The breach isn’t the problem. The spread is. →The breach isn’t the problem. The spread is. →Measure in 5 min. Free AssessmentFree Assessment
Electrical/Electronic Manufacturing
Breach intelligence, attack campaigns, and threat reports targeting the Electrical/Electronic Manufacturing sector.
Explore Other Sectors
Electrical/Electronic Manufacturing Threat Reports
ASKI Energy ALS-mini IP Controllers: 2025 ICS Vulnerability Exposes Critical Infrastructure
In October 2025, a critical authentication vulnerability (CVE-2025-9574) was disclosed in ASKI Energy ALS-mini-S8 and ALS-mini-S4 IP controllers. Devices manufactured between serial numbers 2000 and 5166 were found to lack authentication on their embedded web servers, enabling attackers to remotely read and modify configuration parameters without restriction. Discovered by security researcher Souvik Kandar and reported to CISA, this flaw impacts devices predominantly used across the European energy and critical manufacturing sectors. With a CVSS v4 score of 9.9, exploitation could have allowed adversaries to take full administrative control of exposed devices. Though exploitation reports are absent as of publication, the lack of vendor support due to product end-of-life heightens risk; similar legacy device exposures have increasingly fueled supply chain and operational technology (OT) attacks. The incident underscores the importance of aggressive network segmentation, timely asset retirement, and compensating controls in managing outdated ICS infrastructure.
8 months ago
Kill Chain
How BlackSuit Ransomware Hit a Global Equipment Manufacturer in 2024
In early 2024, a global equipment manufacturer experienced a significant ransomware attack carried out by the threat actor Ignoble Scorpius, leveraging the BlackSuit ransomware. The attack began with a sophisticated vishing campaign targeting an employee, leading to credential compromise and lateral movement within the company’s network. Attackers bypassed multiple defenses, ultimately deploying the ransomware to encrypt critical business systems and disrupt operations worldwide. The incident required rapid response, threat intelligence analysis, and comprehensive remediation to restore services and protect sensitive data. This incident highlights the growing danger of human-centric social engineering combined with advanced ransomware—a tactic increasingly adopted by organized threat actors. With the resurgence of targeted and blended attacks, organizations face urgent pressure to strengthen security controls and resilience against such evolving threats.
8 months ago
Kill Chain
Stop Active Cloud Data Exfiltration
Aviatrix Rapid Containment helps teams instantly identify what data is leaving the environment, from which workload, and where it’s going — during an active breach.
Looking for threats in a different sector?
Browse All Threat Reports