Ics Security
The latest Ics Security coverage — news, analysis, and updates from the WindowsNews.AI desk.
Windows OT Security Alert: Siemens Flaw CVE-2025-40757 Leaks Device Databases Over BACnet
A newly disclosed vulnerability in Siemens APOGEE PXC and TALON TC building automation controllers allows unauthenticated attackers to pull encrypted database files directly over the BACnet protocol,...
CISA Flags Rockwell CompactLogix 5480 Flaw That Lets Attackers Run Code Via Physical Access
Three words can make any plant manager’s blood run cold: arbitrary code execution. That’s what CISA is warning about with a newly republished advisory for the Rockwell Automation CompactLogix...
Critical Honeywell ICS Flaws: Patch OneWireless WDM Now to Block Remote Code Execution Attacks
Honeywell’s OneWireless Wireless Device Manager (WDM)—the nerve center of countless industrial wireless sensor networks—sits at the heart of a high‑severity coordinated disclosure that sent...
Critical Bluetooth Flaw in SunPower Inverters Grants Attackers Full Device Control
A newly disclosed vulnerability in SunPower PVS6 solar inverters exposes critical energy infrastructure to takeovers by attackers who merely need to be within Bluetooth range. The U.S. Cybersecurity...
No Firmware Fix for MELSEC iQ-F Modbus Flaw CVE-2025-7405 – Windows & OT Teams Must Isolate Now
Mitsubishi Electric has notified customers that it will not release firmware updates to address a critical authentication bypass vulnerability in its MELSEC iQ-F series programmable logic controllers...
GE Vernova Issues Urgent Patch for CIMPLICITY DLL Hijacking Flaw Rated CVSS 7.0
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has published an advisory detailing a dangerous privilege escalation vulnerability in GE Vernova’s CIMPLICITY HMI/SCADA platform....
Schneider Electric Issues Emergency Firmware Fix for M340 PLC DoS Flaw (CVE-2025-6625)
Schneider Electric has released firmware updates to address a high-severity denial-of-service vulnerability in its Modicon M340 programmable logic controllers and associated communication modules....
$329.5B OT Cyber Losses Possible as Ransomware Hits Critical Infrastructure: Dragos-Marsh Report
The Colonial Pipeline ransomware attack in 2021 marked a seismic shift in how we view operational technology (OT) security. Once thought safely air-gapped from the internet, OT networks controlling...
Urgent: Siemens RUGGEDCOM APE1808 Bugs Let Attackers Hijack Industrial Control Appliances
{ "title": "Urgent: Siemens RUGGEDCOM APE1808 Bugs Let Attackers Hijack Industrial Control Appliances", "content": "Siemens has disclosed two high-severity vulnerabilities in its RUGGEDCOM...
Rockwell FactoryTalk ViewPoint Flaw Lets Attackers Hijack MSI Repairs for SYSTEM Access
A critical privilege escalation vulnerability in Rockwell Automation’s FactoryTalk ViewPoint HMI thin-client software allows a low-privileged local attacker to gain SYSTEM-level control of...
CVE-2025-33023: No Patch for Siemens ROX II Upload Flaw Threatening Critical Manufacturing Networks
Siemens RUGGEDCOM ROX II industrial networking devices — deployed worldwide in critical manufacturing and energy sectors — carry a dangerous unrestricted file upload vulnerability that allows...
CodeMeter 8.30a Fixes Privilege Escalation (CVE-2025-47809) Affecting Siemens Windows ICS
A newly disclosed local privilege escalation vulnerability in Wibu-Systems CodeMeter Runtime (CVE-2025-47809) enables unprivileged Windows users to gain SYSTEM-level access during the brief...