AI is no longer merely writing phishing emails. It is probing networks, exploiting access and directing intrusions at scale. As investigations expose both malicious agents and runaway security tools, businesses face a defining question: who controls the software acting on their behalf in real time?
IBM survived Washington and still lost the layer that mattered. Wall Street now fears the same fate for AI: the Nasdaq in correction, Seoul halting trades, CoreWeave’s default insurance at a record. Congress may not stop the race. Whoever controls the power, chips and credit may decide it instead.
Wall Street’s post-election relief gave way to a sharp AI sell-off last night, as investors weighed construction delays, borrowing costs and political scrutiny. With chipmakers leading the losses, the question is becoming more urgent: which businesses can afford to wait for the promised returns?
A newly disclosed vulnerability in Schneider Electric's Foxboro DCS, a widely used industrial control system, could allow attackers to disrupt critical infrastructure operations. The flaw, originally from Intel, affects energy and manufacturing sectors worldwide, including Australia.
Cyber News Centre's cyber update for 21st January 2026: Schneider Electric has confirmed a significant vulnerability in its EcoStruxure Foxboro Distributed Control System (DCS), a platform used to manage industrial processes in critical infrastructure sectors across Australia and worldwide.
Schneider Electric is a global leader in energy management and automation, providing solutions for a wide range of industries, including energy, manufacturing, and infrastructure. The French multinational's technology is deeply embedded in Australia's critical infrastructure, managing everything from power grids to manufacturing plants.
Update: The US Cybersecurity and Infrastructure Security Agency (CISA) has issued an advisory for a medium-severity vulnerability (CVSS 6.5) in Schneider Electric's EcoStruxure Foxboro DCS. The flaw, identified as CVE-2018-12130, originates from an Intel processor vulnerability known as Microarchitectural Fill Buffer Data Sampling (MFBDS). It allows an authenticated user with local access to perform a side-channel attack, potentially leading to information disclosure, loss of system functionality, or unauthorised access.
The vulnerability affects Foxboro DCS Virtualisation Servers and Standard Workstations running on specific Intel Xeon processors. Schneider Electric has released an official security notification (SEVD-2025-343-01) and is urging affected customers to apply mitigations. The advisory highlights the risk to commercial facilities, critical manufacturing, and the energy sector. This disclosure comes amid a documented surge in cyberattacks targeting industrial control systems (ICS) and operational technology (OT) globally, with hacktivist groups increasingly focused on disrupting critical infrastructure.
The vulnerability's republication by CISA on January 20, 2026, underscores its current relevance and the ongoing risk to industrial operators who have not yet applied the necessary patches or workarounds.
Why it Matters: This vulnerability is significant for Australia because the Foxboro DCS is a foundational component in the nation's energy and manufacturing sectors. A successful exploit could move beyond simple data theft, leading to the disruption of essential services like power generation or manufacturing processes.
The requirement of local access mitigates the risk of remote, internet-based attacks, but it does not eliminate the threat from insiders or attackers who have already gained a foothold in the operational network. As industrial systems become more interconnected, the line between digital and physical risk blurs. This incident serves as a critical reminder that vulnerabilities in the industrial supply chain, even those originating from a processor-level flaw, have direct implications for national security and the stability of critical infrastructure.
Get the stories that matter to you.
Subscribe to Cyber News Centre and update your preferences to follow our Daily 4min Cyber Update, Innovative AI Startups, The AI Diplomat series, or the main Cyber News Centre newsletter — featuring in-depth analysis on major cyber incidents, tech breakthroughs, global policy, and AI developments.
AI is no longer merely writing phishing emails. It is probing networks, exploiting access and directing intrusions at scale. As investigations expose both malicious agents and runaway security tools, businesses face a defining question: who controls the software acting on their behalf in real time?
Binance’s US$6.3 billion theft exposes the fault line beneath crypto’s institutional ambitions: the authority to move money. With the FBI blaming North Korea and investigators tracing stolen assets, the breach raises urgent questions for custody, tokenisation and the future of automated finance.
The FCC’s Intel waiver shows that semiconductor sovereignty depends not only on chips, but also on the factory robots that move materials. The one-year exception protects continuity without creating a blanket exemption, keeping national-security controls and manufacturing resilience aligned today.
AI is finding flaws faster than defenders can patch them, while autonomous agents push past human instructions. From exposed government systems to an Anthropic model that ignored stop signs, the question is who can halt the machine—and who pays when it acts without permission or moves the money.
Where cybersecurity meets innovation, the CNC team delivers AI and tech breakthroughs for our digital future. We analyze incidents, data, and insights to keep you informed, secure, and ahead. Sign up for free!
