Back Atlabyte

Attackers Exploit Critical Siemens SIMATIC IoT2050 Vulnerability (CVSS 10.0) to Plant Backdoors

Atlabyte • November 3, 2026

Protect the editor and admin API with credential-based authentication or through an OAuth/OpenID provider

Secure the HTTP Nodes and the Node-RED Dashboard using basic authentication

3AM ransomware operator encrypted 37 machines in UK schools. Bitdefender suspects AI involvement

A 3AM ransomware affiliate attacked a school estate in the UK in September and encrypted around 37 of nearly 50 machines. Bitdefender researchers believe the operation may have used AI-generated commands and an automated agentic loop.

CrowdStrike to Acquire Fiddler AI and Dreadnode for Reported $495 Million

CrowdStrike announced the acquisitions of Fiddler AI and Dreadnode; The Wall Street Journal puts the combined deal value at $495 million.

Data Breach at US Frontline Education Affects Over 1.3 Million

US-based Frontline Education is notifying more than 1.3 million people that their personal information was compromised in a data breach.

Red Hat fixes 9.8-rated Linux TCP/IPv4 flaw, Ubuntu patches remain in proposed

Critical vulnerability CVE-2026-98432 in the Linux TCP/IPv4 stack now has patches: Red Hat fixed it in RHEL 8, 9, and 10, while Ubuntu has only put updates into the opt-in -proposed channel.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Critical Vulnerabilities Exploited in Siemens IoT2050 and WordPress Plugin Two critical vulnerabilities with a CVSS score of 10.0 have been reported, one in the Siemens SIMATIC IoT2050 and another in a CryptoPayment Gateway WordPress plugin. Attackers are exploiting these unpatched flaws to gain unauthorized access and potentially plant backdoors. The Siemens vulnerability is particularly concerning due to its implications for industrial control systems. The WordPress plugin flaw poses risks to websites using the plugin, allowing attackers to execute malicious code. Both vulnerabilities highlight the urgent need for organizations to apply patches and secure their systems. The Siemens vulnerability was disclosed recently, and the WordPress plugin flaw remains unpatched. Security researchers are urging immediate action to mitigate risks associated with these vulnerabilities. 2 sources 73

Extracted Entities

Attackers Exploit Critical Siemens SIMATIC IoT2050 Vulnerability (CVSS 10.0) to Plant Backdoors

The full story

Extracted Entities

Attack Types (2)

Companies (2)

CVEs (1)

MITRE ATT&CK (1)

Platforms (1)

Ransomware Groups (1)