MEDIUMApt
Global

'Living Off the Plant' OT Attacks Pose Physical Safety Risk

·Source: Bank Info Security

Updated:

Executive Summary

Beware Abuse of Native OT Functionality, Says Orange Cyberdefense's Ric Derbyshire Attackers can employ "living off the plant" tactics to stealthily access and move laterally inside industrial networks, abusing native fu

Analysis

Beware Abuse of Native OT Functionality, Says Orange Cyberdefense's Ric Derbyshire Attackers can employ "living off the plant" tactics to stealthily access and move laterally inside industrial networks, abusing native functionality to conduct cyberespionage or disruption campaigns. Orange Cyberdefense's Ric Derbyshire details essential defenses against this threat.

Indicators of Compromise (2)

URL (1)
https://ismg-cdn.nyc3.cdn.digitaloceanspaces.com/articles/living-off-plant-ot-attacks-pose-physical-safety-risk-image_small-5-a-32591.jpg
VirusTotalURLhaus
Domain (1)
ismg-cdn.nyc3.cdn.digitaloceanspaces.com
VirusTotalURLhaus
Source Attribution

Originally published by Bank Info Security on Aug 18, 2026.

Related Threats

MEDIUMApt

China-Linked APT Uses AI to Optimize Hand-Built Malware

<img src="https://ismg-cdn.nyc3.cdn.digitaloceanspaces.com/articles/china-linked-apt-uses-ai-to-optimize-hand-built-malware-image_small-4-a-32597.jpg" align=right hspace=4><b>SilkParasite Deployed Against Central Asian Governments</b><br>Bitdefender said the China-linked SilkParasite espionage campaign deployed seven modular RATs against Central Asian governments, with coding artifacts indicating

Bank Info Security
CRITICALApt

CISA Malcolm

<p><a href="https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2026/icsa-26-230-01.json"><strong>View CSAF</strong></a></p> <h2>Summary</h2> <p><strong>Successful exploitation of these vulnerabilities could allow an attacker to cause a denial-of-service condition or execute arbitrary code.</strong></p> <p>The following versions of CISA Malcolm are affected:</p> <ul> <li>Malcolm <26.0

CVE-2026-55676CVE-2026-63133
CISA Advisories
HIGHApt

New Malware turns Microsoft cloud into its control center

Security researchers are warning of a newly uncovered Python malware framework that routes much of its command-and-control (C2) activity through Microsoft services that defenders already expect to see. The Ontinue Cyber Defense Center discovered the implant while investigating an active campaign in July and has since tracked it as TWINLOOT. It was seen using SharePoint Online as a file-based dead

CSO Online