September 22, 2026
The National Institute of Standards and Technology (NIST) has issued the initial public draft of SP 800-82r4, updating guidelines for Operational Technology (OT) security with a focus on CSF 2.0 alignment and…
Read the analysis →
September 4, 2026
Four critical vulnerabilities in Rockwell Automation RSLinx Classic (versions <= 4.50) could allow remote attackers to crash the service using crafted CIP packets, disrupting communication between PCs and industrial control equipment.
Read the analysis →
September 4, 2026
Two vulnerabilities in FactoryTalk Historian Machine Edition could allow authenticated attackers to execute remote code or cause a system crash via the web interface.
Read the analysis →
September 4, 2026
A vulnerability (CVE-2021-42260) affecting several families of Rockwell Automation PLCs could allow a remote actor to trigger a major nonrecoverable fault, leading to operational downtime.
Read the analysis →
September 4, 2026
A vulnerability in specific Rockwell Automation ControlLogix and CompactLogix PLC families could allow a remote actor to trigger a major nonrecoverable fault, necessitating a physical power cycle for recovery.
Read the analysis →
September 4, 2026
Two vulnerabilities (CVE-2026-9633 and CVE-2026-9634) in the Rockwell Automation Redundancy Module Configuration Tool could allow a local attacker to gain administrator privileges via DLL hijacking.
Read the analysis →
September 4, 2026
A vulnerability in Rockwell Automation FactoryTalk Activation Manager V5.02 and below could allow an authenticated user to gain SYSTEM-level privileges via installer console windows.
Read the analysis →
September 4, 2026
NIST IR 8576 provides U.S. transit agencies with a baseline of cybersecurity outcomes for operational technology and cyber-physical systems, translating CSF 2.0 into sector-specific mission needs.
Read the analysis →
September 3, 2026
The NIST NCCoE has published IR 8576, providing U.S. transit agencies with a voluntary, risk-based profile to align OT and business system security with CSF 2.0 outcomes.
Read the analysis →
September 3, 2026
A vulnerability in Siemens Parasolid could allow arbitrary code execution or application crashes when parsing specially crafted X_T files, impacting critical manufacturing environments.
Read the analysis →