Vendors and CVEs › Sectors › Transport
Transport: industrial cyber security news for the sector
18 stories in Industrial Cyber Brief name Transport, 1 on CISA’s list of known exploited flaws, from Wednesday 21 October 2026 to Wednesday 11 November 2026. Newest first; each links the full story with who is affected and what to do.
The stories
High
Report says hackers are targeting European infrastructure systems
A CBS News headline reports that high-tech hackers are targeting infrastructure systems in Europe. The report gives no further detail on who is behind it, which systems or which organisations.
High
Brenner Base Tunnel company reported hit by cyberattack
reports that the company behind the Brenner Base Tunnel was hit by a cyberattack. It says this came weeks after an attack on a Fehmarnbelt contractor. The report gives no further details.
Low
Interview profiles industrial security practitioner Mike Holcomb
Industrial Cyber's Hall of Fame interview features Mike Holcomb, an ICS/OT cybersecurity leader who founded UtilSec after leaving Fluor.
Medium
UK air traffic provider NATS IT failure cost over £30m
A Cyber Monitoring Centre report says an IT failure at the UK air traffic services provider NATS cost the UK economy over £30m. The report does not say an attack caused it.
Medium
OT-ISAC reports flag aviation risks from shared providers and airport systems
OT-ISAC published two reports on Asia-Pacific aviation risk. They cover third-party accounts, remote access, legacy controllers and airport systems.
Low
Crytica Security signs US public sector distribution deal with Carahsoft
Crytica Security and Carahsoft announced a partnership.
Medium
Russia-aligned Gorbag group spies on Ukrainian public and defence bodies
ESET reports a Russia-aligned group, Gorbag, has run spearphishing espionage against Ukrainian organisations since at least February 2025.
Low
CISA launches November campaign on infrastructure resilience and recovery
CISA began its 2026 Critical Infrastructure Security and Resilience Month, themed 'Resolve to be Resilient'.
Low
Blue Initiative launches vulnerability database for the maritime sector
Blue Initiative has launched a new vulnerability database. It lists information technology (IT) and operational technology (OT) flaws, known as CVEs, that are relevant to the maritime industry.
Medium
US Coast Guard issues cybersecurity guidance for maritime operators
The US Coast Guard released NVIC 02-26 to help maritime organisations meet 33 CFR Part 101, Subpart F.
Critical
Siemens RUGGEDCOM CROSSBOW access controller has SQLite flaws; update available
The SQLite component inside RUGGEDCOM CROSSBOW Station Access Controller has multiple flaws. An attacker could run code, cause a denial of service or obtain sensitive information.
High
Siemens Industrial Edge App Publisher flaws could let a network attacker run code
Two flaws can be chained. An attacker on the network could impersonate the management server and run arbitrary code on the local machine. Siemens has released an update.
High
Siemens RUGGEDCOM CROSSBOW flaws allow database commands and privilege escalation
RUGGEDCOM CROSSBOW has multiple flaws. An attacker could run SQL commands on the database, retrieve administrative credentials, escalate privileges, change configurations or cause denial of service.
High
Siemens SIMATIC industrial PCs have a Secure Boot test-key flaw
A BIOS vendor test key sits in the UEFI Secure Boot key database. A local attacker with physical or administrative access could boot an operating system signed with it, bypassing Secure Boot.
High
Siemens SIMATIC WinCC database flaw lets a user run commands on the host
A database privilege flaw in several SIMATIC WinCC versions could let an authenticated user with database access run commands on the host system.
Critical
Siemens S7-1500 MFP controllers have many flaws in Linux subsystem
Multiple flaws exist in the extra GNU/Linux subsystem of firmware V3.1.7 for the SIMATIC S7-1500 CPU 1518(F)-4 PN/DP MFP, including the SIPLUS variant.
Critical Known exploited
Siemens Software Center flaw lets local attacker run code; exploitation reported
Siemens Software Center loads DLL files from an uncontrolled search path. An authenticated local attacker could plant a crafted file and run code with the application's privileges. Siemens released a fixed version.
High
Flaws in PEAK-System CAN drivers for Windows could crash the system
Several memory-handling flaws were found in HMS Networks PEAK-System PCAN Windows drivers. Successful exploitation could crash the Windows kernel. The vendor rates the flaws 7.1 on the CVSS v3 scale.