<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom">
<channel>
<title>IC Cyber – OT Incident Monitor</title>
<link>https://ic-cyber.ai/</link>
<atom:link href="https://ic-cyber.ai/feed.xml" rel="self" type="application/rss+xml"/>
<description>OT/ICS, IoT and critical-infrastructure incidents worldwide, summarised from public news reports by IC Cyber FlexCo.</description>
<language>en</language>
<lastBuildDate>Tue, 10 Nov 2026 19:50:21 GMT</lastBuildDate>
<ttl>30</ttl>
<item>
<title>A burnt mini-substation in Kimberley caused a temporary power outage affecting parts of Herlear, Belgravia, Memorial Road and Newpark.</title>
<link>https://ic-cyber.ai/#incident-468</link>
<guid isPermaLink="false">ic-cyber-incident-468</guid>
<pubDate>Tue, 10 Nov 2026 17:50:05 GMT</pubDate>
<category>Outage</category>
<description>10 Nov 2026 · South Africa · Sol Plaatje Municipality

On 10 November 2026, a mini-substation located at the corner of Achilles Street and Egerton Road in Kimberley, South Africa, caught fire and was destroyed. The Sol Plaatje Municipality's Fire Department successfully extinguished the blaze. The fire caused a temporary power supply interruption affecting parts of the Herlear, Belgravia, Memorial Road and Newpark (Lawson Street) areas. The municipality's Electrical Department undertook isolation work to restrict the outage to a portion of Herlear and Egerton Street. The source of the fire had not yet been determined at the time of the notice. Residents were urged to exercise caution around the incident area. The notice was issued by the municipality's Communications Unit at 19:00 on 10 November 2026.

Source: Kimberley City Info - – https://www.kimberley.org.za/kimberley-power-outage-10-11-2026/</description>
</item>
<item>
<title>Power outage affected parts of Rüsselsheim, Germany; cause identified but not old cables.</title>
<link>https://ic-cyber.ai/#incident-466</link>
<guid isPermaLink="false">ic-cyber-incident-466</guid>
<pubDate>Tue, 10 Nov 2026 13:50:14 GMT</pubDate>
<category>Blackout</category>
<description>10 Nov 2026 · Germany

On Tuesday, 10 November 2026, a power outage affected parts of the city of Rüsselsheim in Germany. The incident recalled similar events in recent years, during which ageing cables had been identified as the cause. However, in this case the responsible party confirmed that the cause was not old cables, though the specific technical reason was not detailed in the available reporting. The outage disrupted electricity supply to affected residential and commercial areas within the city. No information was provided regarding the duration of the outage, the number of households or businesses affected, or whether any secondary consequences such as traffic-light failures or water-pump interruptions occurred. The article, published by the local outlet Main-Spitze, confirmed that the cause had been identified but did not elaborate further on the technical details of the failure. No cyberattack, sabotage or external interference was indicated. The incident appears to be a routine grid failure, consistent with the broader pattern of occasional power outages in the region.

Source: Main-Spitze – https://www.main-spitze.de/lokales/kreis-gross-gerau/ruesselsheim/erneuter-stromausfall-in-ruesselsheim-ursache-ist-bekannt-6782660</description>
</item>
<item>
<title>Signal system failure caused train delays between Colombo Fort and Maradana in Sri Lanka.</title>
<link>https://ic-cyber.ai/#incident-465</link>
<guid isPermaLink="false">ic-cyber-incident-465</guid>
<pubDate>Tue, 10 Nov 2026 13:50:03 GMT</pubDate>
<category>Disruption</category>
<description>10 Nov 2026 · Sri Lanka · Sri Lankan Railways

A signal system failure disrupted rail operations on the line between Colombo Fort and Maradana in Sri Lanka, causing train delays. The incident affected passenger services on one of the country's busiest urban rail corridors. No further details on the root cause, duration, or response measures were provided in the available text. The disruption was attributed to a technical failure of the signalling system rather than a cyberattack or external interference.

Source: Ada Derana – https://adaderana.lk/news/251410</description>
</item>
<item>
<title>Power outage in Stubbenberg, Escheburg caused by a grid fault operated by Schleswig-Holstein Netz AG.</title>
<link>https://ic-cyber.ai/#incident-464</link>
<guid isPermaLink="false">ic-cyber-incident-464</guid>
<pubDate>Tue, 10 Nov 2026 12:50:03 GMT</pubDate>
<category>Outage</category>
<description>10 Nov 2026, 13:00 · Germany · Schleswig-Holstein Netz AG

On 10 November 2026, an unplanned power outage affected the Stubbenberg area in Escheburg (postal code 21039), Landkreis Herzogtum Lauenburg, Germany. The disruption began at 13:00 local time and was expected to be resolved by 15:05. The grid operator responsible for the area is Schleswig-Holstein Netz AG. No specific cause for the fault was identified in the report; no information about routine maintenance was available. The article notes that Germany's power grid is generally considered highly reliable, with average unplanned outage durations (SAIDI) below 13 minutes in recent years according to the Federal Network Agency. Residents were advised to check household fuses first and to report grid-level outages through the operator's dedicated hotline rather than emergency services. The article was auto-generated from the operator's outage information portal and updated as of 13:28 on the same day.

