set of devices entrenched worldwide in critical infrastructure and research networks. Yet, recent revelations about a critical security flaw in all versions...

As the world’s energy and technology spheres become ever more entwined with global geopolitics, the recent tussle over access to digital infrastructure at India’s Nayara Energy exposes fresh hazards facing critical industries—and emerging powers—in the age of cloud dominance. When Europe imposed...

Samsung’s HVAC Data Management Server (DMS) platform, a mainstay in building management and smart facility ecosystems, has come under intense security scrutiny following the disclosure of a suite of critical vulnerabilities. As global smart infrastructure continues to boom, the need for robust...

The cybersecurity landscape for industrial control systems (ICS) continues to evolve at a rapid pace, with new vulnerabilities emerging as digital transformation penetrates operational environments. On July 29, 2025, the Cybersecurity and Infrastructure Security Agency (CISA) took another...

For critical infrastructure operators, scientists, and engineers, National Instruments LabVIEW occupies a unique and essential place. This graphical programming environment is a workhorse across research laboratories, industrial automation, biomedical development, aerospace, and countless other...

Delta Electronics’ DTN Soft sits at the center of a freshly disclosed security story—a tale that weaves together critical infrastructure, global supply chains, and the persistent risks introduced by unsafe software handling practices. This detailed analysis explores the core of CVE-2025-53416, a...

In a development commanding the attention of cybersecurity professionals worldwide, the Cybersecurity and Infrastructure Security Agency (CISA), in collaboration with multiple international law enforcement and cybersecurity entities, has released an updated advisory on the Scattered Spider...

The past week in cybersecurity delivered a barrage of incidents and regulatory developments, all underscoring the persistent fragility of digital infrastructure across industries and governments. Ransomware continues to grab headlines, as do high-profile data breaches affecting millions of...

In a week marked by both mounting threats and significant shifts in the cybersecurity landscape, some of the world’s most recognizable organizations and agencies faced unprecedented security challenges. From ransomware attacks and data breaches exposing millions of personal records to new...

The recent revelation that the U.S. National Nuclear Security Administration (NNSA) was among the victims of a sophisticated cyberattack exploiting a Microsoft SharePoint vulnerability has reignited deep concern about the fragility of American digital infrastructure. The implications extend far...