Russian security researchers - SCADA Strangelove team - have published a list of ICS/SCADA manufacturers that put their clients at risk by providing equipment with weak default access credentials.
Cisco, the biggest supplier of networking equipment in the world, has managed to ship servers for seven entire weeks without noticing that they had a different default password for the admin account.
Much-talked-of Heartbleed bug of open-source OpenSSL cryptography library has been found in ABB Relion 650 series IEDs. Care about this if your IED firmware revision is 1.3.0. Word has been spread by ICS-CERT (Industrial Control Systems Cyber Emergency Response Team).