Source: News.de – https://www.news.de/lokales/859262305/stromausfall-boernsen-aktuell-schleswig-holstein-netz-ag-stoerung-heute/1/</description>
</item>
<item>
<title>Local power outage in Mühldorfer Hart caused by a distribution network fault.</title>
<link>https://ic-cyber.ai/#incident-463</link>
<guid isPermaLink="false">ic-cyber-incident-463</guid>
<pubDate>Tue, 10 Nov 2026 12:50:01 GMT</pubDate>
<category>Outage</category>
<description>10 Nov 2026, 06:58 · Germany · Bayernwerk Netz GmbH

On 10 November 2026, a power outage affected the area around Max-Linie in Mühldorfer Hart, in the district of Mühldorf am Inn, Bavaria, Germany. The disruption was caused by a fault in the low-voltage distribution network operated by Bayernwerk Netz GmbH. The outage began at 06:58 local time and was expected to be resolved by 15:25 the same day. The affected area was limited to a radius of approximately one kilometre around the named location, corresponding to postal code 84539. Technicians from Bayernwerk Netz were dispatched to the site to address the fault. The article notes that such low-voltage faults are not uncommon in Germany and typically affect only a small number of households. No cyberattack, sabotage, or weather-related cause was indicated; the outage was attributed to a technical defect in the distribution grid. The information was generated from the operator's outage reporting portal and updated as of 13:31 on the same day.

Source: News.de – https://www.news.de/lokales/860176918/stromausfall-muehldorfer-hart-aktuell-bayernwerk-netz-gmbh-stoerung-heute/1/</description>
</item>
<item>
<title>Power outage hit roughly 1,200 households in Zwickau's northern districts for about 1.5 hours on Tuesday morning.</title>
<link>https://ic-cyber.ai/#incident-462</link>
<guid isPermaLink="false">ic-cyber-incident-462</guid>
<pubDate>Tue, 10 Nov 2026 12:19:59 GMT</pubDate>
<category>Outage</category>
<description>10 Nov 2026, 06:15 · Germany · Mitnetz, residents of Crossen and Oberrothenbach (Zwickau)

On the morning of Tuesday, 10 November 2026, approximately 1,200 households in the Zwickau districts of Crossen and Oberrothenbach lost electricity from 6:15 a.m. until shortly before 8:00 a.m. The local utility Mitnetz had not yet communicated a cause for the outage at the time of reporting. This was the second power outage in these two districts since 31 October 2026. No cyberattack, sabotage, or specific technical fault was identified; the cause remained unclear. The incident was reported by local broadcaster Radio Zwickau, which also included a statement from Mitnetz spokesperson Hagen Ruhma. No further details on the root cause or corrective measures were available at publication time.

Source: Radio Zwickau – https://www.radiozwickau.de/beitrag/stromausfall-im-zwickauer-norden-895697/</description>
</item>
<item>
<title>A steel plant in Turkey experienced an explosion producing a giant column of smoke.</title>
<link>https://ic-cyber.ai/#incident-460</link>
<guid isPermaLink="false">ic-cyber-incident-460</guid>
<pubDate>Tue, 10 Nov 2026 09:50:24 GMT</pubDate>
<category>Disruption</category>
<description>10 Nov 2026 · Turkey · unnamed steel plant in Turkey

A steel plant in Turkey was hit by an explosion that produced a giant column of smoke, as reported by Vietnamese news outlet Laodong.vn. The incident disrupted the physical operation of the industrial facility. No further details on the cause, casualties, or response were available from the headline alone.

Source: Laodong.vn – https://news.laodong.vn/video/cot-khoi-khong-lo-boc-len-sau-vu-no-nha-may-thep-o-tho-nhi-ky-1798004.ldo</description>
</item>
<item>
<title>A defective cable in a substation caused a 59-minute power outage affecting about 2,960 customers in Vorarlberg, Austria.</title>
<link>https://ic-cyber.ai/#incident-459</link>
<guid isPermaLink="false">ic-cyber-incident-459</guid>
<pubDate>Tue, 10 Nov 2026 06:50:05 GMT</pubDate>
<category>Outage</category>
<description>10 Nov 2026, 05:11 · Austria · Vorarlberg Netz, illwerke vkw

On the morning of November 10, 2026, a power outage affected parts of Schwarzach and Wolfurt in the Austrian state of Vorarlberg. At 5:11 AM, a protective trip occurred at the Hofsteig substation operated by Vorarlberg Netz. The cause was identified as a defective cable within the substation. Approximately 2,960 customers were affected by the supply interruption. Listeners of ORF Radio Vorarlberg reported the outage in the early morning hours. Upon inquiry, the energy supplier illwerke vkw confirmed that technicians were already on site and working to repair the damage. According to Johannes Hofer, the press spokesperson for Vorarlberg Netz, street lighting was functioning again by 6:10 AM and households were restored to power. The total duration of the outage was 59 minutes. No further details about the specific nature of the cable defect or any broader impact on the regional grid were provided. The incident was resolved through standard technical maintenance procedures without any indication of external interference or cyber involvement.

