Vulnerable platform used in power plants enables attackers to run malicious code on user browsers

Otorio’s researchers discovered a vulnerability that, if exploited, could enable attackers to run client-side code on client browsers and trick users to provide their credentials to threat actors.