ABB warns ASPECT building management systems are exposed to actively exploited PHP flaws
ABB updated its advisory for the ASPECT building management system family on 29 October 2026 (Revision B).
News
OT cyber security news
New ICS vulnerabilities, vendor advisories and OT security incidents, summarised for operators and linked to the original source. For longer reads, see our blog.
Subscribe by RSSGet News by email
Critical memory flaws in EPICS Base control software fixed in 7.0.11
CISA published an advisory on 27 October 2026 for EPICS Base, the open-source control system framework.
Exploited PHP flaws added to CISA's Known Exploited Vulnerabilities catalogue
Two critical flaws in PHP, known as "php2shell", let an attacker run code remotely without logging in.
Mitsubishi Electric ICONICS GENESIS SCADA products affected by multiple vulnerabilities
CISA republished a Mitsubishi Electric advisory for the ICONICS GENESIS family on 27 October and revised it on 29 October.
Siemens flags flaws in SIMATIC S7-1500 PLC web server and WinCC
CISA republished two Siemens advisories on 22 October.
Hitachi Energy releases fixes for TRO600 and CoreTec products
Hitachi Energy published two advisories on 27 October, which CISA republished on 29 October.
Moxa fixes remote access client flaw and gives mitigations for end-of-life cellular gateway
Moxa released advisory MPSA-269510 on 27 October.