66,000+ internet-exposed solar inverters discovered with known vulnerabilities. Researchers prove attackers can trigger grid-wide voltage violations and outages by compromising these distributed energy resources.
@getpacketai.bsky.social
@getpacketai.bsky.social66,000+ internet-exposed solar inverters discovered with known vulnerabilities. Researchers prove attackers can trigger grid-wide voltage violations and outages by compromising these distributed energy resources.
@cyfar.ca~Cisa~
Unauthenticated access, CSRF, privilege escalation, and data exposure affect terminals ≤4.5.2.1; update to 4.5.3.0+.
-
IOCs: support[.]idirect[.]net, CVE-2026-38056, CVE-2026-38059
-
#CVE202638056 #ICS #ThreatIntel
@enaxy.bsky.socialYour OT environment may be secure—but what about your vendors?
Kyle Byrum explores how third-party and supply chain compromises can create operational risk and how organizations can reduce exposure.
@papoo7.bsky.socialClaude Didn’t “Hack” the PLC — but That’s Still the Point
https://papoo.work/doc/6c0829f666c01368
#claudenews #anthropic #claude #ics #plc
@mdavispio.bsky.socialStrong incident management starts long before an incident.
IMTA connects professionals with training, position-specific development, workshops, and lessons learned from experienced practitioners.
Build your skills: https://www.ahimta.org/membership
#IMTA #IncidentManagement #ICS
Four espionage groups adopted the same Chrome and Windows exploit kit in six days.
Shared tooling collapses attribution and shortens the patch window.
#ThreatIntel #ICS
https://threat-intelligence.redeyesecurity.com/blog/bluemoon-exploit-kit-chrome-windows-four-apt-groups-2026
@netsecio.bsky.socialCISA issues an ICS advisory for CareCam Pro IP cameras (CVE-2026-85083), warning of a hard-coded credential. The flaw allows an attacker with physical access to gain full control of the device. The vendor has not responded. #ICS #Vulnerability #IoT
🌐 cyber[.]netsecops[.]io
@cmatain.bsky.socialNueva entrada en el Blog del GRISO (#GRISO_UNAV, #GRISO_ICS, #ICS, #UNAV).
Estancia de investigación de Álvaro Clavijo Corchero (Universidad de La Rioja)
grisounav.wordpress.com/2026/09/09/e...
#Literatura #Investigación #EstanciadeInvestigación #InstitutoCulturaySociedad #UniversidaddeNavarra
@hendryadrian.bsky.socialSchneider Electric, Siemens, and Aveva issued September Patch Tuesday advisories for ICS products, fixing critical flaws including CVE-2026-3869 in Modicon M580 and CVE-2026-31431 in the Linux kernel. #SchneiderElectric #Siemens #ICS
@happy-homhom.bsky.socialClaude Didn’t “Hack” the PLC — but That’s Still the Point
https://papoo.work/doc/6c0829f666c01368
#claudenews #anthropic #claude #ics #plc
@hugovalters.bsky.socialCVE-2026-77393: Ignition <8.1.54 lets any authenticated user create projects via blank "Create Project Role(s)" setting (CVSS 8.8). Unpatched? Patch to 8.1.54 now to lock down access. Details: https://www.valtersit.com/cve/CVE-2026-77393/ #CVE #ICS #infosec
@papoo7.bsky.socialClaude Didn’t “Hack” the PLC — but That’s Still the Point
https://papoo.work/doc/6c0829f666c01368
#claudenews #anthropic #claude #ics #plc
@securityonline.bsky.socialTwo critical Siemens vulnerabilities (CVE-2026-18963, CVE-2026-50093) allow account takeover and root access. See affected versions and fixes.
#Siemens #CyberSecurity #ICS #OTSecurity #CVE #IndustrialEdge #Vulnerability #InfoSec
@papoo7.bsky.socialClaude Didn’t “Hack” the PLC — but That’s Still the Point
https://papoo.work/doc/6c0829f666c01368
#claudenews #anthropic #claude #ics #plc
A WeChat worm hijacked accounts on iPhone and Android with no user interaction. The incoming call was the exploit. Messaging apps are an unmonitored path into your org.
#ThreatIntel #CyberSecurity #ICS
https://threat-intelligence.redeyesecurity.com/blog/wechat-zero-click-worm-incoming-calls-2026
@papoo7.bsky.socialClaude Didn’t “Hack” the PLC — but That’s Still the Point
https://papoo.work/doc/6c0829f666c01368
#claudenews #anthropic #claude #ics #plc
@papoo7.bsky.socialClaude Didn’t “Hack” the PLC — but That’s Still the Point
https://papoo.work/doc/6c0829f666c01368
#claudenews #anthropic #claude #ics #plc
@papoo7.bsky.socialClaude Can Port Exploits, But That Doesn’t Mean It’s Ready for the Job
https://papoo.work/doc/e8e55a65609d94e6
#claudenews #anthropic #claude #ics #ot
@papoo7.bsky.socialClaude Didn’t “Hack” the PLC — but That’s Still the Point
https://papoo.work/doc/6c0829f666c01368
#claudenews #anthropic #claude #ics #plc
@papoo7.bsky.socialClaude Didn’t “Hack” the PLC — but That’s Still the Point
https://papoo.work/doc/6c0829f666c01368
#claudenews #anthropic #claude #ics #plc