Critical Infrastructure
irelandEnergy, water, telecoms, transport
Compliance tags are AI-generated and should not be cited as regulatory evidence without independent review.
67
16
21
29
Deploy WAF rules, patch public-facing apps within 48h of CVE disclosure, segment DMZ from internal networks, and run authenticated vulnerability scans weekly.
Enforce MFA on all accounts, implement conditional access policies, audit privileged accounts quarterly, and monitor for impossible-travel logins.
Disable unused scripting interpreters, enforce PowerShell Constrained Language Mode, log all script block execution via ScriptBlockLogging.
Deploy upstream DDoS mitigation (Cloudflare/AWS Shield), configure rate limiting on public endpoints, and maintain a DDoS response runbook.
Inspect TLS traffic at the proxy (break-and-inspect), deploy network IDS/IPS signatures for known C2 frameworks, and baseline normal DNS/HTTP patterns.
Maintain offline/immutable backups tested monthly, enable ASR rules against ransomware, and deploy behavioural detection for mass file encryption patterns.
Enforce MFA on all accounts, implement conditional access policies, audit privileged accounts quarterly, and monitor for impossible-travel logins.
Block execution of downloaded files via Mark-of-the-Web + SmartScreen, train users on social engineering, and sandbox browser downloads.
Enforce DMARC (p=reject), SPF, and DKIM on all domains; block executable attachments at the mail gateway; conduct quarterly phishing simulations.
Recent Intelligence
Unauth Log Download Vuln
A vulnerability in the firmware of Phoenix Contact's CHARX SEC-3xxx charging controllers allows unauthenticated adjacent attackers to download log files, potentially disclosing restricted information. This affects users of these charging controllers, who should take immediate action to update their firmware. Affected parties should visit the provided link for more details on CVSS scores, affected products, and timelines.
ABB T-MAC Plus XSS Vulnerability
A cross-site scripting vulnerability was discovered in ABB T-MAC Plus 4.0-24, affecting an unknown function and allowing remote attacks. Users of this software should be cautious of potential manipulation. No exploit is currently available.
ABB T-MAC Plus Vulnerability
A critical vulnerability has been identified in ABB T-MAC Plus 4.
ABB T-MAC Plus Vulnerability
A vulnerability has been reported in ABB T-MAC Plus 4.0-24, allowing remote access to files or directories. Users of this software are advised to monitor for updates and apply patches as soon as they become available. No exploit is currently available, but the vulnerability is considered problematic.
Phoenix Contact CHARX SEC info disclosure
A vulnerability in Phoenix Contact CHARX SEC devices allows information disclosure when exploited. The vulnerability affects CHARX SEC-3000, CHARX SEC
EIPStackGroup OpENer Vulnerability
A security vulnerability has been detected in EIPStackGroup OpENer, affecting the SendRRData Handler component, which can be remotely exploited. Users of EIPStackGroup OpENer up to version 2.3.0 are affected and should take action to mitigate the vulnerability. The project has been informed of the issue but has not yet responded.
Anthropic Expands AI-Based Vulnerability Hunting
Anthropic has expanded its Project Glasswing initiative to include 150 additional companies, focusing on critical infrastructure such as power, water, and healthcare. This move aims to enhance vulnerability identification, but raises concerns about the ability of vendors to triage and patch issues in a timely manner. Organizations should be prepared to adapt to
Gallagher Credentials Exposure
A vulnerability in Gallagher Command Centre Service installers may expose Service Account credentials, affecting sites that use custom Service Accounts. To mitigate, affected sites should change the Service Account password and delete installer log files. This vulnerability has a severity score of 8.1, indicating a high risk.
Besen EV Charging Station Vulnerability
A vulnerability in the Besen BS20 EV Charging Station's BLE/UDP component allows for insufficiently protected credentials, affecting users with the device on their local network. To mitigate this risk, users should ensure their local network is secure and monitor for updates from Besen. The vulnerability was reported to Besen in April 2026 and is currently under review.
Besen EV Charger Vulnerability
A vulnerability was discovered in the Besen BS20 EV Charging Station, affecting an unknown functionality of the Firmware Version Check component, allowing improper restriction of rendered UI layers. The vulnerability can be exploited remotely and has been reported to Besen, who are reviewing the issue as of April 2026. Users of the affected charging station should be aware of the potential risk and monitor for updates.
Advantech WebAccess/SCADA Vulnerability
A vulnerability has been discovered in Advantech WebAccess and SCADA, affecting the Create New Project User Handler component. This issue allows for cross-site scripting attacks when the decryption argument is manipulated. Users of affected systems should review their security configurations and monitor for suspicious activity.
CVE-2026-1815: Session Expiration Vuln
A vulnerability has been discovered in the Turkiye Electricity Transmission Corporation Mobile Application, allowing for session expiration via remote manipulation. Users of the application are affected, and upgrading to a newer version is recommended. No exploit is currently available.
Honeywell Module Vulnerability
A vulnerability in Honeywell International Control Network Module up to version 110.2 exposes file and directory information. This issue affects users of the Control Network Module, potentially
Honeywell Control Module Vulnerable
A critical vulnerability has been discovered in Honeywell International Control Network Module, affecting versions up to 110.2, allowing for remote command injection attacks. Users of this module are advised to take immediate action to mitigate potential exploitation. The vulnerability can be exploited remotely, and although no public exploit is available, users should prioritize patching
CODESYS Info Disclosure Vulnerability
A remote, authenticated attacker can exploit a vulnerability in CODESYS to disclose sensitive information. Users of CODESYS are affected and should take immediate action to patch the vulnerability. The CERT-Bund advisory recommends updating to the latest version of CODESYS to mitigate the issue.
Microsoft Patches Zero-Days
Microsoft has released patches for two zero-day vulnerabilities, UnDefend and RedSun Defender, which could be exploited to elevate privileges or create a denial-of-service condition. Users of affected systems are advised to apply the patches as soon as possible. The vulnerabilities could impact any Windows system that has not been updated.
Water Utility Hacked via Zombie Account
A water utility's system was compromised after a former employee's account was not deactivated, allowing hackers to gain control. The incident highlights the importance of timely account management and access revocation. Affected organizations should review their account de
Taiko AG1000-01A Auth Bypass
A critical authentication bypass vulnerability has been discovered in the Taiko AG1000-01A SMS Alert Gateway, affecting versions Rev 7.3 and Rev 8. This vulnerability allows unauthenticated attackers to access internal application pages without session management or server-side authentication checks, potentially leading to unauthorized modification of device configuration and disruption of monitoring and control functions. Users of affected devices should take immediate action to mitigate this vulnerability.
Kieback & Peter DDC520 Vulnerability
A cross-site scripting vulnerability has been discovered in Kieback & Peter DDC520 up to version
ZKTeco CCTV Camera Vulnerability
A critical vulnerability has been discovered in certain ZKTeco CCTV camera models, exposing sensitive information through an unauthenticated export service. This affects users of these camera models, potentially allowing unauthorized access to camera account credentials and other critical data