Energy Intelligence

Threats against power grids, oil and gas, nuclear facilities, and critical energy infrastructure.

8
Total Reports
5
Critical Threats
0
High Threats
CRITICALAptExploited

Volt Typhoon Compromises US Natural Gas Pipeline Operator OT Networks

Volt Typhoon confirmed inside OT networks of a major US natural gas pipeline operator. Access to safety instrumented systems raises explosion risk concerns.

Pipeline SCADA
CISA / TSA Emergency Directive
CRITICALMalwareExploited

Sandworm Targets European Energy Companies with Industroyer3 Variant

Sandworm deploys Industroyer3 variant against energy companies in Poland and Baltic states. ICS-specific payload targets Siemens SIPROTEC relays.

Siemens SIPROTEC
CERT-EU / Mandiant
CRITICALAptExploited

Volt Typhoon in US Water Systems Triggers EPA Emergency Order

EPA emergency order after confirming Volt Typhoon access to water treatment SCADA systems serving 20M+ Americans. Chemical dosing manipulation capability confirmed.

SCADA Systems
EPA / CISA Emergency Advisory
CRITICALVulnerabilityExploited

Critical Fortinet FortiManager Flaw Enables Managed Firewall Takeover

CVE-2026-48788 allows registration of rogue FortiGate devices to FortiManager, enabling config push to entire managed firewall estate.

CVE-2026-48788FortiManager 7.4
Fortinet PSIRT / Mandiant
LOWVulnerability

ENISA Publishes 2026 Threat Landscape Report — Ransomware and AI Threats Dominate

ENISA annual report identifies ransomware, AI-enabled threats, and supply chain attacks as the top three cyber threats facing Europe in 2026.

N/A
ENISA
CRITICALMalwareExploited

Sandworm Deploys New Wiper Malware Against Ukrainian Energy Grid

Russian GRU Sandworm group deploys new wiper variant AcidBurn targeting Ukrainian power distribution systems during winter heating season.

Schneider Electric SCADA
CERT-UA / Mandiant
LOWVulnerability

SEC Proposes Updated Cybersecurity Incident Reporting Rules for Public Companies

SEC proposes amendments requiring public companies to report material cyber incidents within 48 hours, down from 4 business days.

N/A
SEC
MEDIUMApt

Australia Cyber Security Centre Warns of Attacks on Critical Infrastructure OT Networks

ACSC issues urgent advisory on increased targeting of Australian critical infrastructure OT networks by state-sponsored actors.

SCADA Systems
ACSC