A critical vulnerability in a widely used operational technology programming tool has been exploited to distribute Linux malware, potentially compromising industrial IoT gateways.
Critical Infrastructure Cyberattacks
organization
product
place
Recent attacks targeting operational technology in data centers and municipal water systems highlight growing cyber-physical threats. This emerging landscape involves nation-state actors and sophisticated groups, underscoring the need to understand unauthorized access and disruption of essential services and the systems that manage them.
Despite advancements in artificial intelligence security, crypto exchanges like Binance exhibit poor security, freezing funds after an engineer's laptop compromise linked to billions in unauthorized trades.
Microsoft's October updates have broken Exchange Server, causing widespread issues like broken Outlook Web App and lengthy email queues, according to administrators.
A critical Broadcom Wi-Fi bug, known since 2018, potentially allows unauthorized access to millions of routers, despite the chip giant's alleged knowledge.
A drone attack impacted the VK data center located near St. Petersburg, Russia, marking another incident affecting a Russian technology firm.
ConnectWise has disabled its backup, security, and management services to investigate a security incident, following allegations of compromised Microsoft 365 accounts.
A critical vulnerability in Linux KVM allows guest-to-host escapes, potentially enabling new attack vectors on systems utilizing penguin-powered networking.
Russian military forces have reportedly taken down an internet service provider facility in Odessa, claiming it served the Ukrainian armed forces.
Ukrainian drone strikes on Yandex data centers disrupted cloud and payments services, with users awaiting access and network connectivity significantly reduced.
Artificial intelligence systems are capable of launching devastating attacks on critical infrastructure, and preparedness is severely lacking across the industry.
Attackers have compromised top-level domains to issue fraudulent security certificates, impersonating major organizations like Google and potentially compromising user trust.
The FortiBleed vulnerability continues to pose a significant threat, with the FBI confirming ongoing exploitation and active attacks targeting vulnerable systems.
Security vulnerabilities in Citrix NetScaler are escalating, with additional reports of zero-day exploits exacerbating the ongoing risks.
Custom malware exploits Citrix zero-day vulnerabilities, targeting governments, banks, and professional services, highlighting critical security risks in digital infrastructure.
JadePuffer exploited compromised Azure identities to disrupt cloud resources, demonstrating a sophisticated attack vector that targeted critical infrastructure and highlighted security vulnerabilities.
Rising drone threats necessitate layered defenses for data centers, including physical hardening, detection systems, redundancy, and regulatory coordination for resilience.
Amazon Web Services reported an inability to restore access to data centers affected by Iran strikes, as damage surpassed the resilience capabilities of their availability zone design.
Artificial intelligence has rendered security through obscurity obsolete, marking a significant shift in cybersecurity paradigms and threat landscapes.
PaperCut, a print management software provider, is currently under a zero-day attack, reportedly causing significant operational issues for its customers.
Canonical is supporting efforts to translate large amounts of C code into secure Rust using artificial intelligence.
Organizations are advised to proactively use artificial intelligence for internal system security assessments to anticipate and counter potential adversarial attacks.
Malicious actors have compromised popular software packages within the Rust programming ecosystem, aiming to steal sensitive developer credentials through poisoned code.
Federal officials warn that attackers are using artificial intelligence-generated code to compromise critical infrastructure controllers, highlighting a significant and present danger.
The prominent cybersecurity conferences, Black Hat and DEF CON, are increasingly focusing on artificial intelligence topics, reflecting AI's growing significance in the security landscape.
A chief executive of an artificial intelligence security firm states that implementing defensive AI strategies for cybersecurity is achievable even during everyday activities.
Autonomous artificial intelligence threats pose a significant and immediate danger to the stability and operation of critical infrastructure systems globally.
A persistent attacker has been targeting Salesforce and ServiceNow portals for over a year, gaining unauthorized access to data.
Federal authorities are warning about the Gunra ransomware, which is actively exploiting known software vulnerabilities to compromise critical infrastructure.
A former NSA chief warns against connecting water system controllers to the internet following suspected Iranian cyberattacks.
IBM's agentic artificial intelligence platform is currently experiencing active attacks, prompting urgent calls for users to apply available patches to mitigate security vulnerabilities.
UK charities are assessing the financial repercussions following a significant cyberattack targeting the Beacon CRM system.
Operational technology security is crucial for data centers to mitigate growing cyber-physical risks, prevent outages, and maintain operational resilience against hidden attack surfaces.
CyberAv3ngers, a group linked to Iran, is suspected of orchestrating cyberattacks against Minnesota's water systems, raising concerns about critical infrastructure security.