OT & Industrial Systems

Overnight on October 11-12, 2026, attackers abused the defrost function of internet-exposed Danfoss controllers at hundreds of French supermarkets, pinning setpoints near 50C and stretching cycles to eight hours to delay alarms - spoiling stock and sparking fires.

South Africa's air navigation provider ATNS found ransomware-linked malware in an OT network supporting aviation weather services, with suspected data exfiltration to China-based IPs. No flights were disrupted; the actor is unknown and a forensic probe is under way.

Cl0p exploited an unauthenticated deserialization flaw in PTC Windchill as a zero-day in June 2026, deployed a purpose-built web shell that decrypts the application's keystore, and named 43 manufacturers, including Shell, Philips and GE. It was the second such flaw in three months.

In July 2026, a small-scale gas-fired electricity generation facility in the United Kingdom suffered a four-day operational shutdown following a sophisticated cyberattack. The targeted plant,...