#otsecurity — Public Fediverse posts

📰 CISA warns of XSS flaw in Johnson Controls Metasys ICS (CVE-2026-34491)

CISA warns of a high-severity XSS flaw (CVE-2026-34491) in Johnson Controls Metasys ICS. The bug allows low-privilege users to hijack admin sessions. Affects versions 12-15. Patch now! #ICS #OTsecurity #CISA #Vulnerability

🔗 https://cyber.netsecops.io/articles/cisa-warns-of-xss-flaw-in-johnson-controls-metasys-building-automation-system/?utm_source=mastodon&utm_medium=social&utm_campaign=daily

👋 Meet Claire, the industry's first CPS-native AI security agent. Designed to help security teams work smarter, Claire delivers AI-powered insights, simplifies complex investigations, and helps organizations protect their #OT, #IoT, #IoMT, and other cyber-physical environments with greater speed and confidence.

💡 Learn more: https://claroty.com/blog/how-claroty-claire-brings-ai-powered-cybersecurity-to-cyber-physical-systems

#Cybersecurity #ArtificialIntelligence #AI #OTSecurity #CriticalInfrastructure #CPS #ClarotyClaire

👋 Meet Claire, the industry's first CPS-native AI security agent. Designed to help security teams work smarter, Claire delivers AI-powered insights, simplifies complex investigations, and helps organizations protect their #OT, #IoT, #IoMT, and other cyber-physical environments with greater speed and confidence.

💡 Learn more: https://claroty.com/blog/how-claroty-claire-brings-ai-powered-cybersecurity-to-cyber-physical-systems

#Cybersecurity #ArtificialIntelligence #AI #OTSecurity #CriticalInfrastructure #CPS #ClarotyClaire

Nation-state attackers didn't need zero-days to disrupt 30+ Minnesota water systems. They needed exposed PLCs and weak security. My latest article explains why this should concern every security leader. https://jimguckin.com/2026/08/05/the-faucet-the-plc-and-the-nation-state/ #CyberSecurity #OTSecurity

Nation-state attackers didn't need zero-days to disrupt 30+ Minnesota water systems. They needed exposed PLCs and weak security. My latest article explains why this should concern every security leader. https://jimguckin.com/2026/08/05/the-faucet-the-plc-and-the-nation-state/ #CyberSecurity #OTSecurity

🚨 SIGINT // Cybersecurity Watch — 2026-08-04
Suspected Iranian hackers expand coordinated OT attacks on US water utilities to 7+ states, forcing manual control switches.
https://www.securityweek.com/us-water-cyberattacks-extend-beyond-minnesota-to-at-least-6-other-states/
#ICS #OTSecurity #CriticalInfrastructure #Cybersecurity

Honeywell: 46 CVEs, 0 exploited in KEV, yet 100% unpatched. Max CVSS 9.9. Trust Score: D. OT risk is real—patch now. #Honeywell #OTsecurity #infosec

https://www.valtersit.com/vendors/honeywell/

📰 Manufacturing Sector Faces Precise, Targeted Attacks, SonicWall Reports

SonicWall report: Manufacturing faces precise, targeted attacks on OT/IT convergence points. The sector sees the highest rate of SCADA attacks and continued exploitation of old vulnerabilities like Hikvision's camera flaw. #ICS #OTsecurity #Manufactu...

🌐 cyber[.]netsecops[.]io

🔗 https://cyber.netsecops.io/articles/manufacturing-sector-hit-by-precise-targeted-cyberattacks-sonicwall-reports/?ut…

🚨 SIGINT // Cybersecurity Watch — 2026-07-30
Dozens of Minnesota water utilities hit in coordinated OT attacks, exposing critical infrastructure risks.
https://www.securityweek.com/dozens-of-minnesota-water-utilities-targeted-in-coordinated-ot-attacks/
#ICS #OTSecurity #CriticalInfrastructure #Cybersecurity

🆕 A coordinated cyberattack targeting 30 Minnesota water systems underscores the growing cybersecurity risks facing water utilities and other critical infrastructure operators.

