Know What's Happening in Cybersecurity

Trio of Critical Bugs Spotted in Delta Industrial PLCs

Researchers from OPSWAT’s Unit 515 uncovered four serious flaws in Delta Electronics’ DVP‑12SE11T programmable logic controller, including three critical CVSS 9+ vulnerabilities. Delta issued a firmware patch just before the 2026 New Year, but many OT environments may delay updates due to 24/7 operational constraints. The flaws allow unauthenticated attackers to bypass authentication, leak credentials, cause device freezes, or execute out‑of‑bounds writes, potentially compromising safety‑critical processes. Experts warn state‑backed actors, particularly Chinese groups, could exploit these weaknesses to target water treatment, food processing, and other essential infrastructure in Asia.