Ot Security
The latest Ot Security coverage — news, analysis, and updates from the WindowsNews.AI desk.
CISA Warns: XSS Flaw in Kieback & Peter DDC Controllers Risks HVAC Hijack
CISA published advisory ICSA-26-139-05 on May 19, 2026, warning that multiple Kieback & Peter DDC building controllers contain a cross-site scripting (XSS) vulnerability that allows...
Critical Session Hijacking Flaw in Siemens SIPROTEC 5 Relays Demands Immediate OT Action, CISA Warns
Operators of Siemens SIPROTEC 5 protection relays must urgently assess and patch their devices after the U.S. Cybersecurity and Infrastructure Security Agency (CISA) amplified a alert about a serious...
Siemens Ruggedcom ROX Bug Lets Attackers Read Root Files—Update to 2.17.1 Now
Siemens and the U.S. Cybersecurity and Infrastructure Security Agency (CISA) warned on May 12 and 14, 2026, respectively, that multiple models of the company’s Ruggedcom ROX industrial networking...
Siemens, CISA Urge Immediate RUGGEDCOM ROX 2.17.1 Update for Critical Flaws
Siemens and the U.S. Cybersecurity and Infrastructure Security Agency (CISA) have issued urgent advisories warning of dozens of critical and high-severity vulnerabilities lurking in the RUGGEDCOM ROX...
Siemens Industrial Edge CVE-2026-33892: Critical Auth Bypass Threatens OT Security
Siemens Industrial Edge Management contains a critical authorization bypass vulnerability that allows unauthenticated remote attackers to bypass authentication and access connected Industrial Edge...
CISA Warns Iranian Hackers Are Targeting Internet-Facing PLCs in US Critical Infrastructure
The Cybersecurity and Infrastructure Security Agency issued an urgent advisory on April 7, 2026, warning that Iranian state-sponsored cyber actors have moved beyond reconnaissance and nuisance...
Siemens SICAM 8 Industrial Control Systems Vulnerable to DoS Attacks: Patch CPCI85 and RTUM85 to V26.10+
Siemens has disclosed two denial-of-service vulnerabilities affecting multiple SICAM 8 industrial control system products, requiring immediate patching to version V26.10 or later. The flaws impact...
WAGO Managed Switch CLI Escape Vulnerability CVE-2026-3587: Critical OT Security Flaw Requires Immediate Patching
WAGO's industrial managed switches contain a critical security vulnerability that allows unauthenticated remote attackers to bypass authentication entirely and gain administrative control through...
Siemens SIAPP SDK V2.1.7 Patch Fixes Memory and Input Flaws in Energy Systems
Siemens has issued an urgent security advisory for its SICAM SIAPP SDK, warning of multiple memory-safety and input-validation vulnerabilities in versions before V2.1.7. The industrial automation...
Critical Lantronix EDS Vulnerabilities Exposed: Root Access, 9.8 CVSS Scores Threaten Industrial Networks
A set of severe vulnerabilities in Lantronix's EDS family of serial-to-Ethernet device servers has exposed industrial and enterprise edge networks to potential compromise. The affected...
MELSEC iQ-F FX5 OT Security Crisis: ENET/IP & EIP UDP Flood Vulnerabilities Exposed
Mitsubishi Electric has issued a critical security alert revealing multiple high-impact denial-of-service vulnerabilities in its MELSEC iQ-F Series programmable logic controllers, specifically...
RTU500 Security Advisories: Critical OT Vulnerabilities Threaten Substation Infrastructure
Hitachi Energy's RTU500 series, a cornerstone of modern electrical substation automation and control, has been identified with multiple critical security vulnerabilities that expose operational...