#ics
7 articles
Across 11 articles published between 12 April and 11 October 2026, ZCyberNews tracked industrial control system security against a severity mix of two critical, seven high, and one medium finding. CVE-2026-105278 carries a CVSS score of 9.8, while CVE-2026-5726 rates 7.8. Reporting on these ICS issues centred on the energy, manufacturing, critical-infrastructure, critical infrastructure, and industrial sectors. Coverage spanned Global, United states, and North-america, reflecting the reach of exposed control environments across regions and industries throughout the period.
CRITICALCVE-2026-105278: openPDC Docker Image Ships Default Admin Login
CVE-2026-105278 (CVSS 9.8) leaves the published openPDC Docker image with a fixed administrative credential and no forced rotation, giving network-adjacent attackers full control.
HIGHDelta ASDA-Soft PAR Buffer Overflow Hits 7.8 CVSS
CVE-2026-5726: A stack-based buffer overflow in Delta Electronics ASDA-Soft PAR file parsing scores 7.8 CVSS and enables remote code execution via crafted PAR files.
HIGHEmail-Borne Worm Surge Targets Industrial Control Systems
A global wave of email-borne worms, driven by a single piece of malware, targeted industrial control systems (ICS) in Q4 2025, marking a significant shift in OT threats.
HIGHIndustrial Control Systems Face Rising Malware, USB Threats in Q4 2025
Kaspersky data shows malware blocked on 33.3% of industrial control system computers in Q4 2025, with internet threats and removable media as top infection vectors. The share of systems facing USB-borne threats grew to 4.1%.
HIGHIran-Linked Hackers Target ICS/SCADA Systems in Critical Infrastructure
US Gov Warns Iran-Linked Actors Are Manipulating PLCs and SCADA Systems to Disrupt Critical Infrastructure
HIGHUS Warns of Active PLC Targeting in OT Environments
Government agencies warn that programmable logic controllers remain a top target for cyber adversaries in industrial environments.
HIGHThousands of US Industrial PLCs Exposed to Iranian State-Sponsored Threat Actors
Nearly 4,000 Rockwell Automation PLCs in the US are directly exposed online, creating a significant attack surface for Iranian state-sponsored hackers targeting critical infrastructure.
Stay Updated
Get the latest cybersecurity news delivered to your inbox.