Source: vorarlberg.ORF.at – https://vorarlberg.orf.at/stories/3378872/</description>
</item>
<item>
<title>Cyberattacks exploited outdated software in connected refrigeration systems at supermarkets across at least 12 European countries.</title>
<link>https://ic-cyber.ai/#incident-456</link>
<guid isPermaLink="false">ic-cyber-incident-456</guid>
<pubDate>Mon, 09 Nov 2026 23:50:01 GMT</pubDate>
<category>IoT breach</category>
<category>Cyber</category>
<description>10 Nov 2026 · France, multiple European countries · Supermarkets (unnamed), blood banks

ENISA, the EU's cybersecurity agency, warned that connected home appliances could be next targets after cyberattacks hit supermarket refrigeration systems in at least 12 European countries during October and November 2026, with France the worst affected. The attacks exploited vulnerabilities in out-of-date software running on the connected refrigeration units, disrupting operations at supermarkets and blood banks. ENISA executive director Juhan Lepassaar stated that the incidents revealed operational gaps in how businesses classify and protect connected infrastructure, noting that many organisations treat cybersecurity through a traditional financial lens while leaving connected systems to maintenance teams with different priorities. The warning was issued alongside an ENISA report on the evolving threat landscape, which found that AI is acting as a force multiplier for both attackers and defenders, shrinking the time between vulnerability discovery and weaponisation to near zero. The report also noted that 57.3% of cyber incidents in 2025 were ideologically driven by geopolitical events, while 29.3% were financially motivated. ENISA called on member states to invest more in cybersecurity, address the skills shortage, and accelerate transposition of the NIS2 Directive into national law.

Source: Yahoo News Canada – https://ca.news.yahoo.com/ai-industrialising-cyberattacks-shrinking-time-145408345.html</description>
</item>
<item>
<title>Ongoing power outages across occupied Crimea after Ukrainian military strikes damaged main grid lines outside the peninsula.</title>
<link>https://ic-cyber.ai/#incident-440</link>
<guid isPermaLink="false">ic-cyber-incident-440</guid>
<pubDate>Mon, 09 Nov 2026 10:49:48 GMT</pubDate>
<category>Blackout</category>
<description>10 Nov 2026 · Ukraine (Crimea) · Krymenergo

As of 10 November 2026, the Russian-controlled utility Krymenergo reported that power supply restrictions were in effect across the entire Crimean peninsula. The operator stated that adherence to a scheduled rotation of outages and equitable distribution of available electricity was impossible at that time, as transmission lines and grid equipment were being disconnected on an ad hoc basis depending on the situation in each energy supply zone. In Sevastopol, Russian authorities announced a schedule of two hours of power followed by six hours of outage, and trolleybus service was suspended. Emergency outages hit five villages in the Rozdriine district in the morning, with restoration expected within three hours. Power cuts were also reported near Feodosia and in Yalta. Russian authorities attributed the crisis to accidents on the main transmission grid outside the peninsula following attacks by the Ukrainian Armed Forces. Since November 2026, some settlements in Crimea have received electricity for only a few hours per day or have experienced outages lasting more than a day.

Source: Mezha.net – https://mezha.net/jp/news/mezha-befec1f27279c868e290339f_krymenergo-adherence-to-blackout-schedules-in/</description>
</item>
<item>
<title>Hackers manipulated cooling and deep-freezing controls at a Swiss meat shop, spoiling stock and forcing closure.</title>
<link>https://ic-cyber.ai/#incident-408</link>
<guid isPermaLink="false">ic-cyber-incident-408</guid>
<pubDate>Sat, 07 Nov 2026 04:19:43 GMT</pubDate>
<category>OT cyberattack</category>
<category>Cyber</category>
<description>10 Nov 2026 · Switzerland · Lüthi's Fleischwaren (Köniz, Canton Bern)

The Köniz branch of Lüthi's Fleischwaren in Canton Bern, Switzerland, was forced to close until 20 November 2026 after hackers deliberately manipulated the control systems of its cooling and deep-freezing equipment. According to the company owner, temperatures in the freezers were raised to 50–70 degrees Celsius, causing the meat to be found in a state described as 'like cooked.' The incident is part of a broader wave of cyberattacks targeting supermarket and food-storage cooling systems across Europe. French Foreign Minister Jean-Noël Barrot attributed the first wave of attacks, which primarily targeted supermarkets, to the Iranian Revolutionary Guards. The more recent attacks from early November 2026 may involve a different actor, possibly the Russian military intelligence service GRU, according to initial findings. The attacks also targeted the cooling technology of the French blood donation service EFS, though no damage resulted there. The Lüthi incident highlights the vulnerability of industrial control systems in the food sector to cyber manipulation, with direct physical consequences for product safety and business continuity.

Source: NZZ – https://www.nzz.ch/pro/europa-steht-vor-zwei-besonders-gefaehrlichen-jahren-die-schweiz-kaempft-mit-dem-was-sie-hat-ld.10055190</description>
</item>
<item>
<title>Automated street lighting control system failure left half of Freising without street lights for about two hours.</title>
<link>https://ic-cyber.ai/#incident-469</link>
<guid isPermaLink="false">ic-cyber-incident-469</guid>
<pubDate>Tue, 10 Nov 2026 19:20:03 GMT</pubDate>
<category>Outage</category>
<description>09 Nov 2026, 16:30 · Germany · Stadtwerke Freising

On the evening of 9 November 2026, the automated street lighting control system of Stadtwerke Freising failed to activate the lights across roughly half the city west of the Isar river. The system incorrectly assumed the street lighting was already switched on, so the activation command was never executed. Employees noticed the failure around 16:30 while commuting home and alerted the on-call team. Remote troubleshooting attempts failed, and a crew had to travel to the affected substation to manually start the system. The outage lasted approximately two hours. Around 25 emergency calls were received before an automated message informed further callers. The system normally uses a twilight sensor rather than a fixed schedule to control lighting. By the following morning, the automatic shutdown function was working again, but Stadtwerke management announced enhanced monitoring for the coming days, with staff on site until the automation could be confirmed fully reliable. The company is investigating the transmission paths of the switching command and the hardware to determine the exact root cause. CEO Dominik Schwegler called the two-hour duration unusually long but praised the team's rapid on-site response.

