#OT Security
All CosmicBytez Labs articles tagged #OT Security, across news, security advisories, how-to guides, and projects.
- News
Cyberattack Hijacks Danfoss Controllers, Shuts Down Refrigerators at French Supermarkets
Attackers hijacked legacy Danfoss refrigeration controllers, forcing nonstop defrost cycles that pushed hundreds of French supermarket freezers to 50°C.
- News
Critical Healthcare Systems Aren't Quantum-Ready
A Forescout Vedere Labs study of 2.5 million healthcare devices found just 6% of IoMT and 16% of OT devices are ready for post-quantum cryptography.
- Security
CVE-2026-82824: Critical Path Traversal in Hitachi Coding Software Suite
Critical CVSS 9.8 path traversal in Hitachi Coding Software Suite (≤ 3.3.0) lets attackers access, create, modify, or delete files on the host.
- News
One Packet, No Password: High-Severity TDengine Zero-Day Threatens Industrial Servers
A high-severity zero-day, CVE-2026-42542, crashes TDengine time-series database servers with one packet — 730,000+ instances run in OT, IoT, and energy.
- News
How Tax Policy Could Help Stop Threat Actors From Breaching US Water Systems
An op-ed argues Congress should clarify existing tax incentives, not new grant programs, to fund cybersecurity at cash-strapped water utilities now.
- News
How Tax Incentives Could Shield US Water Utilities From Cyberattacks
A new op-ed argues federal tax incentives under the One Big Beautiful Bill could fund water utility cybersecurity faster than new federal programs.
- News
Dragos Completes NetRise and runZero Acquisitions After $4.1B Accenture Deal
Dragos has closed its NetRise and runZero acquisitions, expanding OT visibility into firmware and IT attack-surface exposure management.
- Security
CVE-2026-75925: IXON VPN Client CRLF Injection Enables Root/SYSTEM Command Execution
IXON VPN Client before v1.4.7 lets a local attacker inject CRLF sequences into a config file consumed by a privileged process, gaining root or SYSTEM.
- News
Hackers Breach Polish Power Plant Controls via Private Cellular Network and Shut Turbine
Attackers penetrated the operational technology network of a Polish combined heat and power plant through the grid operator's private cellular network,...
- News
Russian Hackers Breached Polish Energy Plant via Private APN in World-First DER Cyberattack
ELECTRUM/Sandworm compromised a Polish heat-and-power plant serving 50,000 residents through a private cellular APN, marking the first recorded...
- News
Senate Democrats Introduce Water Cyber Shield Act to Fund $300M Annual Water System Cybersecurity
Senators Schiff and Klobuchar introduce legislation directing $300 million per year to secure U.S. water and wastewater infrastructure following...
- News
Truck Brake Controller's Safety Recall Doubled as Hidden Security Fix
A Black Hat USA 2026 presentation revealed that a 2024 safety recall covering 450,000 heavy trucks from Volvo, International, and Paccar secretly patched...
- Security
CVE-2026-16462: PROCON-WEB SCADA Unauthenticated SQL Injection (CVSS 9.8)
A critical SQL injection vulnerability in PROCON-WEB SCADA's GetGridData endpoint allows unauthenticated remote attackers to execute arbitrary SQL...
- News
PTC Windchill Vulnerability Exploited in Ransomware Campaign
A critical unauthenticated deserialization flaw in PTC's Windchill PLM platform is being actively weaponized by the Cl0p ransomware group, targeting...
- News
Fairlife Suspends U.S. Production After Cyber Incident Hits Coca-Cola Subsidiary
Fairlife, the premium dairy brand owned by Coca-Cola, has suspended production at its U.S. facilities following a cyber incident. Plants in Michigan, New...
- Security
CVE-2026-9695: DELMIA Apriso Manufacturing MES — Improper Authentication Enables Privileged Server Access
A critical CVSS 9.8 improper authentication vulnerability in Dassault Systèmes DELMIA Apriso (releases 2020–2026) allows unauthenticated attackers to gain...
- News
Cal Water Says No OT Systems Breached in Iranian Handala Cyberattack
California Water Service has confirmed that Iranian hacker group Handala's cyberattack was limited to IT systems, with Mandiant's investigation finding no...
- News
Accenture to Acquire Majority Stake in Dragos, runZero, and NetRise in $4.1 Billion OT Cybersecurity Push
Accenture's $4.1 billion acquisition of Dragos (valued at $3.25B), runZero, and NetRise marks the largest consolidation in operational technology...
- News
Australian Sugar Producer Works to Restore Operations After Ransomware Attack
Mackay Sugar, one of Australia's largest sugar producers, is working urgently to restore harvesting and milling operations after The Gentlemen ransomware...
- News
Exposed Fuel Tank Gauges Under Attack in the US
Threat actors are actively targeting Internet-exposed Automatic Tank Gauges (ATGs) at US gas stations, exploiting decades-old unprotected interfaces to…
- Security
CVE-2025-14771: ABB T-MAC Plus Critical File & Directory Exposure (CVSS 9.9)
A CVSS 9.9 critical vulnerability in ABB T-MAC Plus v4.0-24 exposes internal files and directories to external parties, allowing unauthenticated attackers to…
- Security
CVE-2026-5433: Honeywell CNM Critical Command Injection RCE
A CVSS 9.1 critical command injection vulnerability in Honeywell's Control Network Module web interface allows remote attackers to execute arbitrary...
- News
EnOcean SmartServer Flaws Expose Buildings to Remote Hacking
Claroty researchers have disclosed two vulnerabilities in the EnOcean SmartServer IQ building management controller that can be chained for security...
- Security
CVE-2017-20237: Hirschmann HiVision Auth Bypass Enables
A critical authentication bypass in Hirschmann Industrial HiVision versions prior to 06.0.07 and 07.0.03 allows unauthenticated remote attackers to...
- News
Cyberattacks on Critical Infrastructure Double in Q1 2026
Dragos and Mandiant report a 112% increase in cyberattacks targeting energy, water, and transportation systems in the first quarter of 2026, with...