Topic

vulnerabilities

All articles on vulnerabilities.

Industrial protocols Modbus, DNP3, and OPC UA with vulnerability analysis

Cybersecurity

Vulnerabilities in Industrial Protocols: Modbus, DNP3, OPC UA, and the Hidden Risks

Modbus, DNP3, OPC UA, and PROFINET underpin industrial communications. Designed for reliability in closed networks, they carry intrinsic vulnerabilities that become critical in increasingly connected environments.

4 min read

OT field device with firmware integrity analysis

Cybersecurity

Firmware Tampering in Field Devices: How It Happens and How to Detect It

The firmware in OT field devices is a prime target for persistent, hard-to-detect attacks. How tampering happens, why it is so insidious and what countermeasures exist.

4 min read

Architectural diagram of OPC-UA servers with indicators of misconfigured security settings, certificates and anonymous sessions highlighted

Cybersecurity

OPC-UA: The Most Widely Used OT Protocol and Its Most Common Security Problems

OPC-UA is the de facto standard for communication in modern SCADA systems, but it is often deployed with degraded security settings for legacy client compatibility. Here is what shows up in the traffic and what an attacker can exploit.

6 min read

Abstract illustration: artificial intelligence and vulnerability discovery in OT systems

Cybersecurity

AI changed vulnerability discovery: but there is an OT gap you cannot ignore

New AI models discover vulnerabilities autonomously and at industrial scale. But the tools stay tuned for IT: the OT world risks falling behind just as attackers accelerate.

2 min read

Representation of a compromised industrial PLC affected by a chain of CODESYS vulnerabilities

Cybersecurity

CODESYS Under Attack: Three Chained Flaws to Plant a Backdoor in a PLC

Three chained CVEs in the CODESYS Control runtime let a Service user replace the PLC application with a backdoored version and run code as root.

3 min read