Hackers disrupt over 30 Minnesota water utilities in coordinated OT attack
… Earlier this year, the U.S. warned of Iranian hackers targeting programmable logic controllers PLCs in critical infrastructure organizations. …
Search
Top stories
CISA shares advice on isolating vital systems during cyberattacks
… Isolating vital systems The agencies recommend critical infrastructure entities first identify the minimum systems and networks required to continue delivering a critical service. …
New InfraTrust report reveals infrastructure flaws admins should patch first
… In recent years, attackers have repeatedly exploited flaws in routers, VPNs, firewalls, and other internet-facing infrastructure to breach critical infrastructure and telecommunications providers , including in campaigns attributed to state-sponsored hacking groups such as Volt Typhoon and Salt Typ… …
Closing the Identity Gaps in Critical Infrastructure Security
… As the Colonial Pipeline attack demonstrated, compromising business-critical systems can cause just as much damage as breaching OT. How attackers break in and stay hidden The tactics of threat actors like Volt Typhoon show why critical infrastructure leaders need to rethink trust. …
Chinese hackers hijack auth flow, spy on isolated network for a decade
… "By chaining these modifications, Velvet Ant established a remote-execution path into the segregated environment via simple HTTP requests, with no direct connection to the critical infrastructure network ever required." - Sygnia Having established their access into the isolated environment, Velvet … …
Critical SimpleHelp flaw exploited to deploy new stealer malware
Critical SimpleHelp flaw exploited to deploy new stealer malware By Bill Toulas June 29, 2026 10:00 AM Hackers are exploiting a recently disclosed critical vulnerability CVE-2026-48558 in SimpleHelp to deploy Djinn Stealer, a previously undocumented cross-platform information stealer targeting Wind… …
Critical Fortinet FortiSandbox flaws now exploited in attacks
… Cybersecurity and Infrastructure Security Agency CISA ordered federal agencies on April 13 to secure their FortiClient EMS instances against attacks targeting the CVE-2026-21643 flaw within three days. …
Max severity SAP Commerce Cloud flaw now targeted in attacks
… Get the report Related Articles: Critical VMware vCenter RCE flaw exploited for reverse SSH access Hackers target US firms in FastJson RCE zero-day attacks CISA orders urgent action on actively exploited Langflow RCE flaw Critical Langflow RCE flaw exploited to hack AI app servers CISA sets urgent … …
CISA warns Fortinet users to secure devices after FortiBleed leak
… Threat intelligence company Hudson Rock, which also analyzed the dataset , described it as one of the largest known collections of compromised Fortinet credentials, spanning 21,632 unique domains and 194 countries. Among the organizations represented in the dataset are Samsung, Mercedes-Benz, Foxc… …
US charges alleged operators of Russian bulletproof hosting service
… The Department of the Treasury's Office of Foreign Assets Control OFAC said at the time that Media Land's infrastructure was used to launch distributed denial-of-service DDoS attacks against U.S. companies and critical infrastructure, including telecommunications systems. …