The incident highlights how limited funding, fragmented security programs, and a lack of OT and CPS cybersecurity resources can increase operational risk and threaten the delivery of essential services.

👉 Read the analysis: https://claroty.com/blog/minnesota-water-cyberattack-highlights-uss-under-resourced-fragmented-critical-infrastructure-systems

#WaterSecurity #CriticalInfrastructure #OTSecurity #CPSecurity #CyberResilience #CyberSecurity

🆕 A coordinated cyberattack targeting 30 Minnesota water systems underscores the growing cybersecurity risks facing water utilities and other critical infrastructure operators.

The incident highlights how limited funding, fragmented security programs, and a lack of OT and CPS cybersecurity resources can increase operational risk and threaten the delivery of essential services.

👉 Read the analysis: https://claroty.com/blog/minnesota-water-cyberattack-highlights-uss-under-resourced-fragmented-critical-infrastructure-systems

#WaterSecurity #CriticalInfrastructure #OTSecurity #CPSecurity #CyberResilience #CyberSecurity

AI is transforming #manufacturing, but without the right strategy, it can also introduce new cyber risk.

💡 On Nexus, former Pfizer Global Head of Automation Engineering James LaBonty explores how manufacturers can build an AI-powered cybersecurity strategy that strengthens cyber-physical systems (CPS) security while keeping operational resilience at the center of every decision.

📖 Read here: https://nexusconnect.io/articles/how-ai-fits-into-a-manufacturing-cps-security-strategy

#ManufacturingCybersecurity #CPSsecurity #OperationalResilience #IndustrialCybersecurity #ArtificialIntelligence #OTSecurity

AI is transforming #manufacturing, but without the right strategy, it can also introduce new cyber risk.

💡 On Nexus, former Pfizer Global Head of Automation Engineering James LaBonty explores how manufacturers can build an AI-powered cybersecurity strategy that strengthens cyber-physical systems (CPS) security while keeping operational resilience at the center of every decision.

📖 Read here: https://nexusconnect.io/articles/how-ai-fits-into-a-manufacturing-cps-security-strategy

#ManufacturingCybersecurity #CPSsecurity #OperationalResilience #IndustrialCybersecurity #ArtificialIntelligence #OTSecurity

📰 TXOne Networks Unveils 'Sennin' Platform for OT Cyber Risk Reduction

TXOne Networks launches its 'Sennin' OT Cyber Risk Management platform. The solution aims to shift industrial security from passive visibility to active risk reduction, addressing the unique challenges of OT environments. #OTSecurity #ICS #CyberRisk

🌐 cyber[.]netsecops[.]io

🔗 https://cyber.netsecops.io/articles/txone-networks-launches-sennin-platform-for-ot-cyber-risk-management/?utm_source=masto…

CVE-2026-42933: CRITICAL unintended proxy vuln (CVSS 10) in Pronetiqs Panduit Intravue ≤3.2.1a14 lets attackers bypass OT segmentation. No patch yet — restrict access & monitor vendor. https://radar.offseq.com/threat/cve-2026-42933-cwe-441-unintended-proxy-or-intermediary-confused-deputy-in-pronetiqs-panduit-intravue-95925181c2d7dbb4 #OffSeq #OTSecurity #Vuln #CVE202642933

Iran’s Cyber Playbook Shifts From Loud Attacks to Patient, Long-Term Access

https://securebulletin.com/irans-cyber-playbook-shifts-from-loud-attacks-to-patient-long-term-access/

So here's a little decision helper:

⭐️ Maximize insightful conversations that truly interest you
⭐️ Gain inspiration on all the whole range of cybersecurity
⭐️ Connect with folks through hands-on interaction
⭐️ Learn on your own terms, catering to your own needs
⭐️ Experience the magic of an open space conference

Intrigued? Get one of those last #osco tickets! https://opensecurityconference.org/conference/registration

#Security #CyberSecurity #InfoSec #AppSec #OTSecurity #OpenSpace [lisi] 2/2

So here's a little decision helper:

⭐️ Maximize insightful conversations that truly interest you
⭐️ Gain inspiration on all the whole range of cybersecurity
⭐️ Connect with folks through hands-on interaction
⭐️ Learn on your own terms, catering to your own needs
⭐️ Experience the magic of an open space conference

Intrigued? Get one of those last #osco tickets! https://opensecurityconference.org/conference/registration

#Security #CyberSecurity #InfoSec #AppSec #OTSecurity #OpenSpace [lisi] 2/2

Internet-wide PQC measurement: 160M SSH hosts scanned.

