← Saturday 17 Octobernote 9 of 15
CybersecuritySat 17 Oct 2026 · 9 of 15

UBC researchers detail "ICS‑Sniper" attack on cloud‑hosted SCADA systems

Verified · 4/4 supported1 cited · 1 min read

securityweek.com reports that University of British Columbia researchers detailed a proof‑of‑concept attack called "ICS‑Sniper" targeting industrial facilities that rely on cloud‑hosted SCADA systems . securityweek.com reports that the attack exploits a compromised router to analyze VPN‑encrypted packet size, direction and timing to predict when critical commands or data will be exchanged and then drop payload‑carrying packets . securityweek.com reports that the researchers tested the attack on an emulated version of the SWaT water‑treatment testbed .

Why it matters. securityweek.com reports that the attack can pick off critical OT traffic, affecting industrial control communications .

Earlier on Cybersecurity

Fri 16 Oct 2026UK Legal Aid Agency breach scope expands to records from 1978securityweek.com reports that the UK Legal Aid Agency discovered records dating back to 1978 were compromised in an April 2025 data breach. securityweek.com reports that in May 2025 the agency announced hackers had accessed and exfiltrated personal information of individuals who applied for legal aid, but did not disclose the full scope at that time. securityweek.com reports that a recent incident update shows most compromised records relate to applications, claims, and payments submitted between 2007 and 2025, while approximately 250,000 records predate 2007, with the majority from the 1990s and 2000s and the earliest verified record from 1978. securityweek.com reports that compromised data includes names, addresses, dates of birth, National Insurance Numbers, postcodes, case reference numbers, answers entered into the Client and Cost Management System, phone numbers, and other personal details. securityweek.com reports that hackers also exfiltrated information about legal aid practitioners, such as contracts, schedules, office locations, payment details, and user account credentials.Fri 16 Oct 2026Shift from Reactive to Contextual Defense in Cybersecuritysecurityweek.com reports that cybersecurity has traditionally been reactive, focusing on spotting and shutting down bad events, but now needs to evolve toward contextual defense. securityweek.com reports that modern attacks often begin with ordinary events such as an admin login or an unfamiliar tool being downloaded after office hours, which can lead to a breach if not challenged. securityweek.com reports that defenders possess extensive data about users, devices, applications, network traffic, and vulnerabilities, yet data fragmentation across disconnected tools hampers effective defense.Thu 15 Oct 2026Industrial Control System Vendors Issue Multiple Security Advisories on Patch Tuesdaysecurityweek.com reports that Siemens published 17 new industrial control system security advisories on Patch Tuesday. securityweek.com reports that Siemens released patches and mitigations for critical flaws in Simatic S7-1500 CPUs, Industrial Edge devices and Ruggedcom Crossbow controllers, with over 400 GNU/Linux subsystem defects, and also patched high‑severity issues across multiple products and medium‑severity issues in Sentron 3NA COM Fuse and Capital Embedded AR Classic. securityweek.com reports that Siemens warned of a documentation ambiguity affecting Simatic S7 PLCs, Schneider Electric issued two high‑severity advisories including one on Pro‑face STW6000 and Harmony STW6 devices that could enable remote takeover via a malicious webpage, Rockwell Automation fixed an ArmorBlock takeover flaw, and ABB previously warned about possible probing of a dynovaPRO vulnerability. securityweek.com reports that the disclosed vulnerabilities span critical, high and medium severity levels, underscoring the need for immediate remediation across affected control system components.
Next · Climate techEU Leaders to Meet Oct 15‑16 on 2028‑2034 Budget Amid Crunch Phase →