Skip to content
Threat Feed
Subscribe

Vendor

WAGO

3 briefs RSS
high threat

Sandworm Targeted Polish Energy Facility via Private APN Pivot

In December 2025, the threat actor Sandworm exploited an internet-facing firewall and a misconfigured cellular router to pivot through a private APN into a Polish energy facility's OT network, resulting in industrial sabotage.

VPN and firewall +5 Sandworm +4
6t
critical advisory

CVE-2026-4769: Unauthenticated Remote Access in WAGO System I/O Field Series

A critical vulnerability, CVE-2026-4769, in certain WAGO System I/O Field series devices allows an unauthenticated remote attacker to gain full system compromise by accessing an undocumented internal diagnostic capability during the initial startup sequence.

0765-110x/0100-0000 +7 ics ot critical-vulnerability unauthenticated-access remote-code-execution firmware-vulnerability
2t 1c
high advisory

ClickFix Campaign Activity

Tracking brief for the ClickFix campaign; individual sightings are folded in as reported.

open source packages +51 campaign clickfix
32i updated