Internet-Exposed ICS Devices Raise Alarm for Critical Sectors
2026-04-09T08:51:46Z•ae4d5d96eb25040b101aee88d2fd903af6dbf5a539b32b9867358ae129152f2f
ai-securityapt28cisaclaude-mythos','banking-outagecritical-infrastructurecve-2025-59528cve-2026-1340flowisegpu-rowhammergpubreachhealthcare-incidenticsiran-linked-actorsivanti-epmmknown-exploited-vulnerabilitiesmedusaplcprismexransomwarerceremote-code-executionrockwell-allen-bradleyscadasignature-healthcarestorm-1175
What happened
This feed covers multiple high‑risk incidents and advisories affecting critical infrastructure, enterprise products, and AI security. Notable items: CISA added Ivanti Endpoint Manager Mobile code‑injection flaw CVE-2026-1340 (CVSS 9.8) to its Known Exploited Vulnerabilities catalog; attackers are actively exploiting Flowise RCE CVE-2025-59528 (CVSS 10.0). U.S. agencies warn Iran-linked actors are exploiting internet-exposed Rockwell/Allen‑Bradley PLCs, Russia‑linked APT28 (PRISMEX) is conducting stealthy espionage against Ukraine and allies, China‑linked Storm-1175 is rapidly exploiting new CV
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- securityaffairs
- Record identifier
- ae4d5d96eb25040b101aee88d2fd903af6dbf5a539b32b9867358ae129152f2f
- Enrichment time
- 2026-04-09T08:51:46Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.