✨ The Containment Era is here. Secure AI workloads before they breach. →The Containment Era is here. →The Containment Era is here. →Explore ✨
Electrical/Electronic Manufacturing
Breach intelligence, attack campaigns, and threat reports targeting the Electrical/Electronic Manufacturing sector.
Explore Other Sectors
Electrical/Electronic Manufacturing Threat Reports
CISA Discloses 2025 ICS Vulnerabilities Impacting Critical Infrastructure
In October 2025, the Cybersecurity and Infrastructure Security Agency (CISA) disclosed 10 advisories detailing significant vulnerabilities found in a range of Industrial Control Systems (ICS) from leading manufacturers including Rockwell Automation, Siemens, Schneider Electric, and others. These advisories highlighted security flaws impacting critical operational technology components—such as PLCs, network devices, and cloud-enabled devices—potentially exposing vital infrastructure to remote code execution, unauthorized access, and disruption risks. Attackers leveraging these weaknesses could impact sectors like energy, manufacturing, and healthcare, posing threats to operational continuity and safety. This incident underscores the escalating threat landscape for operational technology and ICS environments as attackers increasingly target critical infrastructure using both opportunistic exploits and sophisticated attack vectors. The wave of advisories reflects mounting urgency for organizations to prioritize OT security, driven by evolving regulatory requirements and the proliferation of targeted attacks on essential industrial sectors.
6 months ago
Kill Chain
Delta Electronics ASDA-Soft 2025 Buffer Overflow: Securing Industrial Control Software
In October 2025, Delta Electronics disclosed critical buffer overflow vulnerabilities (CVE-2025-62579, CVE-2025-62580) affecting their ASDA-Soft automation software, widely used in the critical manufacturing sector. Identified by security researcher Guillaume Orlando via Trend Micro's Zero Day Initiative, the flaws allow attackers to execute code or corrupt memory by convincing users to open malicious project files, potentially leading to loss of control, data compromise, or disruption of industrial processes. Delta responded with a patched software release (v7.1.1.0+) and advisories to enhance network segmentation, firewall defenses, and conduct impact assessments. This incident highlights the ongoing exposure of operational technology (OT) in industrial environments to traditional software exploitation techniques. Regulatory scrutiny and the expansion of threat actor targeting of critical infrastructure elevate the urgency for timely patching, software supply chain validation, and segmented, zero-trust OT/IT network architectures.
6 months ago
Kill Chain
ASKI Energy ALS-mini IP Controllers: 2025 ICS Vulnerability Exposes Critical Infrastructure
In October 2025, a critical authentication vulnerability (CVE-2025-9574) was disclosed in ASKI Energy ALS-mini-S8 and ALS-mini-S4 IP controllers. Devices manufactured between serial numbers 2000 and 5166 were found to lack authentication on their embedded web servers, enabling attackers to remotely read and modify configuration parameters without restriction. Discovered by security researcher Souvik Kandar and reported to CISA, this flaw impacts devices predominantly used across the European energy and critical manufacturing sectors. With a CVSS v4 score of 9.9, exploitation could have allowed adversaries to take full administrative control of exposed devices. Though exploitation reports are absent as of publication, the lack of vendor support due to product end-of-life heightens risk; similar legacy device exposures have increasingly fueled supply chain and operational technology (OT) attacks. The incident underscores the importance of aggressive network segmentation, timely asset retirement, and compensating controls in managing outdated ICS infrastructure.
6 months ago
Kill Chain
How BlackSuit Ransomware Hit a Global Equipment Manufacturer in 2024
In early 2024, a global equipment manufacturer experienced a significant ransomware attack carried out by the threat actor Ignoble Scorpius, leveraging the BlackSuit ransomware. The attack began with a sophisticated vishing campaign targeting an employee, leading to credential compromise and lateral movement within the company’s network. Attackers bypassed multiple defenses, ultimately deploying the ransomware to encrypt critical business systems and disrupt operations worldwide. The incident required rapid response, threat intelligence analysis, and comprehensive remediation to restore services and protect sensitive data. This incident highlights the growing danger of human-centric social engineering combined with advanced ransomware—a tactic increasingly adopted by organized threat actors. With the resurgence of targeted and blended attacks, organizations face urgent pressure to strengthen security controls and resilience against such evolving threats.
6 months ago
Kill Chain
Stop Active Cloud Data Exfiltration
Aviatrix Breach Lock helps teams instantly identify what data is leaving the environment, from which workload, and where it’s going — during an active breach.
Looking for threats in a different sector?
Browse All Threat Reports