https://blog.dansec.red/vendors/openplc/Recent content in OpenPLC on DanSec DailyHugoen-gbMon, 01 Dec 2025 00:00:00 +0000https://blog.dansec.red/posts/2025-12-01-cybersecurity-news/Mon, 01 Dec 2025 00:00:00 +0000https://blog.dansec.red/posts/2025-12-01-cybersecurity-news/<h2 id="major-incidents-or-breaches">Major Incidents or Breaches</h2> <ul> <li>Asahi Group Holdings, Japan’s largest beer producer, has confirmed that a September cyberattack resulted in a data breach affecting up to 1.9 million individuals. The breach exposed personal information, including names, addresses, phone numbers, and email addresses.</li> </ul> <h2 id="newly-discovered-vulnerabilities">Newly Discovered Vulnerabilities</h2> <ul> <li>The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added CVE-2021-26829, a cross-site scripting (XSS) vulnerability in OpenPLC ScadaBR, to its Known Exploited Vulnerabilities (KEV) catalog. The flaw is being actively exploited.</li> </ul> <h2 id="notable-threat-actor-activity">Notable Threat Actor Activity</h2> <ul> <li>The threat actor Tomiris has shifted tactics in recent campaigns targeting foreign ministries, intergovernmental organizations, and government entities in Russia. Tomiris is now leveraging public-service implants to establish stealthier command-and-control (C2) channels and maintain persistent remote access.</li> </ul>