Two critical vulnerabilities in open-source platforms are under active exploitation, according to independent reports from watchTowr and VulnCheck. The first, CVE-2026-64849 (CVSS…
CVE-2026-25895 is a critical vulnerability in FUXA, a web-based SCADA/HMI software. With a CVSS score of 9.5, it involves missing authentication for…
FUXA is an open-source, web-based SCADA/HMI software for operational technology (OT) and industrial automation. It is affected by CVE-2026-25895, a critical vulnerability…
Seven Moxa serial device servers were factory-reset and reconfigured by the attacker, disrupting serial communications in the plant.
The WAGO PFC200 controller was exposed on the private APN with default admin credentials, allowing the attacker to gain access and tunnel…
A coordinated cyberattack targeting operational technology (OT) at over 30 community water systems in Minnesota occurred on July 26-27, 2026, prompting a…
CyberAv3ngers is a threat actor group associated with targeting operational technology and industrial control systems, including water systems. They have been linked…