Critical Infrastructure

Editorial illustration of a cloud tenant's dial swinging a power meter, marking the Bit2Watt research on cloud-to-power-grid disruption presented at CHES 2026.

Security Research

Zhejiang University Researchers Publish "Bit2Watt" Cloud-to-Power-Grid Disruption Research at CHES 2026

A novel cloud-to-grid research beat lands at CHES 2026 — critical-infrastructure defender awareness this week.

Editorial illustration of an IP security camera turned toward supply trucks, marking the AIVD/MIVD warning on Russian camera-hijacking across NATO and Ukraine.

Nation-State Cyber Threats

AIVD and MIVD Warn Russian Intelligence Hijacks IP Cameras Across NATO States and Ukraine to Track Military Logistics

A Dutch intelligence advisory raises the stakes on Russian camera-hijacking activity — critical-infrastructure defender teams review IP-camera posture this week.

Editorial illustration of an OT switch with three chained keys reaching a root terminal, marking Unit 42's Siemens ROX II zero-day trilogy analysis.

Vulnerabilities

Unit 42 Publishes “Three Steps to the Terminal” Analysis of Chained Siemens ROX II Zero-Day Vulnerabilities

Three chained OT zero-days in Siemens ROX II — a defender review for industrial operators this week, with Unit 42's analysis and Siemens's fixed firmware as the anchors.

Ransomware

Coca-Cola Suspends Fairlife US Milk Production Following Ransomware Attack (SEC 8-K Filed)

A ransomware attack halts fairlife's US milk production and lands as a Coca-Cola SEC 8-K filing — food-industry sector-advisory coverage this week.

Editorial illustration of a refrigerated truck with a cut cold-chain line and an empty food bucket, marking the Nichirei attack that disrupted KFC Japan.

Supply Chain Attack

Cyberattack on Nichirei Logistics Disrupts KFC Japan and Cold-Chain Deliveries

A cold-chain cyberattack ripples into KFC Japan and supermarket supplies — supply-chain sector-advisory coverage this week.

Editorial illustration of a patched industrial control panel beside a calendar, marking ICS Patch Tuesday advisories from Siemens, Schneider and Rockwell.

Vulnerabilities

ICS Patch Tuesday: Siemens, Schneider Electric, and Rockwell Publish Dozens of Vulnerability Advisories

A big ICS Patch Tuesday cycle — defender teams for industrial operators concentrate patch verification this week as Siemens, Schneider Electric, and Rockwell Automation publish dozens of advisories.

Editorial illustration of a magnifying glass revealing a fingerprint on a power pylon, marking EU and UK attribution of Poland's grid attack to Russia's Turla.

Nation-State Cyber Threats

EU and UK Formally Attribute Poland Power-Grid Cyberattack to Russia's Turla

A formal EU/UK attribution against Russia's Turla for a Polish power-grid attack — critical-infrastructure defender posture stays elevated this week.

Editorial illustration of a network router beneath a multi-seal advisory notice, marking a joint US, UK and allied warning on Russian router targeting.

Nation-State Cyber Threats

US, UK and Allies Warn Russian State-Linked Actors Are Targeting Critical-Infrastructure Routers

A multilateral cybersecurity advisory on Russian router-targeting activity lands on critical-infrastructure defender teams' desks — the guidance reissues warnings the same agencies have made before, and asks operators to review posture this week.

Flat white line-art of a courthouse column beside four record cards — European Commission NIS2 referral to the CJEU.

Policy & Government

European Commission Refers Ireland, Spain, France and the Netherlands to the CJEU Over NIS2 Delays

A sharp regulatory-enforcement move from the European Commission — compliance stakes rise this week.

Flat white line-art of a partially staffed org chart with empty seats beginning to refill — a policy signal on re-staffing CISA.

Policy & Government

OMB Director Vought Signals Openness to Re-Staffing CISA

A policy-signal shift on CISA staffing — federal-adjacent defender teams and industry partners watch for follow-through this week.

Flat white line-art of a factory PLM gear, a server panel, and a catalog list card — CISA PTC Windchill RCE KEV addition.

Vulnerabilities

CISA Adds Exploited PTC Windchill RCE Flaw CVE-2026-12569 to KEV Catalog

CISA's KEV addition raises the priority for PTC Windchill defenders, who now face an actively exploited remote code execution flaw, continuing web-shell activity, and a tight federal remediation deadline.

Flat white line-art of an undersea cable arcing between two landmasses beside an emergency alert tower — FCC cyber rules.

Policy & Government

FCC Adopts New Cybersecurity Rules for Emergency Systems and Undersea Cables

New FCC cybersecurity rules land for emergency systems and undersea-cable operators, mandating baseline cyber hygiene for alert equipment and a first-in-decades overhaul of submarine-cable licensing and security.

See all