Bir önceki bölümde OT Server üzerinde Docker ortamını kurmuş ve Docker üzerinde FUXA SCADA’yı çalıştırmıştık.

Bölüm 4'te OpenPLC Runtime’ı Docker üzerinde çalıştırarak PLC katmanını oluşturduk. Structured Text kullanarak motor, pompa, vana, tank…

In cybersecurity, a paper written more than twenty years ago can easily feel obsolete. Tools change, architectures evolve, terminology…

TL;DR CISA published advisory ICSA-26-272-02 on September 29, 2026, covering 10 Toptech TMS7 vulnerabilities that also affect TopHAT. The worst, CVE-2026-71379, scores CVSS 10.0 and lets an unauth…

TL;DR The Apache Software Foundation disclosed CVE-2026-102508, a critical Apache PLC4X vulnerability in its OPC UA driver, on September 30, 2026. It scores 9.2 under CVSS 4.0. An attacker in a ne…

TL;DR Moxa disclosed two Moxa MGate vulnerabilities on October 2, 2026. The worse flaw, CVE-2026-86325, scores 9.4 on CVSS 4.0 and lets a read-only user corrupt device memory. The second, CVE-2026…

NIST recently released the Initial Public Draft of SP 800–82 Rev. 4, Guide to Operational Technology (OT) Security.

OSS Scanner sends unreviewed, model-generated vulnerability reports to open source maintainers that opt in.

A cyberattack targeted refrigeration controllers, setting refrigerators and freezers across hundreds of supermarkets to defrost.

TL;DR Siemens disclosed eight Siemens S7-1500 vulnerabilities in the PLC web server on October 13, 2026. Three of them rate critical at CVSS 4.0 score 9.4. No fix exists yet, so Siemens urges cust…

Refrigeration Controllers Under Attack A wave of compromises has struck Danfoss refrigeration controllers in French retail. In response, Danfoss has moved to mitigate the cyberattack, while nation…

Attackers paired a genuine, signed copy of Siemens Software Center with malicious DLLs to infect Windows PCs via ClickFix lures.

TL;DR Singapore’s Cyber Security Agency disclosed 30 Advantech ADAM-3600 vulnerabilities on October 20, 2026. Seven are critical, and several allow unauthenticated remote code execution or a…

The first phase will cover up to 500 utilities, which will get free security tools, equipment, deployment help and training.

The Amsterdam-based company plans to use the funding for research and development and commercial expansion in Europe and the Middle East.

The Amsterdam-based company plans to use the funding for research and development and commercial expansion in Europe and the Middle East.

The Amsterdam-based company plans to use the funding for research and development and commercial expansion in Europe and the Middle East.

TL;DR On October 22, 2026, CISA published advisory ICSA-26-295-01 covering nine Kiloview E3 vulnerabilities in the company’s NDI video encoder. Two command injection flaws score CVSS 9.9 and…

An open-source AI pentesting tool shows up behind attacks on Japanese companies, and a new study measures how well AI can plan attacks on…

Siemens, Schneider Electric, ABB and others have confirmed that some of their products are affected by the PHP2Shell vulnerabilities.