Source: oe24 – https://www.oe24.at/a/ganze-stadt-finster-kurioses-laternen-blackout-900132008</description>
</item>
<item>
<title>Maersk Cincinnati struck and collapsed a ship-to-shore crane at Yantian port during berthing on November 9.</title>
<link>https://ic-cyber.ai/#incident-461</link>
<guid isPermaLink="false">ic-cyber-incident-461</guid>
<pubDate>Tue, 10 Nov 2026 10:19:48 GMT</pubDate>
<category>Disruption</category>
<description>09 Nov 2026 · China · Maersk, Yantian Port (Shenzhen)

On November 9, 2026, the Maersk Cincinnati, a 366-metre, 15,516 TEU containership built in 2024 and Singapore-flagged, struck a ship-to-shore crane at berth 12 of Yantian port in Shenzhen, China, while berthing. The crane collapsed towards the container yard, with sections of the structure lying alongside the vessel. The incident occurred around noon local time. Strong winds may have contributed, as Shenzhen's meteorological authorities had issued a monsoon warning at 6:10 am that morning, forecasting gusts of force 8 or above for Yantian and surrounding waters. Chinese shipping sources pointed to sudden gusts during the berthing manoeuvre, though the exact cause of the collision had not been established. No injuries were confirmed, and the extent of damage and any disruption to terminal operations remained unclear. The vessel was operating voyage 645W on the Gemini Cooperation's Asia-North Europe NE3 service and was scheduled to depart for Ningbo and Shanghai on November 11. Neither Maersk nor the terminal operator provided a detailed account. A similar crane collapse occurred at Yantian in September 2024 involving the MSC Riona.

Source: ports) – https://splash247.com/maersk-boxship-knocks-down-crane-at-yantian/</description>
</item>
<item>
<title>Ukrainian drones struck Kirishi refinery while Russian attacks left 850,000 Ukrainians without electricity.</title>
<link>https://ic-cyber.ai/#incident-457</link>
<guid isPermaLink="false">ic-cyber-incident-457</guid>
<pubDate>Tue, 10 Nov 2026 03:50:04 GMT</pubDate>
<category>Disruption</category>
<description>09 Nov 2026 · Russia, Ukraine · Rosneft, Ukrainian power plants (14 out of service, 8 damaged)

On 9 November 2026, Ukrainian drones attacked the Kirishi oil refinery in Russia's Leningrad region, causing a fire at a facility that supplies approximately half of Saint Petersburg's gasoline consumption. The attack was part of a broader campaign in which Ukrainian drones struck ten oil complexes over eleven days. In response, Rosneft imposed a 30-liter refueling limit at urban gas stations and 50 liters at highway stations. Simultaneously, Russian forces continued bombardment of Ukrainian power infrastructure, launching over 130 attacks on the energy sector in the preceding week. At least 14 of Ukraine's 38 power plants under Kyiv's control were out of service and 8 more were damaged, leaving nearly 850,000 people without electricity across half the country's regions. The escalation occurred on the eve of resumed peace talks in Abu Dhabi between Moscow, Kyiv, and Washington, which had been stalled for nine months. The fuel supply disruptions also cast doubt on Russia's ability to meet diesel export volumes promised under a separate agreement with the United States. No cyberattack was involved; all disruptions resulted from physical military strikes on civilian energy infrastructure.

Source: Diari ARA – https://en.ara.cat/international/russia-and-ukraine-intensify-attacks-against-energy-before-resuming-peace-talks_1_5905267.html</description>
</item>
<item>
<title>A hack on SEGA's servers left Japanese arcade machines inoperable for approximately one week.</title>
<link>https://ic-cyber.ai/#incident-455</link>
<guid isPermaLink="false">ic-cyber-incident-455</guid>
<pubDate>Mon, 09 Nov 2026 23:49:55 GMT</pubDate>
<category>IoT breach</category>
<category>Cyber</category>
<description>09 Nov 2026 · Japan · SEGA

A cyberattack on SEGA's backend servers rendered Japanese arcade machines inoperable for approximately one week. The headline indicates the hack targeted SEGA's server infrastructure, which caused the connected arcade devices to stop functioning, effectively leaving arcades dark. No further details on the attack vector, data exfiltration, or remediation are available from the headline alone.

Source: TweakTown – https://www.tweaktown.com/rss/click/news/114567/?c=news-mf</description>
</item>
<item>
<title>Power outage affected residents in Stamsried, Landkreis Cham, from 10:51 to approximately 15:10 on 9 November 2026.</title>
<link>https://ic-cyber.ai/#incident-454</link>
<guid isPermaLink="false">ic-cyber-incident-454</guid>
<pubDate>Mon, 09 Nov 2026 21:19:55 GMT</pubDate>
<category>Outage</category>
<description>09 Nov 2026, 10:51 · Germany · Bayernwerk Netz GmbH

On 9 November 2026, a power grid fault caused electricity supply interruptions in the area around Hollertau in Freundelsdorf (postal code 93491), Landkreis Cham, Bavaria, Germany. The disruption began at 10:51 local time and was expected to be resolved by 15:10 the same day. The responsible grid operator, Bayernwerk Netz GmbH, dispatched technicians to the site to address the fault. The article, generated from the operator's outage reporting portal, noted that the German power grid is generally highly reliable, with average unplanned outage durations (SAIDI) below 13 minutes in recent years according to the Federal Network Agency. No cause for the specific fault was identified in the article, and no cyberattack or external sabotage was indicated. The incident appears to have been a routine technical failure in the local distribution grid, resolved within a few hours.

