Archive
Everything published
Pick a day on the calendar, or go through the list below, newest first. Every briefing opens as it was published, and stories keep their own links, so anything you shared still works.
Pick a day
Browse by vendor, sector or CVE: every company, sector and vulnerability the Brief has covered, each with its stories.
Every briefing
per page
November 2026
Wednesday 11 November 2026
- Critical Barracuda email gateways under attack through chained flaws Known exploited
- Critical Bender fixes two exploited Linux kernel flaws in EDGE500IP Known exploited
- Critical Fortinet FortiOS and FortiSASE routing flaw lets attackers send false routes
- High FortiManager flaw lets low-privilege admin take over managed FortiGates
- High Check Point links three China-linked spying campaigns to Sparrow malware
- High Refrigeration attacks in Europe may foreshadow US infrastructure attacks
- High Report says hackers are targeting European infrastructure systems
- Medium Report warns Chinese solar inverters raise blackout risk
- Medium CISA launches programme to find internet-exposed industrial devices with manufacturers
- High Fortinet fixes login bypass flaw in its SSH service
- Medium Memory flaw in Schneider Electric switchboard design software
- Medium Multiple flaws in Helmholz myREX24V2 remote-access routers
- Medium Bundled PHP flaws called php2shell affect Helmholz myREX24V2
- Medium Multiple flaws in mbCONNECT24 and mymbCONNECT24 remote-access services
- Medium Opening files in Siemens WinCC Graphics Designer can run attacker code
- Low Six-month US pilot offers water utilities free help fixing security gaps
Tuesday 10 November 2026
- Critical Moxa responds to OpenSSH password bypass on Linux without PAM Known exploited
- Critical OpenSSL flaws affect many B&R automation products and panels
- High Saudi East-West oil pipeline targeted near Medina, causing fire
- High Handala hacktivist group threatens Israeli water and power sites
- High Report profiles Russian GRU hackers linked to industrial attacks
- High Iranian hackers claim attacks on US water systems
- High Brenner Base Tunnel company reported hit by cyberattack
- Medium SonicWall releases fixes for seven flaws, including VPN login bypass
- Low IIT students build AI tool to defend water supply from hackers
Monday 9 November 2026
- High Weekly news roundup mentions refrigeration cyberattacks on European retailers Known exploited
- Medium Hong Kong CERT lists multiple flaws in SonicWall SonicOS
- Low Article compares Zyxel's statement with researchers' reports
- Low Interview profiles industrial security practitioner Mike Holcomb
- Low Daily OT security news digest for 8 November 2026
- Low Report links European fridge cyberattacks to Danfoss flaws and reconnaissance
Sunday 8 November 2026
Saturday 7 November 2026
- Critical ABB IPEC iSM Local Server has flaws in PHP and NTFS-3G Known exploited
- Critical SonicWall VPN flaw exploited and added to CISA's known-exploited list Known exploited
- High Singapore agency warns on poorly secured remote access to control systems
- High Attackers exploit Cisco firewall flaw to cause denial of service
- High Report claims UK cyber attack disrupted banks, power and water
- Medium First known cyberattack on a cooling system in Switzerland reported
- Medium Pro-Russian hackers claim attacks on European refrigeration systems
- Medium Australia's 2026 risk review names AI as growing threat to infrastructure
- Medium Multiple WAGO controllers affected by CODESYS flaws that allow remote code execution
- Medium Updated Mitsubishi Electric advisory on CC-Link IE TSN tampering and denial-of-service flaw
- Low Ransomware victims up 80% in third quarter, manufacturing hit hardest
- Low Abbott Risk Consulting joins ISASecure certification programme
Friday 6 November 2026
- Critical Patched Zyxel GS1900 switches still open to exploit used in attacks Known exploited
- Critical US agencies urge hardening of refrigeration and cold-chain monitoring systems
- Medium OT-ISAC reports flag aviation risks from shared providers and airport systems
- Medium Industry groups urge ten-year renewal of US cyber information-sharing law
- Medium Agencies publish questions to ask vendors about post-quantum cryptography
- Medium UK air traffic provider NATS IT failure cost over £30m
- Low Dragos appoints Rob T. Lee as first chief AI officer
- Low Sugs Lloyd builds SCADA bid capacity through Patna project
Thursday 5 November 2026
- Critical SonicWall will not patch two flaws in end-of-life management software
- Critical Cyber-attack on French blood service supplier overheats blood cold rooms
- High Zyxel patches switch zero-day used to hack nearly 1,000 devices
- Medium Russia-aligned Gorbag group spies on Ukrainian public and defence bodies
- Medium Australia updates risk guidance for critical infrastructure operators
