Tag
Active Reconnaissance and Capability Development Against Siemens S7 PLCs
2 TTPsThreat actors are using AI-assisted scripts and the snap7 library to target Internet-exposed Siemens S7 Series PLCs for reconnaissance and potential operational disruption across critical infrastructure sectors.
Siemens SIMATIC S7 PLCs Web Server Vulnerabilities Allow Cross-Site Scripting
2 rules 1 TTPA remote, authenticated attacker can exploit multiple vulnerabilities in Siemens SIMATIC S7 PLCs Web Server to perform cross-site scripting attacks, potentially leading to information disclosure or further unauthorized actions.
Qualcomm PLC FW Buffer Overflow via Incorrect Authorization (CVE-2026-25293)
2 rules 2 TTPs 1 CVECVE-2026-25293 is a critical buffer overflow vulnerability in Qualcomm PLC FW due to incorrect authorization, potentially allowing unauthorized access and control over programmable logic controllers.
Schneider Electric Modicon PLC Denial-of-Service Vulnerability
2 rules 1 TTP 2 IOCsTeam82 disclosed vulnerabilities in Schneider Electric Modicon Controllers M241, M251, and M262 PLC lines, which can allow an attacker to cause a denial-of-service condition and affect controller availability.