CRITICALAdvisoryApr 18, 2026
Action required
Immediately inventory all OT/ICS assets in water treatment environments. Hunt for ZionSiphon IOCs and suspicious geolocation checks or file validation logic in network traffic. Isolate any infected systems and escalate to facility operators and CISA.
Affected products
Darktrace
Linked articles