ICS List -  2026  2025  2024  2023  2021  2020  2019  2018

H  AI  APT  Attack  BigBrothers  BotNet  Congress  Cryptocurrency  Cyber  CyberCrime  Exploit  Hack  ICS  Incindent  IoT  Mobil  OS  Phishing  Ransom  Safety  Security  Social  Spam  Virus  Vulnerebility | 2026  2025  2024  2023

DATE

NAME

Info

CATEG.

WEB

18.10.26

CISA warns admins to immediately fix Ivanti flaw exploited as zero-day The U.S. Cybersecurity and Infrastructure Security Agency (CISA) urged security teams to immediately patch an Ivanti Connect Secure (ICS) flaw exploited in zero-day attacks since at least October 1st. ICS BleepingComputer
28.8.26 Threat landscape for industrial automation systems. Q2 2026 The report contains statistics on industrial threats for Q2 2026, including ransomware, miners, spyware and other threats that were detected and blocked on industrial control systems. ICS SECURELIST
27.8.26 CISA Red Team Compromised Two Critical Infrastructure Orgs, One Detected Nothing The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has published the results of two red team assessments it conducted ICS The Hacker News
24.8.26 U.S. Sanctions Iran-Linked Hackers Behind Critical Infrastructure Breaches The U.S. Department of the Treasury has announced fresh sanctions on Iranian cyber actors as part of what it called an "unprecedented, whole-of- ICS The Hacker News

19.8.26

Clop-Linked Windchill Web Shell Decrypts Credentials and Maps Engineering Data A JavaServer Pages (JSP) web shell deployed following the exploitation of a critical security flaw in PTC Windchill and FlexPLM servers is specifically ICS The Hacker News

11.8.26

Hackers Breach Polish Power Plant Controls via Private Cellular Network and Shut Turbine Attackers shut down a steam turbine and the process-water treatment system at a Polish combined heat and power plant by coming in over the ICS The Hacker News

6.8.26

Over 4,400 Rockwell PLCs Exposed Online, 22 Found in Water Attack Cities Forescout found 22 internet-facing Rockwell Automation programmable logic controllers (PLCs) in cities hit by recent cyberattacks on US water utilities. Nineteen used the same mobile carrier network. Its August 3 scan ICS The Hacker News

1.8.26

CISA shares advice on isolating vital systems during cyberattacks The U.S. and Australian governments have released new guidance urging critical infrastructure organizations to prepare to isolate vital operational technology systems in the event of a cyberattack or other major disruptions. ICS BleepingComputer
9.7.26 Threat landscape for industrial automation systems. Q1 2026 This report contains industrial threat statistics for Q1 2026, including industrial threat distribution by type, source, region and industry. ICS SECURELIST
28.6.26 Beware of the license manager: how a Schneider Electric software vulnerability puts industrial facilities at risk Analysis of CVE-2024-2658 as found in Schneider Electric’s Floating License Manager. Discover how this FlexNet Publisher vulnerability potentially allows attackers to escalate to NT AUTHORITY\SYSTEM privileges and expand their foothold; learn how to mitigate the risk. ICS SECURELIST
11.4.26 US warns of Iranian hackers targeting critical infrastructure Iranian-linked hackers are targeting Internet-exposed Rockwell/Allen-Bradley programmable logic controllers (PLCs) on the networks of U.S. critical infrastructure organizations. ICS

BleepingComputer

28.3.26 PTC warns of imminent threat from critical Windchill, FlexPLM RCE bug PTC Inc. is warning of a critical vulnerability in Windchill and FlexPLM, widely used product lifecycle management (PLM) solutions, that could allow remote code execution. ICS

BleepingComputer

30.1.26 Survey of 100+ Energy Systems Reveals Critical OT Cybersecurity Gaps A study by OMICRON has revealed widespread cybersecurity gaps in the operational technology (OT) networks of substations, power plants, and ICS The Hacker News

27.10.24

U.S. and Allies Warn of Iranian Cyberattacks on Critical Infrastructure in Year-Long Campaign

Cybersecurity and intelligence agencies from Australia, Canada, and the U.S. have warned about a year-long campaign undertaken by

ICS

The Hacker News

13.8.24

Industrial Remote Access Tool Ewon Cosy+ Vulnerable to Root Access Attacks Security vulnerabilities have been disclosed in the industrial remote access solution Ewon Cosy+ that could be abused to gain root ICS The Hacker News

5.8.24

Critical Flaw in Rockwell Automation Devices Allows Unauthorized Access A high-severity security bypass vulnerability has been disclosed in Rockwell Automation ControlLogix 1756 devices that could be ICS The Hacker News

26.7.24

CISA Warns of Exploitable Vulnerabilities in Popular BIND 9 DNS Software The Internet Systems Consortium (ISC) has released patches to address multiple security vulnerabilities in the Berkeley Internet ICS The Hacker News

24.7.24

New ICS Malware 'FrostyGoop' Targeting Critical Infrastructure Cybersecurity researchers have discovered what they say is the ninth Industrial Control Systems (ICS)-focused malware that has been ICS The Hacker News

5.7.24

Microsoft Uncovers Critical Flaws in Rockwell Automation PanelView Plus Microsoft has revealed two security flaws in Rockwell Automation PanelView Plus that could be weaponized by remote, ICS The Hacker News

25.5.24

Rockwell Automation warns admins to take ICS devices offline Rockwell Automation warned customers to disconnect all industrial control systems (ICSs) not designed for online exposure from the Internet due to increasing malicious activity worldwide. ICS

BleepingComputer

23.5.24

Rockwell Advises Disconnecting Internet-Facing ICS Devices Amid Cyber Threats Rockwell Automation is urging its customers to disconnect all industrial control systems (ICSs) not meant to be connected to the ICS The Hacker News
7.2.24 Microsoft Outlook December updates trigger ICS security alerts Microsoft is investigating an issue that triggers Outlook security alerts when trying to open .ICS calendar files after installing December 2023 Patch Tuesday Office security updates. ICS BleepingComputer