CISA Warns Water Utilities: Find Your Exposed PLCs Before Attackers Do

2026-08-27T08:51:39Z591d5a105cdd4a6f08432cd305341bea480cfcdd8c00525e009d50008e935060
CVE-2026-60004APTCISAChina-linked-threat-actorDDoSGDPRICSOracle-HTTP-ServerOracle-WebLogicPLCsSCADAbiometricscritical-infrastructurecritical-infrastructure-securitycybercrimegovernment-servicesidentity-data-breachindustrial-control-systemsinfluence-operationsknown-exploited-vulnerabilitiespasskeysred-teamvulnerability-managementwater-utilities

What happened

Security news digest covering exposed industrial control systems in water utilities, CISA red-team compromises of critical infrastructure, China-linked infrastructure targeting, a high-severity Oracle proxy plug-in vulnerability added to CISA KEV, identity-data breaches, authentication improvements, cybercrime arrests, DDoS activity against Norway’s government infrastructure, and a major GDPR enforcement action against Uber. The most urgent technical issue is CVE-2026-60004, reported as CVSS 9.8 and actively exploited; exposed PLCs and weaknesses demonstrated by CISA red-team assessments also—

Why it matters

A reviewed impact interpretation has not been published for this record.

Evidence and limitations

Source ID
securityaffairs
Record identifier
591d5a105cdd4a6f08432cd305341bea480cfcdd8c00525e009d50008e935060
Enrichment time
2026-08-27T08:51:39Z
AI-assisted enrichment
Yes

This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.