Back Securityaffairs.Co

Internet

Securityaffairs.Co •Pierluigi Paganini • April 9, 2026

Exposed ICS devices and insecure protocols like Modbus increase risks to critical infrastructure, enabling disruption, data access, and potential sabotage. Malware targeting industrial control systems (ICS) poses a serious risk to critical infrastructure, with threats like Stuxnet, Industroyer, Triton, Havex, and BlackEnergy already demonstrating the ability to disrupt operations, cause outages, and even inflict physical […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Exposed Modbus ICS Devices Heighten Risks to Critical Infrastructure A report reveals that 179 internet-exposed industrial control systems (ICS) using the Modbus protocol are vulnerable across 20 countries, with the majority located in the U.S., Sweden, and Turkey. The Modbus protocol lacks encryption and authentication, making these devices susceptible to unauthorized access and manipulation. Notably, one device is part of a national railway network, while others are linked to power grid infrastructures in both Asia and Europe. Researchers from Comparitech warn that attackers can exploit these vulnerabilities to read and write to holding registers without authentication. The presence of malware targeting ICS, such as Stuxnet and Industroyer, further exacerbates the risk of disruption and sabotage. The findings indicate a significant threat to critical infrastructure entities, necessitating immediate attention from security professionals. 4 sources 68

Extracted Entities

Internet

The full story

Extracted Entities

Attack Types (1)

Malware (5)

Platforms (1)