Source: News.de – https://www.news.de/lokales/856415547/stromausfall-stamsried-aktuell-bayernwerk-netz-gmbh-stoerung-heute/1/</description>
</item>
<item>
<title>Low-voltage power grid disruption in Mitterskirchen, Bavaria, affecting districts Lidorf and Holzham.</title>
<link>https://ic-cyber.ai/#incident-453</link>
<guid isPermaLink="false">ic-cyber-incident-453</guid>
<pubDate>Mon, 09 Nov 2026 20:49:51 GMT</pubDate>
<category>Outage</category>
<description>09 Nov 2026, 07:28 · Germany · Bayernwerk Netz GmbH

On 9 November 2026, a power grid disruption occurred in the municipality of Mitterskirchen in the Rottal-Inn district of Bavaria, Germany. The outage affected the Ortsteile (districts) of Lidorf and Holzham, with disruptions reported within approximately one kilometre of each location. The grid operator responsible for the area is Bayernwerk Netz GmbH. Technicians were dispatched to two sites to address the issue. The disruption began at 07:28 local time and was expected to last until approximately 23:20 the same day. The article describes the incident as a low-voltage disruption (Niederspannungsstörung), a common type of temporary power supply interruption in German distribution networks. No cyberattack or external cause was indicated; the failure appears to be a routine technical fault in the local distribution grid. The article was auto-generated from the grid operator's outage information portal and updated at 21:29 on the same day.

Source: News.de – https://www.news.de/lokales/856457160/stromausfall-mitterskirchen-aktuell-bayernwerk-netz-gmbh-stoerung-heute/1/</description>
</item>
<item>
<title>Saudi East-West oil pipeline targeted in Medina region, sparking a limited fire with no operational impact.</title>
<link>https://ic-cyber.ai/#incident-452</link>
<guid isPermaLink="false">ic-cyber-incident-452</guid>
<pubDate>Mon, 09 Nov 2026 17:19:59 GMT</pubDate>
<category>Disruption</category>
<description>09 Nov 2026 · Saudi Arabia · Saudi East-West oil pipeline (Petroline)

On Monday, 9 November 2026, Saudi Arabia's East-West oil pipeline (Petroline) was targeted in the western Medina region, sparking a limited fire. A Saudi Energy Ministry official confirmed the incident in a statement carried by the state-run Saudi Press Agency. No injuries or fatalities were reported, and pipeline operations were not affected. Emergency response teams and specialized technical crews immediately began work following the incident, taking measures to secure the site. No further details were provided regarding the method of the attack or the responsible party. The incident occurred amid continued military escalation between the Saudi-led coalition supporting Yemen's internationally recognized government and the Houthi group, which has launched repeated missile and drone attacks toward Saudi territory. The East-West pipeline is a major oil transport artery running from the Eastern Province to the Red Sea coast, and its integrity is critical to Saudi Arabia's oil export capacity. The limited nature of the fire and the absence of operational disruption suggest the attack did not cause significant structural damage to the pipeline infrastructure.

Source: Anadolu Ajansı – https://aa.com.tr/en/middle-east/east-west-oil-pipeline-targeted-in-saudi-arabia-s-medina-region-sparking-fire-ministry-official/4117773</description>
</item>
<item>
<title>Power outage in South Tyrol affected ~106,000 customers after a fault at the Reschenbrücke substation during internal grid work.</title>
<link>https://ic-cyber.ai/#incident-450</link>
<guid isPermaLink="false">ic-cyber-incident-450</guid>
<pubDate>Mon, 09 Nov 2026 14:49:57 GMT</pubDate>
<category>Outage</category>
<description>09 Nov 2026, 15:15 · Italy · Edyna, ~106,000 customers in South Tyrol

On Monday afternoon, 9 November 2026, a large-scale power outage struck multiple areas of South Tyrol, Italy, including several districts of Bolzano, Meran, and other municipalities. The outage was caused by a fault in a high-voltage installation at the Reschenbrücke substation, which occurred during internal work on the grid. Protection systems automatically reacted and interrupted the power supply for approximately five minutes. Around 106,000 customers were affected according to grid operator Edyna. The disruption caused traffic problems as multiple traffic light systems went offline, and the fire brigade had to respond to several incidents, including people trapped in elevators. An alarm was triggered at the Palais Widmann, the seat of the regional government, prompting occupants to evacuate the building. At the Bolzano hospital, a battery overheated in the basement, producing smoke, which the fire brigade quickly brought under control. Although widespread hacker attacks had raised public fears that the outage might be cyber-related, Edyna explicitly ruled out any connection to a cyberattack. Power was restored within minutes of the initial disruption.

Source: Südtirol News – https://www.suedtirolnews.it/chronik/stromausfall-legt-teile-bozens-lahm</description>
</item>
<item>
<title>Power outage in southwestern Saitama Prefecture, Japan, affecting approximately 900 households across six areas.</title>
<link>https://ic-cyber.ai/#incident-449</link>
<guid isPermaLink="false">ic-cyber-incident-449</guid>
<pubDate>Mon, 09 Nov 2026 13:50:19 GMT</pubDate>
<category>Blackout</category>
<description>09 Nov 2026 · Japan · Tokyo Electric Power Company Grid (TEPCO Power Grid)

On November 9, 2026, a power outage occurred in the southwestern part of Saitama Prefecture, Japan, affecting approximately 900 households across six areas. According to Tokyo Electric Power Company Grid (TEPCO Power Grid), the outage was confirmed as of 9:44 PM local time. The article does not specify the cause of the outage, whether it was due to a technical failure, weather, equipment malfunction, or other factors. No information about the duration or resolution of the outage is provided. The incident appears to be a localized grid disruption rather than a widespread regional blackout. No cyberattack or sabotage has been indicated in the report.

