IoT / OT Threat Intelligence

Internet of Things and Operational Technology devices present expanding attack surfaces in healthcare, manufacturing, energy, and critical infrastructure. defend.network monitors vulnerabilities and attacks targeting IoT and OT environments, including industrial control systems, medical devices, and building management systems.

briefings

critical

high

16%

of all briefings

Threat Briefings

2026-04-30

Daily Threat Briefing – April 30, 2026

Critical supply-chain attacks on SAP npm packages and North Korean AI-assisted malware, combined with cPanel authentication bypass and state-sponsored credential harvesting, create immediate existential threats to enterprise infrastructure and critical systems.

critical Supply Chain Credential Theft Vulnerability Exploit Technology Finance Government

2026-04-21

Daily Threat Briefing – April 21, 2026

Critical RCE vulnerabilities in AI infrastructure (SGLang, Anthropic MCP) combined with state-sponsored APT campaigns targeting authentication systems and OT/healthcare infrastructure demand immediate patching and access controls.

critical Zero-Day Vulnerability Exploit APT Technology Government Finance

2026-04-17

Daily Threat Briefing – April 17, 2026

Apache ActiveMQ actively exploited; Microsoft Defender zero-day disclosed; Russian state actors harvesting Office 365 tokens; ZionSiphon targets water infrastructure.

critical Zero-Day Vulnerability Exploit Malware Technology Government Finance

2026-04-13

Daily Threat Briefing – April 13, 2026

Critical Adobe Reader zero-day, CPUID supply-chain compromise distributing STX RAT, Russian APT harvesting Office tokens via router exploits, and Iranian actors targeting 4,000+ U.S. industrial control systems.

critical Zero-Day Supply Chain APT Technology Government Finance

2026-04-12

Daily Threat Briefing – April 12, 2026

Critical threats span Iranian PLC targeting, Russian token harvesting, Marimo RCE exploitation within 10 hours, and GlassWorm IDE infections. Immediate patching and detection deployment required.

critical APT Zero-Day Vulnerability Exploit Energy Manufacturing Government

2026-04-11

Daily Threat Briefing – April 11, 2026

Critical exploitation of Marimo RCE, Iranian targeting of 4,000 US PLCs, and Russian token harvesting via routers demand immediate patching and access controls.

critical Supply Chain Zero-Day Malware Technology Government Energy

2026-04-08

Daily Threat Briefing – April 8, 2026

Russian APT28 conducting large-scale DNS hijacking via compromised routers for token theft; Iranian hackers targeting U.S. critical infrastructure PLCs; critical Docker and Flowise vulnerabilities under active exploitation.

critical APT Credential Theft IoT / OT Defense Government Technology

2026-03-23

Daily Threat Briefing – March 23, 2026

Russian intelligence conducting mass Signal/WhatsApp phishing; critical Oracle RCE vulnerability; Trivy supply-chain attack spreads CanisterWorm across 47+ npm packages; VoidStealer bypasses Chrome encryption; Iran-backed wiper attacks on medical technology.

critical Phishing APT Vulnerability Exploit Government Defense Technology

Threat Briefings

Get the Daily Briefing in Your Inbox