IT: 12% PQC-capable. OT: under 5%. Medical devices: under 5%. Cloud leads because providers deploy PQC by default. Everything else waits for manual upgrades nobody has scheduled.

The OT gap should alarm anyone in ICS/SCADA.

https://postquantum.com/security-pqc/forescout-pqc-adoption-data-2026/

#PQC #OTsecurity #ICS #infosec

Internet-wide PQC measurement: 160M SSH hosts scanned.

IT: 12% PQC-capable. OT: under 5%. Medical devices: under 5%. Cloud leads because providers deploy PQC by default. Everything else waits for manual upgrades nobody has scheduled.

The OT gap should alarm anyone in ICS/SCADA.

https://postquantum.com/security-pqc/forescout-pqc-adoption-data-2026/

#PQC #OTsecurity #ICS #infosec

We've already presented our silver sponsors, yet did you know we also have fabulous bronze sponsors for the Open Security Conference 2026? 🤩

🧡 BRANDAD
🧡 DocuWare
🧡 @lutrasecurity

All of them help make #osco more inclusive and we're truly grateful. Special kudos go out to our community sponsor Privacy Minded (@r_alb)!

Learn more about our sponsors: https://opensecurityconference.org/support/sponsors/

#osco26 #Security #CyberSecurity #InfoSec #AppSec #OTSecurity [lisi]

We've already presented our silver sponsors, yet did you know we also have fabulous bronze sponsors for the Open Security Conference 2026? 🤩

🧡 BRANDAD
🧡 DocuWare
🧡 @lutrasecurity

All of them help make #osco more inclusive and we're truly grateful. Special kudos go out to our community sponsor Privacy Minded (@r_alb)!

Learn more about our sponsors: https://opensecurityconference.org/support/sponsors/

#osco26 #Security #CyberSecurity #InfoSec #AppSec #OTSecurity [lisi]

Rockwell Automation vulnerability CVE-2026-10577 (CVSS 10) exposes an unauthenticated debug port in 1715 Redundant I/O modules. Update to firmware 3.011.

#RockwellAutomation #ICS #OTSecurity #CVE #CyberSecurity

https://securityonline.info/rockwell-1715-vulnerability/?utm_source=mastodon&utm_medium=jetpack_social

CVE-2026-10577: CRITICAL vuln in Rockwell 1715 EtherNet/IP module. Debug port lacks authentication, enabling remote CLI access for file deletion, task stop, or memory changes. Review device exposures now. https://radar.offseq.com/threat/cve-2026-10577-cwe-306-missing-authentication-for--25c66fc4335b822a #OffSeq #ICS #CVE2026_10577 #OTSecurity

Any #OTSecurity account worth following ? Any ideas/recommendations ? #infosec #ot #security

Any #OTSecurity account worth following ? Any ideas/recommendations ? #infosec #ot #security

Delta Electronics: 77 CVEs, avg CVSS 8.18, max 10. 100% unpatched. Trust Score: D. Critical industrial control flaws (CWE-121, CWE-20). Patch now. #DeltaElectronics #OTsecurity #cybersecurity

https://www.valtersit.com/vendors/delta-electronics/

AI-enabled threats are accelerating, and industrial organizations need smarter ways to validate and reduce cyber risk.

🤝 That's why we've partnered with Frenos to help organizations continuously validate their defensive posture, prioritize remediation based on real-world exploitability, and reduce downtime risk across cyber-physical systems.

