Science & Tech · Cybersecurity · 14 hrs ago
Security roundup flags FortiBleed and exposed renewable-energy systems
A weekly cybersecurity roundup covers threats and other developments affecting businesses, public services and technology users.
Its headline says FortiBleed is still active, but gives no further details about the vulnerability.
Researchers found 8,547 internet-facing systems at wind and solar parks in 35 countries in and around the European Union that should not be reachable online.
Some included login screens and a turbine control page with a Stop button.
The roundup also describes MATCHBOIL, malware used by the Russia-aligned group UAC-0099 to install spying software on Windows machines in Ukraine.
Another item explains BPFDoor, Linux malware that waits for a special network packet before acting and targets devices such as mail gateways.
These cases show how exposed systems and hard-to-detect malware can create risks for organizations and critical infrastructure.
The roundup does not specify what happens next.
A Dutch government cybersecurity center and Modat found 8,547 internet-facing systems at wind farms and solar parks that should not be reachable from the internet.
The systems were found in 35 countries in and around the European Union.
They range from login screens to a turbine control page with a Stop button accessible through a browser.
The roundup also covered the FortiBleed vulnerability, MATCHBOIL malware and other security topics.
- Who
- Modat and NCSC-NL found the exposed systems.
- What
- They identified 8,547 internet-facing systems at wind farms and solar parks that should not be reachable from the internet.
- When
- The roundup was published on October 11, 2026. The discovery date is not stated.
- Where
- The systems were in 35 countries in and around the EU.
- Why
- The systems should not be reachable from the internet; the reason they were exposed is not stated.
This story does not have two clearly opposing sides.
No direct quotes in the coverage so far.
This story does not have a timeline yet.
- Exposed systems
- 8,547
- Locations
- 35 countries in and around the EU
- Organizations reporting the finding
- Modat and NCSC-NL
- Roundup publication
- October 11, 2026
Sources
Related news
Canadian cybersecurity negotiator arrested in ShinyHunters investigation
US seizes two China-linked hacking tools used against critical infrastructure
Illinois college says Flock refused to remove its cameras before contract ended
Anthropic offers free AI vulnerability scans to open-source projects
FBI arrests another suspect linked to ShinyHunters jobs-site breach
Canadian cybersecurity executive arrested on extortion-related charges
Security Affairs launches weekly AI and cybersecurity newsletter
AI-assisted attacks hit South Korean financial institutions
Ricardo data breach affects about 890,000 user accounts
Account linked to Chinese DDoS group in probe of attacks on South Korean finance
Thousands of GPU servers exposed monitoring data, with hundreds vulnerable to crashes
