Mandiant has helped the California water utility investigate the cyberattack launched by Iranian hacker group Handala.

The post Cal Water Says No OT Systems Breached in Iranian Handala Cyberattack appeared first on SecurityWeek.

The exploited flaw, CVE-2025-67038, is one of the vulnerabilities disclosed in April as part of the BRIDGE:BREAK research project.

The post Lantronix Serial-to-IP Converter Flaw Exploited in Attacks After OT Threat Warning appeared first on SecurityWeek.

The 2026 Industrial Control Systems (ICS) Cybersecurity Conference takes place October 6-8, 2026, at the W Nashville.

The post SecurityWeek ICS Cybersecurity Conference Heads to Nashville for Special 25-Year Anniversary Edition appeared first on SecurityWeek.

The guidance aims to establish product cybersecurity requirements for IoT devices integrated into federal agencies’ networks.

The post NIST Opens Updated IoT Security Guidance to Public Review appeared first on SecurityWeek.

Named EmberAI, the new capability is built on Dragos’ massive operational technology cybersecurity dataset.

The post Dragos Unveils AI for OT Security  appeared first on SecurityWeek.

An anonymous reader quotes a report from Ars Technica: Dozens of new robot arms have been installed at General Motors' flagship electric vehicle factory in Detroit -- even as 1,300 workers remain out of work following what was supposed to be a temporary layoff. The latest automation push has spurred union pushback over a potentially existential issue for automakers and their workers. General Motors installed approximately 50 robot arms at GM's Factory Zero plant in Detroit, Michigan, according to reporting by Crain's Detroit Business. Made by the Japanese robotics company FANUC, the robots are designed to help attach various components to vehicles during the assembly line process. But leaders at United Auto Workers (UAW), the primary US union for autoworkers, reacted with anger to the new robotic presence, given how GM has not yet called back any of the workers affected by supposedly temporary layoffs in March. More than 1,000 union members are still "laid off indefinitely," James Cotton, president of UAW Local 22, told The Detroit News. He said that the company could bring some of those members back to work instead of installing the 50 robots. The temporary layoffs were preceded by permanent layoffs involving another 1,200 workers at GM's Factory Zero in October 2025. Many automakers, including Stellantis NV and Ford Motor Company, have deployed assembly-line robots, such as Fanuc robot arms, as they push to automate more of their US operations. Hyundai Motor Company plans to deploy Atlas humanoid robots made by Boston Dynamics -- which Hyundai acquired in 2020 -- to start working in the automaker's flagship EV facility in Georgia by 2028. "Technological development has the capability of making work safer for the working class and enabling workers to have a shorter work week without losing pay," said Andrew Bergman, a Local 22 member and union organizer who was among those laid off by GM. "But in the bosses' and billionaires' hands it's used to pad profits and lay off workers."

Read more of this story at Slashdot.

Hyundai Motor Group is acquiring SoftBank's remaining 9.65% stake in Boston Dynamics for $325 million, "closing out SoftBank's last piece of Boston Dynamics and turning the Waltham, Massachusetts robotics company into a wholly owned Hyundai business," reports Startup Fortune. From the report: The price is $325 million for the remaining stake, according to the deal terms, and it follows the put option SoftBank retained when Hyundai bought control of Boston Dynamics in 2021. You should read that as a signal, not a footnote. Hyundai paid about $880 million for an 80% stake in Boston Dynamics in the 2021 transaction, valuing the company at roughly $1.1 billion at the time. SoftBank had bought Boston Dynamics from Alphabet in 2017, after Google had acquired the robotics lab in 2013. It was a strange ownership path for a company whose robots became famous on YouTube long before they became obvious commercial products. That part is changing. At CES in Las Vegas on January 5, 2026, Hyundai and Boston Dynamics showed the electric Atlas humanoid robot in public, with the Associated Press reporting that the life-sized robot stood up, walked around the stage and was remotely piloted for the demonstration. The useful detail was not the stagecraft. It was the deployment plan. A production version of Atlas is expected to begin work at Hyundai's electric vehicle plant near Savannah, Georgia, by 2028. [...] If Hyundai can turn that into repeatable manufacturing value, the SoftBank exit will look less like a tidy cleanup and more like the moment Hyundai stopped borrowing a robotics future and decided to own it outright.

Read more of this story at Slashdot.

The deal values industrial cybersecurity giant Dragos at $3.25 billion, and runZero and NetRise will operate under Dragos.

The post Accenture to Acquire Majority Stake in Dragos, All of runZero, NetRise in $4.1 Billion OT Cybersecurity Push appeared first on SecurityWeek.

The industrial automation giant has fixed security holes in Logix, CompactLogix, Flex, RSLinx, and FactoryTalk products.

The post Rockwell Automation Patches Vulnerabilities in ICS Controllers and Software appeared first on SecurityWeek.

California Water Service says there is no indication of operational disruptions to its water and wastewater systems. 

The post Cal Water Investigating Iranian Hackers’ Claims appeared first on SecurityWeek.

Mackay Sugar was targeted in a cyberattack carried out by a threat group known as The Gentlemen.

The post Ransomware Attack Shuts Down Mills of Australia’s Second-Largest Sugar Producer appeared first on SecurityWeek.

PATCH WATCH By Susan Bradley We’re coming up to the Secure Boot certificate deadline. It’s June. Celebration season. Graduation. Weddings. And Secure Boot certificate expirations. Okay, maybe we’re not celebrating that last one. There are only a few weeks left before the Windows Secure Boot certificates expire. Let me remind you again that consumers should […]

The hackers published 5GB of data, including customer personal information and credentials for the RTKBase platform.

The post Iranian Cyber Group Handala Claims Cal Water Hack appeared first on SecurityWeek.

A PowerShell script included in patch files appears to be triggering false positives by multiple security engines.

The post Siemens Says Desigo CC Files Flagged as Malware by Security Engines appeared first on SecurityWeek.

Claroty researchers have analyzed the security of Vertiv UPS network cards and the Trane Tracer SC+ HVAC controller.

The post Critical HVAC and UPS Vulnerabilities Could Let Hackers Disrupt Data Centers appeared first on SecurityWeek.

ISSUE 23.22.1 • 2026-06-04 By Susan Bradley Microsoft is starting to roll out its much-promised, dribbled fixes. Included in the upcoming June updates — and already included in the preview updates released on May 26, 2026 — KB5089573 includes the Secure Boot fixes and the beginning of many changes about which you’ve complained. Nonetheless, it’s […]

Dragos said customers will soon gain expanded asset visibility and integrated device intelligence, with automated remediation workflows and a unified platform experience to follow.

The post Dragos Acquires xIoT Security Firm Phosphorus appeared first on SecurityWeek.

Way back in 2025, Microsoft announced that it would no longer sell a standalone subscription to Copilot pro. It would respect your yearly subscription if you had one, but come effective November 1, 2026 if you want AI in your Excel, PowerPoint, Outlook and OneNote, you’ll need to switch to Microsoft 365 premium. Today I […]

SecurityWeek spoke with several ICS security experts and companies about their most memorable experiences in the field.

The post Real-World ICS Security Tales From the Trenches appeared first on SecurityWeek.

The vulnerability, CVE-2026-8153, affects Universal Robots PolyScope 5 and it can be exploited for OS command injection. 

The post Critical Vulnerability Exposes Industrial Robot Fleets to Hacking appeared first on SecurityWeek.