Source: 埼玉新聞 – https://www.saitama-np.co.jp/articles/222401</description>
</item>
<item>
<title>Short-term power grid disturbance in Kollersried, Hemau, affecting a one-kilometre radius from 07:19 to 15:25 on 9 November 2026.</title>
<link>https://ic-cyber.ai/#incident-448</link>
<guid isPermaLink="false">ic-cyber-incident-448</guid>
<pubDate>Mon, 09 Nov 2026 13:50:12 GMT</pubDate>
<category>Outage</category>
<description>09 Nov 2026, 07:19 · Germany · Bayernwerk Netz GmbH

A short-term power grid disturbance (Kurzzeitige Netzstörung) affected the area around Hammermühlweg in the district of Kollersried, Hemau, in the Landkreis Regensburg, Bavaria, Germany. The fault began at 07:19 on 9 November 2026 and was expected to be resolved by 15:25 the same day. The responsible grid operator, Bayernwerk Netz GmbH, recorded the disturbance and dispatched technicians to the site for repair. The affected area was approximately a one-kilometre radius around the named location. The article, auto-generated from the operator's disturbance reporting portal, noted that such short-term grid disturbances are not uncommon in Germany, where households typically experience only a few minutes of power loss per year. The piece also provided guidance to residents on how to report power outages to the correct operator and advised that a power interruption is not always an emergency requiring police or fire brigade contact. No specific cause for the disturbance was identified in the article, and no cyberattack, sabotage, or weather event was indicated. The incident appears to have been a routine technical fault in the local distribution network, resolved within the same day.

Source: News.de – https://www.news.de/lokales/856649934/stromausfall-hemau-aktuell-bayernwerk-netz-gmbh-stoerung-heute/1/</description>
</item>
<item>
<title>Two electrical transformers burst in Mahshahr, causing a partial power outage in the industrial zone.</title>
<link>https://ic-cyber.ai/#incident-447</link>
<guid isPermaLink="false">ic-cyber-incident-447</guid>
<pubDate>Mon, 09 Nov 2026 13:20:17 GMT</pubDate>
<category>Outage</category>
<description>09 Nov 2026 · Iran · Mahshahr industrial zone

Following US military strikes on southern Iran, a projectile impact was reported on Qeshm Island in Hormozgan Province, the only confirmed strike location in the province. Explosions were heard in maritime areas near Qeshm and Bandar Abbas, which Iranian authorities attributed to security measures to maintain control over the Strait of Hormuz rather than direct attacks on those cities. Separately, in the port city of Mahshahr in Khuzestan Province, residents reported explosion-like sounds that initially sparked speculation about a possible attack. The sounds coincided with a power outage affecting part of the Mahshahr industrial zone. Khuzestan Deputy Governor Valiollah Hayati clarified that the sounds were caused by the bursting of two electrical transformers, not an attack. The power disruption affected industrial operations in the Mahshahr area. The incident occurred amid heightened security tensions in southern Iran following the US military action. No further details about the extent of the power outage or its impact on specific industrial facilities were immediately available at the time of reporting.

Source: WANA News Agency – https://wanaen.com/qeshm-strike-explosions-near-bandar-abbas-power-outage-in-mahshahr/</description>
</item>
<item>
<title>KEPCO underground cable damaged during demolition, causing a 70-minute power outage for 200 households in Sokcho.</title>
<link>https://ic-cyber.ai/#incident-443</link>
<guid isPermaLink="false">ic-cyber-incident-443</guid>
<pubDate>Mon, 09 Nov 2026 11:50:07 GMT</pubDate>
<category>Outage</category>
<description>09 Nov 2026, 13:00 · South Korea · KEPCO (Korea Electric Power Corporation)

On 9 November 2026, a power cable belonging to Korea Electric Power Corporation (KEPCO) was accidentally damaged during building demolition work in the Seorak-dong area of Sokcho, Gangwon Province, South Korea. The incident caused a temporary power outage affecting approximately 200 households and nearby facilities, beginning around 1:00 p.m. local time. KEPCO's Gangwon Headquarters confirmed the outage and restored electricity approximately 70 minutes later, at around 2:10 p.m. No casualties or additional damage were reported. The damaged cable was part of an underground line buried in the ground rather than a utility-pole line. KEPCO believes a demolition worker mistakenly identified the KEPCO cable as building-related wiring and damaged it during the work. Because no utility poles were present in the section where the underground line ran, it was reportedly difficult to visually distinguish the ownership of the wires at the site. KEPCO is investigating the circumstances of the incident, including the work process and how the cable was damaged. The event highlights the importance of checking the location and path of buried utilities before excavation or demolition work, as underground power cables are difficult to identify from the surface.

