operational security

With the official end of support for Windows 10 looming in October 2025, organisations worldwide are faced with the inevitability of migrating to Windows 11. While much of the discussion around this migration focuses on compliance and technical requirements, forward-thinking privacy leaders are...

The landscape of industrial automation continues to evolve at a rapid pace, and with these advancements come ever-increasing cybersecurity risks. ABB Automation Builder, a prominent engineering suite widely adopted in the energy sector and critical infrastructure worldwide, now finds itself...

Across the global energy sector, industrial control systems (ICS) are pivotal to the reliable, resilient, and secure operation of critical infrastructure. The recent cybersecurity advisory concerning the Hitachi Energy Relion 670/650/SAM600-IO series, published by CISA and cross-verified with...

The recent release of five Industrial Control Systems (ICS) advisories by the Cybersecurity and Infrastructure Security Agency (CISA) marks a significant moment for cybersecurity professionals and operational technology stakeholders. Against a backdrop of rapidly evolving cyber threats, these...

On April 30, 2025, Microsoft disclosed a critical security vulnerability identified as CVE-2025-33074, affecting Azure Functions. This flaw arises from improper verification of cryptographic signatures, potentially allowing authorized attackers to execute arbitrary code over a network...

Rockwell Automation's ThinManager platform has long been regarded as a robust solution in the realm of industrial automation, providing centralized management of thin clients and session-based environments for critical manufacturing infrastructure worldwide. Yet, the discovery of two significant...

The Pakistan Telecommunication Authority (PTA) has issued a critical cybersecurity advisory concerning a serious vulnerability found in Microsoft's Windows 11 version 24H2. This security flaw specifically affects devices installed or updated using outdated physical installation media such as...

In the ever-evolving landscape of cybersecurity, a recent vulnerability identified in SMA's Sunny Portal has raised significant concerns, particularly for organizations operating within the energy sector. This flaw, cataloged as CVE-2025-0731, underscores the critical importance of robust...

The industrial cybersecurity landscape continues to evolve rapidly, with new vulnerabilities emerging in critical systems that underpin both manufacturing and modern infrastructure. Recent advisories from the Cybersecurity & Infrastructure Security Agency (CISA) and Siemens have drawn urgent...

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has recently drawn attention to a wave of critical vulnerabilities affecting Schneider Electric Modicon programmable logic controllers (PLCs)—devices that form a backbone in industrial automation globally. These vulnerabilities...

The landscape of industrial cybersecurity is evolving at a rapid pace, and recent advisories from authoritative bodies like CISA are crucial reading for any stakeholder in operational technology or critical infrastructure. Among the latest updates is a significant alert concerning...

In the world of industrial cybersecurity, every new advisory issued by the Cybersecurity and Infrastructure Security Agency (CISA) reads as both a technical bulletin and a stark warning. This is certainly true with the recent CISA alert centered on vulnerabilities within Subnet Solutions Inc.’s...

Siemens Insights Hub Private Cloud Vulnerabilities: Assessing Critical Risks and Proactive Defense in Industrial IoT As the digital backbone of the modern manufacturing revolution, Siemens’ Insights Hub Private Cloud has become a linchpin for data-driven industrial operations globally. However...

The Cybersecurity and Infrastructure Security Agency (CISA) has recently expanded its Known Exploited Vulnerabilities (KEV) Catalog by adding two critical vulnerabilities identified in the Linux Kernel: CVE-2024-53197: An out-of-bounds access vulnerability. CVE-2024-53150: An out-of-bounds read...

Amid rising global threats targeting industrial control systems (ICS), a cluster of security vulnerabilities discovered in Hitachi Energy’s RTU500 series has captured the attention of critical infrastructure operators worldwide. With the U.S. Cybersecurity and Infrastructure Security Agency...

In a dramatic reminder of the relentless nature of cyber threats targeting the Windows ecosystem, the March 2025 Patch Tuesday disclosures have thrust a lingering zero-day vulnerability into the spotlight. Marked as CVE-2025-24983, this use-after-free flaw in the storied Win32 kernel subsystem...

If your Planet Technology network appliances have recently been basking in the (mis)fortune of being in the news, it’s likely not for their blazing gigabit speeds or rack-mount elegance—rather, a clutch of vulnerabilities has landed these devices on CISA’s advisories page, and not in the...

In the world of wireless industrial communications, not every threat can be launched from the dark corners of the internet. Sometimes, it takes a pair of boots, a bolt-cutter, and a deep knowledge of obscure file systems to crack open systems running the backbone of our critical infrastructure...

Eight in the morning at your average critical infrastructure plant: the sweet serenade of humming motors, flashing status lights, and, somewhere deep in the control network, the silent scream of a security vulnerability newly discovered. This time, the haunting culprit is none other than the...

Lantronix Xport Vulnerability: A Critical Security Alert for Industrial Control Networks In today's interconnected world, industrial control systems (ICS) and critical infrastructure entities rely heavily on specialized embedded devices like Lantronix Xport to ensure smooth and secure...