📰 Learn more: https://claroty.com/press-releases/claroty-and-frenos-partner-to-reduce-downtime-risk-for-industrial-environments

#CPSsecurity #OTSecurity #IndustrialCybersecurity #CyberResilience #ArtificialIntelligence

AI-enabled threats are accelerating, and industrial organizations need smarter ways to validate and reduce cyber risk.

🤝 That's why we've partnered with Frenos to help organizations continuously validate their defensive posture, prioritize remediation based on real-world exploitability, and reduce downtime risk across cyber-physical systems.

📰 Learn more: https://claroty.com/press-releases/claroty-and-frenos-partner-to-reduce-downtime-risk-for-industrial-environments

#CPSsecurity #OTSecurity #IndustrialCybersecurity #CyberResilience #ArtificialIntelligence

Huge kudos to OSM Solutions for being a silver sponsor the Open Security Conference also for the 2026 edition! 🩶 We really appreciate their continued support in offering this event to even more folks interested in #CyberSecurity.

Discover OSM Solutions: https://www.osm-s.com/

Learn more about all our sponsors: https://opensecurityconference.org/support/sponsors/

#osco #osco26 #Security #CyberSecurity #InfoSec #AppSec #OTSecurity #OpenSpace #HomeOfIT #IT #Retail #ITSecurity [lisi]

Huge kudos to OSM Solutions for being a silver sponsor the Open Security Conference also for the 2026 edition! 🩶 We really appreciate their continued support in offering this event to even more folks interested in #CyberSecurity.

Discover OSM Solutions: https://www.osm-s.com/

Learn more about all our sponsors: https://opensecurityconference.org/support/sponsors/

#osco #osco26 #Security #CyberSecurity #InfoSec #AppSec #OTSecurity #OpenSpace #HomeOfIT #IT #Retail #ITSecurity [lisi]

Big shout-out to REWE digital for their continued silver sponsorship of the Open Security Conference! 🩶 Their support helps people gain access to #CyberSecurity matters, no matter their own background. We're truly grateful!

Discover #REWEdigital: https://www.rewe-digital.com/

Learn more about all our sponsors: https://opensecurityconference.org/support/sponsors/

#osco #osco26 #Security #CyberSecurity #InfoSec #AppSec #OTSecurity #OpenSpace #HomeOfIT #IT #Retail #ITSecurity [lisi]

Big shout-out to REWE digital for their continued silver sponsorship of the Open Security Conference! 🩶 Their support helps people gain access to #CyberSecurity matters, no matter their own background. We're truly grateful!

Discover #REWEdigital: https://www.rewe-digital.com/

Learn more about all our sponsors: https://opensecurityconference.org/support/sponsors/

#osco #osco26 #Security #CyberSecurity #InfoSec #AppSec #OTSecurity #OpenSpace #HomeOfIT #IT #Retail #ITSecurity [lisi]

Huge thanks to our silver sponsor from day 1: itRISKman and @jenshoffmann! 🩶 We're immensely grateful for their continued support over the years. They literally keep the Open Security Conference more affordable for everyone interested in cybersecurity.

Discover itRISKman: https://www.itriskman.de/

Learn more about all our sponsors: https://opensecurityconference.org/support/sponsors/

#osco #osco26 #Security #CyberSecurity #InfoSec #AppSec #OTSecurity #OpenSpace [lisi]

📰 UK Grid Operator SSEN Transmission Joins European Body to Bolster Energy Sector Cybersecurity

⚡️ UK grid operator SSEN Transmission joins the European Network for Cyber Security (ENCS) to bolster the defense of critical energy infrastructure against rising cyber threats. #CyberSecurity #Energy #CriticalInfrastructure #OTsecurity #UK

🌐 cyber[.]netsecops[.]io

🔗 https://cyber.netsecops.io/articles/ssen-transmission-joins-european-cybersecurity-network-to-protect-uk-g…

So many registrations already came in within the first days! 🤩🎉 Keep them coming, we're ready. 😉 ➡️ https://opensecurityconference.org/conference/registration

If you're wondering whether the Open Security Conference would be for you, check out our values and why we're doing this in the first place: https://opensecurityconference.org/about/values/ Feel free to reach out to us and bring your questions any time.