Source: 재경일보 – https://news.jkn.co.kr/editions/english/post/1081100</description>
</item>
<item>
<title>Power outage in Kandern, Germany since Monday morning; medium-voltage grid affected, cause unknown, repair in progress.</title>
<link>https://ic-cyber.ai/#incident-441</link>
<guid isPermaLink="false">ic-cyber-incident-441</guid>
<pubDate>Mon, 09 Nov 2026 10:49:52 GMT</pubDate>
<category>Outage</category>
<description>09 Nov 2026, 08:00 · Germany · Naturenergie Netze

Since Monday morning around 8:00, parts of the town of Kandern in Baden-Württemberg, Germany, have been without electricity. The medium-voltage distribution grid (Mittelspannungsnetz) is affected, and the cause of the outage remains unknown as of the time of reporting. The grid operator Naturenergie Netze has deployed technicians both on-site and at its joint control center (Verbundleitstelle) to restore power to affected customers as quickly as possible. Fault-finding and repair measures have been initiated, with a cable measurement vehicle (Kabelmesswagen) deployed to locate the exact point of failure. In some areas, temporary generators (Aggregate) have been set up to maintain power supply. The company stated that full restoration of the power supply is expected to take additional time. No information on the root cause of the disruption was available at the time of publication. The incident appears to be a technical failure of the medium-voltage grid infrastructure rather than a cyberattack or external sabotage, though the cause has not been officially determined.

Source: Schwarzwälder Bote – https://www.schwarzwaelder-bote.de/lokales/weil-am-rhein-rebland/stromausfall-in-kandern-teile-der-stadt-seit-montagmorgen-ohne-elektrizitaet-ursache-unklar-79680678.html</description>
</item>
<item>
<title>A cyberattack is reported to threaten the construction of the Austria–Italy Brenner Base Tunnel.</title>
<link>https://ic-cyber.ai/#incident-438</link>
<guid isPermaLink="false">ic-cyber-incident-438</guid>
<pubDate>Mon, 09 Nov 2026 09:19:46 GMT</pubDate>
<category>Disruption</category>
<category>Cyber</category>
<description>09 Nov 2026 · Austria, Italy · Brenner Base Tunnel construction

According to the Odessa Journal, a cyberattack is threatening the construction of the Brenner Base Tunnel, a major infrastructure project connecting Austria and Italy. The headline indicates that the attack poses a risk to the ongoing construction work. No further details on the nature of the attack, specific systems targeted, or operational impact are available from the headline alone.

Source: Odessa Journal – https://odessa-journal.com/austriaitaly-brenner-tunnel-project-faces-cybersecurity-threat</description>
</item>
<item>
<title>France blamed Iran's IRGC for cyberattacks on 700 grocery refrigeration systems and hydroelectric facilities, causing fires.</title>
<link>https://ic-cyber.ai/#incident-428</link>
<guid isPermaLink="false">ic-cyber-incident-428</guid>
<pubDate>Sun, 08 Nov 2026 09:19:28 GMT</pubDate>
<category>OT cyberattack</category>
<category>Cyber</category>
<description>09 Nov 2026 · France · French grocery stores (approx. 700), butchers, slaughterhouse, cooperative food-processing plants, small hydroelectric facilities (Schneider Electric equipment)

French authorities on November 9, 2026, published a report attributing cyberattacks on refrigeration systems at approximately 700 French grocery stores to Shahid Kaveh, a cyber unit of Iran's Islamic Revolutionary Guard Corps. The attacks, which occurred in October 2026, caused extensive food losses and at least 15 fires. Victims included large retail chains, butchers, a slaughterhouse, and cooperative food-processing plants. ANSSI also identified simultaneous targeting of Schneider Electric equipment at several small hydroelectric facilities, though disruption there was described as moderate. The report was issued by France's Cyber Crisis Coordination Centre, combining ANSSI, military cyber command, and intelligence services DGSE and DGSI. Evidence linking the attacks to Shahid Kaveh included Farsi text artefacts, tooling, and reconnaissance infrastructure on other industrial equipment. The Paris Prosecutor's Office opened a judicial investigation and requested international arrest warrants for the unit's head and deputies. A second wave of similar attacks hit businesses in at least 11 European countries in early November, including British meat suppliers and three sites of France's national blood service. France summoned Iran's ambassador and announced it would pursue European sanctions. U.S. agencies had previously identified Shahid Kaveh as the CyberAv3ngers group linked to OT attacks on U.S. water utilities.

Source: The Record – https://therecord.media/france-blames-iran-for-fridge-cyberattacks</description>
</item>
<item>
<title>Russian drone strikes on Ukrainian substations caused emergency blackouts affecting over 600,000 residents across multiple regions.</title>
<link>https://ic-cyber.ai/#incident-425</link>
<guid isPermaLink="false">ic-cyber-incident-425</guid>
<pubDate>Sun, 08 Nov 2026 07:49:35 GMT</pubDate>
<category>Blackout</category>
<description>09 Nov 2026 · Ukraine · Ukrainian National Power Company, DTEK, residents of Kharkiv, Sumy, Poltava, Kyiv, Dnipropetrovsk regions

On November 8–9, 2026, the Russian Ministry of Defense reported that Russian forces conducted drone strikes on Ukrainian military-industrial enterprises, energy infrastructure, drone production and storage sites, and maritime vessels. Four substations were hit in Kyiv, Dnipropetrovsk, Cherkasy, and Vinnytsia regions, along with a drone assembly facility in Poltava region. A cargo ship carrying Ukrainian military equipment was struck in the Black Sea near Odesa. The Ukrainian National Power Company reported emergency power outages in Kharkiv, Sumy, and Poltava regions. Private energy company DTEK confirmed emergency blackouts in Kyiv city and Kyiv region. Over 600,000 residents in Pavlograd and other areas of Dnipropetrovsk region lost power. Ukrainian air forces reported that from 18:00 on November 8, Russia launched 317 attack and decoy drones; by 08:00 on November 9, 271 were shot down or suppressed, with 31 impact sites and 9 debris fall locations recorded. The air defense response was still ongoing at the time of reporting.