- Medium New attacks on refrigeration equipment reported in Europe
- High WAGO password reset flaw could let attackers take over accounts
- High Phoenix Contact PLCnext Engineer flaws allow full compromise before version 2026.6
- High Siemens releases fixes for Node-RED flaw on SIMATIC IoT2050
- Low Phoenix Contact software tools affected by CodeMeter Runtime licence flaws
- Low Crytica Security signs US public sector distribution deal with Carahsoft
- Low Dispel joins White House-led pilot to secure rural hospital remote access
- Low Webinar on what IEC 62443 requires at the IT/OT boundary
- Low Forescout comments on NCSC speech about AI and old vulnerabilities
Wednesday 4 November 2026
- Critical Subnet Solutions PowerSYSTEM Center has flaws allowing SQL commands and admin access
- Critical Internet-connected freezers and cold chain systems are becoming a cyber target
- Medium AI use in industrial security is growing faster than the safeguards
- High Welotec TK routers have flaws that could give an attacker full control
- Low CISA launches November campaign on infrastructure resilience and recovery
- Low BaseRock and Radiflow add continuous OT risk monitoring to IEC 62443 advice
- Low ODVA's CIP Security certified to IEC 62443-4-2 Security Level 3
- Low Integrity360 widens its OT security services offering
Tuesday 3 November 2026
- Critical Known-exploited PHP flaws hit Festo Didactic and WAGO products Known exploited
- Critical Maximum-severity Node-RED flaw exploited to install Linux malware
- Critical Hackers remotely change freezer settings at European supermarkets
- Low UK cyber agency warns of AI-powered attacks within two years
- Low Cold chain attacks point to weak OT security in retail
Sunday 1 November 2026
- Critical Two Ivanti Connect Secure flaws exploited in the wild, CISA warns Known exploited
October 2026
Saturday 31 October 2026
- Critical ABB gateway and NAM products hit by PHP flaws now listed as exploited Known exploited
- Critical Siemens lists products affected by Node.js Brotli flaw 'Node2Shell' Known exploited
- High China-backed group used AI penetration tool against about 140 targets
- Medium VEGA firmware configuration interface exposes credential hashes to low-rights users
Friday 30 October 2026
- High Hitachi Energy CoreTec flaws allow full device control by authenticated users
- Medium Penetration tester finds Windows 7 servers linked to factory milling machines
- High Welotec SMART EMS PHP flaws allow remote code execution without login
- Medium ABB ASPECT building management system has PHP flaws allowing code execution
- Low OmniTrust launches GridAuth device identity platform for energy grids
- Low Explainer published on NIST guide to operational technology security
- Low Industrial control system security market reported to be growing
- Low Philippine organisations urged to address emerging operational technology risks
Thursday 29 October 2026
- High State-linked group exploits Cisco SD-WAN flaw to plant KeyDrift backdoor Known exploited
- High Volt Typhoon rotates short-lived hacked devices to hide its access
- Low Fortinet Korea to hold OT security summit in Seoul
- Low SSenStone receives government funding for OT security research
- Low Fortinet reports OT security sales up nearly 40 per cent
Wednesday 28 October 2026
- Critical METTLER TOLEDO Octo Image Server also hit by PHP 'PHP2Shell' flaws Known exploited
- Critical Mitsubishi Electric ICONICS and GENESIS software has flaws allowing code execution and login bypass Known exploited
- Critical EPICS Base has four flaws, including possible remote code execution
- High Warlock ransomware group hit a water utility, likely through SharePoint
- Medium Lazarus spies on South Korean firms using abused security software
- Medium ENGIE confirms attackers stole customer data from marketing platform
- Medium Grid operator sets deadline for power producers to restore telemetry
- Low Hitachi database, job-management and router products have security flaws
- Low Johnson Controls access control software has two confirmed flaws
- Low Moxa remote-access client and cellular gateway have three flaws
- Low Manufacturers struggle to share security duties and budgets between IT and OT
Tuesday 27 October 2026
- Critical PHP 'php2shell' flaws now listed as known exploited; Siemens still assessing products Known exploited
- Medium NERC CIP-003-9 vendor remote access rules create audit and recordkeeping burdens
- Medium OT-ISAC maps Asia-Pacific policy rules for critical infrastructure and operational technology
- Medium CISA publishes 2030 strategy focused on critical infrastructure and resilience
- Low Frenos estimates two years before AI can reliably plan attacks on industrial systems
- Low Schneider Electric, NVIDIA and HPE announce AI agents for industrial sites
- Low Adroit and Aril Technologies deploy SCADA systems in Nigerian oil and gas
