Vendors and CVEs › Sectors › Defence and aerospace
Defence and aerospace: industrial cyber security news for the sector
5 stories in Industrial Cyber Brief name Defence and aerospace, 1 on CISA’s list of known exploited flaws, from Thursday 29 October 2026 to Saturday 7 November 2026. Newest first; each links the full story with who is affected and what to do.
The stories
Low
Abbott Risk Consulting joins ISASecure certification programme
The International Society of Automation announced that Abbott Risk Consulting Ltd. has joined ISASecure, the certification programme for the ISA/IEC 62443 industrial cybersecurity standards.
Medium
Russia-aligned Gorbag group spies on Ukrainian public and defence bodies
ESET reports a Russia-aligned group, Gorbag, has run spearphishing espionage against Ukrainian organisations since at least February 2025.
Critical
Internet-connected freezers and cold chain systems are becoming a cyber target
Forescout reports attacks on French supermarket refrigeration that changed temperature and defrost settings.
High
China-backed group used AI penetration tool against about 140 targets
CrowdStrike says the group Vapor Panda used the agentic AI penetration testing tool ARTEX, with DeepSeek, to compromise about 140 targets in 11 days.
High Known exploited
State-linked group exploits Cisco SD-WAN flaw to plant KeyDrift backdoor
Cisco Talos says an advanced threat group, UAT-11473, used CVE-2026-20127, an authentication bypass in Cisco SD-WAN Catalyst Controller, to gain access.