We hope to see you at #osco26!

#osco #Security #CyberSecurity #InfoSec #AppSec #OTSecurity #OpenSpace [lisi]

It's that time of the year! 🎉 The registration for the Open Security Conference 2026 is officially open. As space is limited we will process registrations first come first served, so get your ticket sooner rather than later.

🗓️ 5-8 November 2026
📌 Rückersbach, Germany (close to Frankfurt am Main)
➡️ https://opensecurityconference.org/conference/registration

#osco #osco26 #Security #CyberSecurity #InfoSec #AppSec #OTSecurity #OpenSpace [lisi]

We're really close now! 🐵 Registration for #osco26 will open soon. Watch this space or pre-register to get an email directly to your inbox once official registration is open: https://opensecurityconference.org/conference/registration ✉️ #osco #Security #CyberSecurity #InfoSec #AppSec #OTSecurity #OpenSpace [lisi]

The Mackay Sugar cyberattack is a reminder that cyber incidents can have real-world operational consequences when IT and OT environments are interconnected.

In this blog, Field CTO Sean Tufts discusses why cyber resilience, OT security, and managing IT/OT dependencies are critical for protecting critical infrastructure and maintaining operational continuity.

📖 Read here: https://claroty.com/blog/mackay-sugar-cyberattack-shows-need-for-resilience-when-itot-dependencies-exist

#OTSecurity #CriticalInfrastructure #CyberResilience #IndustrialCybersecurity #CyberPhysicalSystems #OperationalResilience

Sicurezza OT: oltre i 58 miliardi USD entro il 2031: La sicurezza informatica industriale (OT) si conferma uno dei segmenti piu’ dinamici della cybersecurity. Secondo MarketsandMarkets, il mercato globale dell’OT...
#sicurezzainformaticaindustriale #cybersecurity #MarketsandMarkets #OTSecurity http://dlvr.it/TSzY6V

It's finally time to announce our first keynote speaker for #osco26! 🤩

We're more than happy to have Stephanie Carstensen with us this year. She's specializing in #OTsecurity and industrial cybersecurity and shares her a vast experience in her keynote "The Day Everything Stops: Preparing for the Cyber Crisis You Hope Never Comes".

Intrigued like we are? Check out the full description here: https://opensecurityconference.org/conference/keynotes

See you at #osco26! 😃

#osco #CyberSecurity #Security #InfoSec #AppSec [lisi]

🏭 𝗦𝗲𝗰𝘂𝗿𝗶𝗻𝗴 𝘁𝗵𝗲 𝗽𝗵𝘆𝘀𝗶𝗰𝗮𝗹 𝘄𝗼𝗿𝗹𝗱 🏭

This week's book review topic is #OperationsTechnology (OT), with a no-nonsense title, 𝙎𝙚𝙘𝙪𝙧𝙚 𝙊𝙥𝙚𝙧𝙖𝙩𝙞𝙤𝙣𝙨 𝙏𝙚𝙘𝙝𝙣𝙤𝙡𝙤𝙜𝙮, authored by Andrew Ginter.

✍ Dr. Georgianna Shea provides her qualified assessment: https://cybercanon.org/secure-operations-technology/

🛒 Bookshop affiliate link: https://tinyurl.com/3f8rvcx4

#CyberCanonReview #CybersecurityBooks #OTSecurity

SaaS-only SIEM fails the moment it assumes connectivity that doesn't exist.

Air-gapped military networks. OT-isolated pipelines and power grids. Government research enclaves. Hard data residency mandates across the EU, GCC, and beyond.

In each case the issue isn't the product — it's the architecture.

New post: the four environments where cloud-first SIEM structurally cannot operate, and what actually works instead → https://graylog.org/post/the-four-environments-where-saas-only-siem-fails/

#InfoSec #SIEM #OTSecurity #DataSovereignty