critical manufacturing

Siemens has disclosed a cluster of high‑impact vulnerabilities in its COMOS engineering platform that, taken together, create multiple realistic attack paths — from sensitive information disclosure and cross‑site scripting to remote code execution and denial‑of‑service — and the vendor and...

Nullsoft Scriptable Install System (NSIS) code used inside several SIMOTION setup components contains a local privilege‑escalation flaw that Siemens and U.S. cyber authorities have republished as a coordinated advisory, warning that installing affected SIMOTION Tools on Windows can allow an...

Delta Electronics’ engineering tool EIP Builder contains an XML External Entity (XXE) vulnerability (CVE-2025-57704) that can expose sensitive files when the application parses crafted XML, and vendors and national incident responders now recommend an immediate upgrade to mitigate the risk...

Delta Electronics has published an advisory warning that its COMMGR engineering and simulation software contains multiple high‑severity vulnerabilities — including a stack‑based buffer overflow (CVE‑2025‑53418) and a code‑injection flaw (CVE‑2025‑53419) — that affect COMMGR versions up to and...

Rockwell Automation’s Micro800 line of programmable logic controllers (PLCs) has been the subject of a high-severity U.S. Cybersecurity and Infrastructure Security Agency (CISA) advisory republished on August 14, 2025, warning that multiple remotely exploitable vulnerabilities tied to Azure RTOS...

A newly republished CISA advisory warns that Rockwell Automation’s Studio 5000 Logix Designer contains an improper input validation flaw that can be triggered via environment variables, allowing an attacker with local network access to crash the engineering software—and in some cases plausibly...

Rockwell Automation, a global leader in industrial automation and information technology, finds itself at the forefront of a critical security challenge following the recent disclosure of high-severity vulnerabilities in its Lifecycle Services solutions that leverage VMware technologies. These...

Here is a summary of the CISA ICS advisory ICSA-25-212-01 for the Güralp FMUS Series Seismic Monitoring Devices, published on July 31, 2025: 1. Executive Summary CVSS v4 Score: 9.3 (Critical) Vendor: Güralp Systems Equipment: Güralp FMUS Series Seismic Monitoring Devices (All versions)...

Delta Electronics’ DTN Soft sits at the center of a freshly disclosed security story—a tale that weaves together critical infrastructure, global supply chains, and the persistent risks introduced by unsafe software handling practices. This detailed analysis explores the core of CVE-2025-53416, a...

When news of a security vulnerability strikes a cornerstone of industrial management, it’s a wake-up call for all involved with operational technology—especially when that system comes from an industry heavyweight like Schneider Electric. The recent discovery, detailed in public advisories by...

Siemens’ User Management Component (UMC) forms a critical backbone for authentication and authorization across a spectrum of the company’s renowned industrial automation offerings. Recent advisories, including those published by authoritative bodies like the U.S. Cybersecurity and Infrastructure...

In March 2025, the Cybersecurity and Infrastructure Security Agency (CISA) issued an advisory concerning a critical vulnerability in Rockwell Automation's Verve Asset Manager. This flaw, identified as CVE-2025-1449, poses significant risks to organizations utilizing this software, particularly...

The world of industrial automation rarely makes headlines outside specialist circles—except when vulnerabilities are discovered that have the potential to reverberate far beyond a single company or software user base. Such is the case with the recent advisory from the Cybersecurity and...

The latest CISA advisory casts a spotlight on newly identified vulnerabilities affecting a subset of ABB’s DCT880 and DCS880 memory units, which integrate the powerful CODESYS Runtime for industrial control. While the announcement may seem routine within the ongoing narrative of cybersecurity, a...

Attention, WindowsForum community: A new advisory published by CISA has revealed serious vulnerabilities in mySCADA's myPRO software suite, which are particularly concerning for industrial control system (ICS) environments. The vulnerabilities are so critical that they scored a whooping CVSS v4...

National Instruments has issued a crucial alert regarding vulnerabilities affecting its LabVIEW software, which is extensively utilized in various sectors, including critical manufacturing and defense. This advisory, shared by the Cybersecurity and Infrastructure Security Agency (CISA)...

Siemens' TeleControl Server is currently in the spotlight due to a critical vulnerability that could severely impact its users. This vulnerability has been flagged with a perfect CVSS v4 score of 10.0, signalling an urgent need for mitigation strategies. The Cybersecurity and Infrastructure...

Executive Summary In a vital alert issued by CISA, a significant vulnerability has been identified in the ICONICS Product Suite and Mitsubishi Electric's MC Works64 software. The vulnerability is classified with a CVSS v3 score of 7.8, indicating that while exploitation isn't overly complex, the...