scada security

For engineers, IT managers, and cybersecurity professionals invested in the operational continuity of critical manufacturing environments, the safety and security of Industrial Control Systems (ICS) software remain of paramount importance. Among the most widely deployed ICS programming...

In a world increasingly dependent on interoperable, interconnected systems, the security of industrial control equipment is both a linchpin of critical infrastructure and a potential avenue for devastating cyberattacks. Hitachi Energy's RTU500 series, a stalwart in substation automation and...

In recent months, a concerning trend has emerged within U.S. critical infrastructure: unsophisticated cyber actors have increasingly targeted industrial control systems (ICS) and supervisory control and data acquisition (SCADA) networks, particularly those underpinning the nation’s Energy and...

Industrial control systems (ICS) stand at the heart of critical infrastructure worldwide, silently powering sectors such as energy, water, transportation, and manufacturing. In an era of proliferating cyber threats, the need for timely intelligence and robust defenses has never been more acute...

Industrial Control Systems (ICS) remain at the heart of critical infrastructure, powering sectors from energy and water to manufacturing and logistics. With their foundational role in both public safety and economic stability, ICS environments have become increasingly attractive targets for...

Optigo Networks, a company based in Canada with a significant footprint in critical manufacturing control systems across the globe, has come under the security spotlight following the disclosure of a severe vulnerability affecting its ONS NC600 devices. This vulnerability, cataloged as...

Optigo Networks’ ONS NC600, a widely deployed device in critical manufacturing environments across the globe, has come under serious scrutiny following the recent disclosure of a severe security vulnerability—assigned as CVE-2025-4041. This issue, which enables remote exploitation via hard-coded...

The disclosure of a new zero-click vulnerability within Microsoft’s Windows Deployment Services (WDS) has sent ripples through the enterprise and cybersecurity communities, highlighting longstanding architectural challenges in legacy Windows infrastructure. This alarming flaw illustrates not...

In the ever-evolving landscape of industrial automation and control systems, the security of software platforms used for programming programmable logic controllers (PLCs) is paramount. Delta Electronics’ ISPSoft, a widely deployed development suite for configuring and managing Delta PLCs...

Rockwell Automation's ThinManager platform has long been regarded as a robust solution in the realm of industrial automation, providing centralized management of thin clients and session-based environments for critical manufacturing infrastructure worldwide. Yet, the discovery of two significant...

On April 29, 2025, the Cybersecurity and Infrastructure Security Agency (CISA) took significant action by publishing three new advisories targeting vulnerabilities in Industrial Control Systems (ICS)—a sector that forms the backbone of critical national infrastructure. While ICS technologies...

Schneider Electric’s ConneXium Network Manager: How End-of-Life ICS Vulnerabilities Put Critical Infrastructure at Risk Schneider Electric’s ConneXium Network Manager, once the beating heart of industrial network management, now finds itself at the epicenter of a sobering cybersecurity...

Schneider Electric has long been recognized as a leader in industrial automation and energy management. However, its widespread deployment in critical infrastructure sectors means security flaws in its products are not simply IT issues—they're converging with the heart of global operational...

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has recently drawn attention to a wave of critical vulnerabilities affecting Schneider Electric Modicon programmable logic controllers (PLCs)—devices that form a backbone in industrial automation globally. These vulnerabilities...

In the world of industrial cybersecurity, every new advisory issued by the Cybersecurity and Infrastructure Security Agency (CISA) reads as both a technical bulletin and a stark warning. This is certainly true with the recent CISA alert centered on vulnerabilities within Subnet Solutions Inc.’s...

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) recently issued a high-severity advisory concerning Siemens Industrial Edge Devices, signaling one of the most consequential authentication bypass vulnerabilities in the industrial control system (ICS) domain to date. Siemens, a...

Amid rising global threats targeting industrial control systems (ICS), a cluster of security vulnerabilities discovered in Hitachi Energy’s RTU500 series has captured the attention of critical infrastructure operators worldwide. With the U.S. Cybersecurity and Infrastructure Security Agency...

The list of vulnerabilities recently disclosed in B&R’s APROL industrial automation platform reads like a what’s-what of cybersecurity risks facing critical infrastructure systems today. This advisory, released by CISA and tracked under ICSA-25-093-05, not only highlights the diversity of...

In an era where the security and reliability of our physical infrastructure are increasingly interwoven with digital systems, every new advisory concerning industrial control systems (ICS) carries a weight that resonates far beyond the world of cybersecurity professionals. On March 20, 2025, the...

Schneider Electric Uni-Telway Driver Vulnerability: What It Means for Critical Infrastructure and Enterprise Security Schneider Electric’s technologies are deeply woven into the fabric of industrial environments worldwide, from energy and manufacturing plants to commercial facilities. When a...