/
initial_access_vector:exploit_public_facing × victim_sectors:energy × criticity:high × limpar

Resultados

3 casos · pág. 1/1

tenable.com · high

Iran-linked APTs disrupt US critical infrastructure OT via exposed PLCs as AI accelerates attacks; CISA issues guidance

Tenable's Cybersecurity Awareness Month blog summarizes government guidance on defending critical infrastructure against nation-state and AI-assisted attacks. Per a joint US government advisory (published in April, updated in July), Iran-affiliated APT groups have attacked US water, energy and government facilities since Operation Epic Fu…

cisa.gov · high

NSA, CISA, FBI, DOE and EPA warn of active AI-assisted reconnaissance against Internet-exposed Siemens S7 PLCs in U.S. critical infrastructure

The NSA, CISA, FBI, DOE and EPA issued a joint advisory (AA26-231A) warning of an active threat to Siemens S7 Series PLCs in U.S. critical infrastructure. Unattributed threat actors are conducting reconnaissance and capability development against U.S.-based installations using AI-generated exploitation scripts disguised as legitimate OT m…

securityweek.com · high

China-linked Storm-0940 uses AI pentest framework Artex to automate ConnectWise-related intrusions into hundreds of Microsoft 365 tenants

Microsoft reports that the China-linked APT Storm-0940 (active since at least 2021) used the open source AI penetration testing framework Artex to automate a mid-October 2026 campaign against ConnectWise customers. ConnectWise suspended several services in response, including Cloud Backup, SaaS Security and Cloud Management. Huntress obse…