Source: 華僑報 – http://www.vakiodaily.com/news/view/id/722010</description>
</item>
<item>
<title>Multi-day power outage in Wainikoro, Labasa, Fiji caused by a damaged electricity pole.</title>
<link>https://ic-cyber.ai/#incident-458</link>
<guid isPermaLink="false">ic-cyber-incident-458</guid>
<pubDate>Tue, 10 Nov 2026 05:49:57 GMT</pubDate>
<category>Outage</category>
<description>08 Nov 2026, 00:00 · Fiji · Energy Fiji Limited (EFL)

Residents in several areas of Wainikoro, Labasa, Fiji, have been without electricity since midnight on Sunday, 8 November 2026, with the outage continuing into Tuesday. Advisory Councillor Kamal Singh identified the affected areas as Vunika, Coqeloa, Vaqa, Kurukuru, Nubu, and Lagalaga. The cause was identified as an issue involving an electricity pole in the Vunika area. Singh contacted Energy Fiji Limited (EFL) on Sunday and was informed that EFL workers were waiting for machinery to arrive before repair works could begin. Repairs were delayed further because Monday was a public holiday, with work scheduled to commence on Tuesday. The prolonged outage has raised significant concerns among residents, particularly regarding food spoilage in freezers. While some residents have access to solar power, others are struggling to preserve their food, which may need to be discarded if electricity is not restored promptly. Singh urged EFL to prioritise the repairs and restore power to the affected communities as soon as possible. Questions were sent to EFL regarding the incident.

Source: Fijivillage – https://www.fijivillage.com/a/wainikoro-residents-without-power-since-sunday-raising-concerns-over-food-spoilage-f838a0/</description>
</item>
<item>
<title>Fire at Mayfair Substation in Johannesburg cut power to a hospital, broadcaster, and thousands of homes.</title>
<link>https://ic-cyber.ai/#incident-439</link>
<guid isPermaLink="false">ic-cyber-incident-439</guid>
<pubDate>Mon, 09 Nov 2026 09:49:45 GMT</pubDate>
<category>Blackout</category>
<description>08 Nov 2026 · South Africa · City Power, SABC, Garden City Hospital, residential and business customers in Mayfair and surrounding areas

A fire damaged the Mayfair Substation in Johannesburg, South Africa, early on Sunday morning, 8 November 2026, causing a significant power outage. City Power, the local utility, confirmed that the blaze disrupted electricity supply to Garden City Hospital, the SABC broadcaster in Auckland Park, and thousands of residential and business customers across multiple areas including Mayfair, Crown, Vrededorp, Brixton, Crosby, Pageview, Homestead Park, and Amalgam. Engineers worked through the night to restore supply, but heavy rain and torrential downpours slowed their progress. Technical teams began by cleaning carbon residue from damaged equipment, then assessed the condition of seven cables and tested the transformer and electrical panels. City Power considered rerouting supply through an alternative route but ruled it out due to the risk of overloading remaining infrastructure and causing a second outage. The utility opted for a safer, gradual restoration approach, prioritising safety and network stability. As of Monday, restoration had not yet begun and was expected to proceed only after investigations, repairs, and safety testing were complete. City Power apologised to affected customers for the significant inconvenience.

Source: The Citizen – https://www.citizen.co.za/news/mayfair-substation-fire-here-are-the-areas-affected-and-when-power-is-expected-back/</description>
</item>
<item>
<title>Cyberattack on supermarket refrigeration controllers in Belgium, Luxembourg, Sweden, and Ireland caused food losses worth millions of euros.</title>
<link>https://ic-cyber.ai/#incident-435</link>
<guid isPermaLink="false">ic-cyber-incident-435</guid>
<pubDate>Sun, 08 Nov 2026 23:49:44 GMT</pubDate>
<category>IoT breach</category>
<category>Cyber</category>
<description>08 Nov 2026 · Belgium, Luxembourg, Sweden, Ireland · Delhaize, Carrefour, ICA, Coop, SuperValu

A new wave of cyberattacks targeted refrigeration control systems in supermarkets across Belgium, Luxembourg, Sweden, and Ireland, causing food losses estimated at several million euros. In Belgium and Luxembourg, approximately 40 Delhaize stores reported a nighttime 'computer incident,' with one branch in Hoeilaart losing products worth 100,000 euros, not counting losses from keeping the store closed. Carrefour confirmed that only 15 of its Belgian stores were affected. In Sweden, ICA and Coop stores experienced disruptions to their cooling equipment; one ICA store reported freezers set to 50 degrees Celsius, and a location in Sjöbo confirmed its systems were hacked overnight. Coop stated that seven of its 800 stores were affected and that the situation was contained and under control. In Ireland, SuperValu reported 13 impacted stores. Security expert David Pereira explained that the attack targeted the controllers supervising and regulating refrigeration systems, which had web panels exposed to the internet, default passwords, and outdated unpatched firmware. The incident occurred almost three weeks after a similar attack on hundreds of French supermarkets. No connection between the two waves has been confirmed, and the attacker remains unidentified.

Source: G5noticias – https://g5noticias.cl/2026/11/08/ciberataque-contra-sistemas-de-refrigeracion-afecta-a-supermercados-europeos-expertos-explican-fenomeno-y-que-hacer-en-chile-para-prevenirlo/</description>
</item>
</channel>
</rss>