- Low Blue Initiative launches vulnerability database for the maritime sector
Sunday 25 October 2026
Saturday 24 October 2026
- Critical Internet-exposed refrigeration controls found in 99 countries after French supermarket attacks
- High Siemens reviews which products are hit by PHP 'php2shell' flaws
- High New backdoor hid its control server in Yggdrasil network before attack on Ukrainian grain firm
- Medium US Coast Guard issues cybersecurity guidance for maritime operators
- Low OT security firm Indurex raises €7 million
- Low NineTenths joins ISASecure industrial cybersecurity certification programme
Friday 23 October 2026
- Critical Siemens Software Center flaw lets local attacker run code; exploitation reported Known exploited
- Critical Siemens S7-1500 MFP controllers have many flaws in Linux subsystem
- Critical Siemens S7-1500 TM MFP module has many Linux subsystem flaws
- Critical Kiloview E3 video encoder has nine flaws that could allow full takeover
- Critical Siemens RUGGEDCOM CROSSBOW access controller has SQLite flaws; update available
- Critical Internet-exposed refrigeration controllers at over 700 French supermarkets reportedly tampered with
- High Siemens RUGGEDCOM CROSSBOW flaws allow database commands and privilege escalation
- High Siemens SIMATIC WinCC database flaw lets a user run commands on the host
- High Siemens Industrial Edge App Publisher flaws could let a network attacker run code
- High Siemens SIMATIC industrial PCs have a Secure Boot test-key flaw
Thursday 22 October 2026
- Critical CISA says Plex, Siemens and SiteGuard flaws are being exploited Known exploited
- High Ransomware groups exploit Palo Alto GlobalProtect VPN flaw since June Known exploited
- High CISA warns SafePay has hit 600 critical infrastructure victims
- High CISA says SafePay ransomware has breached over 600 critical infrastructure organisations
- Medium Hackers hid backdoor in VMware Tools during two-year Russian healthcare intrusion
- Low Mitsubishi Electric announces new security product for industrial equipment
- Low Private firms fund $10 million cybersecurity support for small utilities
- Low Cisco launches operational technology security certification
- Low Experts say AI could help novices attack utilities and plants
- Low Article discusses a shared way to talk about OT risk
Wednesday 21 October 2026
- Critical Siemens fixes Software Center flaw already used in attacks Known exploited
- Critical CISA adds six actively exploited flaws, including Siemens Software Center Known exploited
- Critical Hundreds of freezers reportedly forced to defrost, spoiling food
- High Moxa AIG-302 ThingsPro Edge flaws could expose sensitive data
- High Hitachi Energy MicroSCADA X SYS600 has CSV injection and authentication flaws
- High Flaws in PEAK-System CAN drivers for Windows could crash the system
- High Remote oil and gas sites face risk through links and vendor access
- Medium Hitachi Energy warns of flaws in RTU500 CMU firmware
- Medium OpenSSL flaws affect Festo AX OS in the CEPE product
- Medium Pilz IndustrialPI tools have flaws allowing session takeover and file deletion
Tuesday 20 October 2026
Monday 19 October 2026
- Critical Hackers hit French grocery refrigeration systems, spoiling food and starting fires
- Critical Researchers warned of refrigeration controller flaws months before French supermarkets were hit
- High Fortinet flaws used to plant hidden malware on firewalls Known exploited
- Medium Moxa AIG-302 Series has two flaws in versions up to v1.4.1
- Medium Johnson Controls reports flaw in American Dynamics VMS before version 3.10
- Medium Schneider Electric flags data authenticity flaw in Sage remote terminal units
- Medium AI tool rebuilt attacks on Danfoss refrigeration controllers in 28 minutes
- Medium India sets binding cybersecurity rules for the power sector from April 2027
Sunday 18 October 2026
- High Eclipse Milo flaws could expose credentials and stop servers responding
- High Six flaws found in CISA's Malcolm network analysis software
- Critical Attackers spoiled food at French supermarkets by altering refrigeration controls
- High French supermarket refrigeration attacks widen to Copeland and Dixell controllers
- Medium Extortion group n0n claims 38 maritime and logistics organisations on leak site
- Medium Singapore sets quantum-safe migration deadlines and funds pilots for critical infrastructure
- Medium MITRE ATT&CK version 20 adds more industrial and critical infrastructure threats
- Medium FERC audits find gaps in power generator registration and shared control centres
- Medium FERC finds cybersecurity gaps at US power firms, including AI access risks
Weekly editions
One email on Mondays: the week's ten, from that week's daily briefings.
Get the Brief by email
A five-minute email every morning: the industrial cyber news that matters to your plant, what to do, and how soon.
Sign up on the home page