OT Security

Abusing the security issues, which arise from inadequate user input sanitization, could enable threat actors to facilitate system command injections, arbitrary code execution, and eventual ICS hijacking.

CVE-2025-21590 was disclosed by Google's Mandiant team to have been exploited by Chinese cyberespionage hacking group UNC3886.

Intrusions by the Mirai-based botnets involved the targeting of devices with default credentials.

Littleton Electric Light and Water Departments was compromised for over 300 days in 2023.

UNC3886 targeted the outdated Juniper routers to deploy the Medusa and Reptile rootkits.

A US congressional committee has urged Americans to stop using wireless routers made by TP-Link.