SEV3 — ElevatedCLOSEDCyberUnverified46d ago

ScadaBR Vulnerability Signals - Duplicate Coverage

Multiple high-severity signals detected regarding ScadaBR vulnerabilities across US metropolitan areas including Dallas, Colorado Springs, Des Moines, Albuquerque, and Memphis. However, this appears to be the same vulnerability cluster already covered under existing incident 'Critical ScadaBR Vulnerabilities Detected Across Multiple US Metro Areas.' No new operational developments or escalation observed beyond previously identified industrial control system exposures.

Impact Summary

Domain

Cyber

Region

United States, Germany

Opened By

watchkeeper

May 26, 2026, 02:00 AM UTC

Validated By

auto

May 26, 2026, 02:00 AM UTC

Event Cluster

198 events

OVIX Score

10.0

Closed

master(master-relevance-cleanup)

Jun 2, 2026, 03:33 PM UTC

Timeline13

⚠

Incident openedby watchkeeperMay 26, 2026, 02:00 AM UTC

Declared from 6 signals. OVIX 10. News 1. BPO 3. High-confidence (auto).

✓

Severity validatedby autoMay 26, 2026, 02:00 AM UTC

Auto-validated: SEV3 per policy.

✎

Note addedby watchkeeperMay 26, 2026, 02:30 AM UTC

Merged new cluster (7 signals, OVIX 10) — same domain/region, >=3 shared title words, active <24h.

✎

Note addedby watchkeeperMay 26, 2026, 10:30 PM UTC

Merged new cluster (7 signals, OVIX 10) — same domain/region, >=3 shared title words, active <24h.

✎

Note addedby watchkeeperMay 26, 2026, 11:00 PM UTC

Merged new cluster (7 signals, OVIX 10) — same domain/region, >=3 shared title words, active <24h.

✎

Note addedby watchkeeperMay 27, 2026, 07:00 PM UTC

Merged new cluster (5 signals, OVIX 10) — same domain/region, >=3 shared title words, active <24h.

✎

Note addedby watchkeeperMay 27, 2026, 07:30 PM UTC

Merged new cluster (5 signals, OVIX 10) — same domain/region, >=3 shared title words, active <24h.

✎

Note addedby watchkeeperMay 28, 2026, 01:00 AM UTC

Merged new cluster (4 signals, OVIX 10) — same domain/region, >=3 shared title words, active <24h.

✎

Note addedby watchkeeperMay 28, 2026, 01:30 AM UTC

Merged new cluster (4 signals, OVIX 10) — same domain/region, >=3 shared title words, active <24h.

↻

Revalidatedby watchkeeperMay 28, 2026, 02:30 AM UTC

Revalidated: 3 new related signal(s). Next reval in 48h.

↻

Revalidatedby watchkeeperMay 30, 2026, 02:30 AM UTC

Revalidated: 2 new related signal(s). Next reval in 48h.

↻

Revalidatedby watchkeeperJun 1, 2026, 02:30 AM UTC

Revalidated: 8 new related signal(s). Next reval in 48h.

✖

Incident closedby masterJun 2, 2026, 03:33 PM UTC

Bulk-closed in master-relevance-cleanup (2026-06-02): rebuilding incident board clean per INCIDENT-RELEVANCE-SPEC. Most open incidents were non-WFM cyber CVE noise or No-BPO-Impact weather. Fixed Watchkeeper/scout will re-declare only genuinely relevant incidents.

Evidence / Why this?

Traced to source — read-only

Evidence is not yet available for this incident. Older incidents predate the traceability layer; newly declared incidents will show why they were declared, why their severity was set, geo provenance, and their sources here.

Related Signals20

Affected Regions

DfwColorado SpringsDes MoinesAlbuquerqueMemphisUS