Security Insights
Latest threat analysis, industry news, and security best practices from our expert team.
Secret Blizzard’s Kazuar: Evolving into a Modular P2P Botnet — Detection and Defense
Introduction The threat landscape has shifted again. The Russian nation-state actor Secret Blizzard (APT29), known for its stealthy long-ter...
Living Off the Pipeline: Detecting Poisoned Pipeline Execution in CI/CD Environments
Living Off the Pipeline: Detecting Poisoned Pipeline Execution in CI/CD Environments Introduction The concept of \"Living off the Land\" (Lo...
Simcenter Femap Datakit RCE: Detecting IPT File Exploitation (Versions < 2512.0003)
Introduction CISA has released ICS Advisory ICSA-26-134-05 regarding a critical vulnerability in Siemens Simcenter Femap, a widely used engi...
Siemens Ruggedcom Rox MX5000: Critical Third-Party Vulnerabilities — Detection and Remediation Guide
Siemens Ruggedcom Rox MX5000: Critical Third-Party Vulnerabilities — Detection and Remediation Guide Introduction Defenders managing Operati...
CVE-2025-29101: Siemens RuggedCom ROS Remote Code Execution — Detection and Hardening
CVE-2025-29101: Siemens RuggedCom ROS Remote Code Execution — Detection and Hardening Introduction CISA has released ICSA-26-134-12, alertin...
Siemens gWAP Unauthenticated RCE via Axios (ICSA-26-134-01): Detection and Remediation
Introduction A critical security advisory (ICSA-26-134-01) has been released for Siemens gPROMS Web Applications Publisher (gWAP), a solutio...
CVE-2026-13408: Siemens ROS# Remote Code Execution — ICS Defense & Detection
Introduction CISA has released advisory ICSA-26-134-08 detailing a critical security vulnerability affecting Siemens SIMATIC ROS (Robot Oper...
Siemens SIMATIC CN 4100 Critical Vulnerabilities (CVSS 9.6) — Detection and Mitigation
Introduction Siemens has released a critical advisory for SIMATIC CN 4100 devices, flagging multiple high-severity vulnerabilities that impa...
CVE-2025-2595, CVE-2025-41659, CVE-2025-41691: ABB AC500 V3 PLCs — Detection and Hardening Guide
Introduction Defenders managing operational technology (OT) environments need to be on high alert following the release of a CISA advisory (...