Vendors and CVEs › Vendors › Microsoft
Microsoft: industrial cyber security news and vulnerabilities
2 stories in Industrial Cyber Brief name Microsoft, from Wednesday 28 October 2026 to Friday 30 October 2026. Newest first; each links the full story with who is affected and what to do.
The stories
Medium
Penetration tester finds Windows 7 servers linked to factory milling machines
A penetration tester visited a factory that had been hacked six months earlier. He found Windows 7 servers connected to computer numerical control (CNC) milling machines. Most were not joined to the domain.
High
Warlock ransomware group hit a water utility, likely through SharePoint
Researchers reported on 1 October that the China-linked group behind Warlock ransomware attacked at least four organisations in two months, including a water utility and a telecoms provider.