Mitsubishi Electric’s GT Designer3 — the engineering suite used to build and transfer HMIs for GOT series panels — remains in the crosshairs of ICS security teams after coordinated disclosures and multiple CISA advisories identified serious weaknesses in GT Designer3, the associated GT SoftGOT...
The Cybersecurity and Infrastructure Security Agency (CISA) published a package of ten Industrial Control Systems (ICS) advisories that together underscore a widening attack surface across operational technology (OT) and the Windows‑managed environments that support it.
Background
Industrial...
CISA’s September 18 bulletin published nine new Industrial Control Systems (ICS) advisories that affect a broad cross-section of OT vendors — from industrial networking stacks to remote terminal units, asset-management suites, machine-vision firmware, and industry-specific protocols —...
cisa
cognex in-sight
dover maglink lx4
end-of-train protocol
firmware
hitachi energy asset suite
hitachi energy service suite
ics
ics advisories
industrial control systems
mitsubishi electric melsoft
network segmentation
ot security
patch management
rail protocols
schneider electric saitel
security audits
westermo
windowsot
Delta Electronics’ DIALink — a widely used industrial automation server — is the subject of a coordinated vulnerability disclosure that identifies two directory‑traversal / authentication‑bypass flaws (CVE‑2025‑58320 and CVE‑2025‑58321) affecting DIALink versions V1.6.0.0 and earlier, and urges...
A remote information‑disclosure weakness in Mitsubishi Electric’s MELSEC iQ‑F series CPU modules has been publicly described as a cleartext transmission of sensitive information over SLMP, enabling an attacker with network access to capture credentials and potentially read/write device values or...
cisa
cve-2025-7731
cwe-319
edr
industrial control systems
information disclosure
ip filtering
melsec iq-f
mitsubishi electric
network segmentation
ot security
plc vulnerabilities
remote access
slmp
vpn mitigation
windowsotwindows security
Mitsubishi Electric’s MELSEC iQ‑F family of CPU modules has been formally flagged with a network‑accessible vulnerability that allows unauthenticated remote actors to read and write device values — and in some deployments to halt program execution — because the affected product’s Modbus/TCP...
The Siemens MS/TP Point Pickup Module, a specialized device widely deployed across sectors such as commercial facilities, government infrastructure, healthcare, information technology, and transportation, has recently been found vulnerable to a newly identified security flaw. This vulnerability...