highEndpointactiveCVSS 8.822 Oct 2026
Siemens
A software hole being used to spread malware
What happened
An exploited flaw in Siemens industrial software is being used as an initial-access path, with malware moving from engineering workstations into operational networks.
Timeline
22 Oct 2026 · 13:30 UTC
Advisory
Siemens confirms exploitation of a known flaw.22 Oct 2026 · 20:00 UTC
Lateral movement
Responders observe movement from IT into OT segments.23 Oct 2026 · 09:00 UTC
Mitigation
Network segmentation and patching guidance is published.
Sources