Can a Robot Do Everything Right and Still Be Unsafe?
What a conversation between Boston Dynamics and VicOne reveals about how manipulated information can turn expected robot operation into an unsafe outcome
Vendor news
Funding rounds, leadership changes, incidents, new capabilities and announcements across the vendors in this catalog — collected automatically from vendors' own public feeds. Product release versions are on their own page, so the landing feed here never reads as one vendor's changelog.Where this comes fromEvery item links to the vendor's own published source: a GitHub release feed, a changelog, a status page, an SEC filing or a company blog. Nothing here is written or editorially reviewed by 0-Doubt, and nothing is a recommendation — it is machine-collected public record, labelled the same way as all other baseline content on the platform. Coverage is uneven by design: a vendor that publishes no public feed will not appear, and that absence is not a judgement about the vendor.
316 matching stories — announcement, in OT / ICS Security — showing up to 3 per vendorPer-vendor capWhile browsing, no single vendor may fill more than three slots on any one page, so a vendor with a chatty release cadence cannot buy the page you are looking at. That means a page can render fewer stories than the count above. Searching a headline or naming a vendor turns the cap off, because then you have asked to see everything that matches.
OT systems complicate quantum-resistant data protection
Quantum-resistant cryptography presents security leaders with various challenges, but CISOs in industries dependent on IoT and operational technology (OT) devices may face a particularly difficult journey to quantum readiness, especially if sensitive information that must remain confidential for years passes through those devices. A recent report from cybersecurity firm Forescout highlights these challenges in the healthcare industry, where medical histories, diagnostic images, and laboratory re
How to Get Your Freezers (and Other Stuff) Off the Internet!
Andrew Ginter’s practical advice for the smallest retailers and water utilities with Internet-exposed freezers and OT devices: bring in a firewall, allow only fixed IP addresses, and go live safely. The post How to Get Your Freezers (and Other Stuff) Off the Internet! appeared first on Waterfall Security Solutions.
Hackers Use New ROMULUS ClickFix Platform to Deliver LegionLoader and Other Malware
Cybersecurity researchers have disclosed details of a ClickFix delivery platform called ROMULUS that's being used to distribute malware such as Legion Loader. According to Forescout Research - Vedere Labs, ROMULUS is akin to a malware delivery service that employs ClickFix-style lures on bogus landing pages to trick unsuspecting users into running malicious commands and infecting their own
How to calculate OEE in a unified namespace with the HiveMQ Platform
Build a unified namespace with the HiveMQ Platform and calculate OEE from PLC, MES and ERP data with distributed compute. A step-by-step guide for IT/OT teams.
Secure Remote Access: The Data Center Risk Not on the Uptime Slide
FERC recently pulled data centers closer to the reliability world. Unfortunately, secure remote access is the risky part that is missing. The post Secure Remote Access: The Data Center Risk Not on the Uptime Slide appeared first on Forescout.
Claroty Team82 shows AI can rebuild Danfoss controller exploits in 28 minutes, putting Internet-facing OT at risk
Claroty’s Team82 research team reproduced three previously disclosed vulnerabilities in Danfoss AK-SM 800A refrigeration controllers using an artificial... The post Claroty Team82 shows AI can rebuild Danfoss controller exploits in 28 minutes, putting Internet-facing OT at risk appeared first on Industrial Cyber.
How to Harness AI for IoT Security
By Eden Faingold, Product Manager
VicOne Situational Awareness Report: 400 Cyber Incidents, with In-Vehicle Systems Most Affected in Q3 2026
VicOne's Q3 2026 Situational Awareness Report tracks where automotive cyber risk shifted: in-vehicle systems overtook enterprise IT as the most affected domain, Asia recorded a 36.8% rise in observed incidents, and ransomware activity spanned the full automotive value chain across 97 incidents.
OT Security for Water Utilities: What NIST Says About Secure Remote Access
Water and wastewater utilities face a fundamental cybersecurity challenge: the connectivity essential to modern operations also expands the potential attack surface for adversaries seeking to disrupt critical services.In an October 2026 blog post, CheeYee Tang, Robert Stea, and John Wiltberger of the National Institute of Standards and Technology (NIST) emphasize that securing water and wastewater systems requires more than protecting remote access points. Water utilities need to identify connec
HiveMQ platform getting started: Broker to live data
Get started with the HiveMQ platform: sign up, deploy a self-hosted MQTT broker with Docker, connect it to the platform and publish your first simulated data.
ThinkLabs AI names Dragos’ Robert Lee to board to accelerate AI-driven grid planning, modernization
ThinkLabs AI, an AI-powered grid intelligence company that empowers critical infrastructure with trustworthy, physics-informed AI, announced on Tuesday... The post ThinkLabs AI names Dragos’ Robert Lee to board to accelerate AI-driven grid planning, modernization appeared first on Industrial Cyber.
The Blind Operator: Lessons from France’s Supermarket Attacks
On October 11, 2026, attackers manipulated refrigeration controls at hundreds of French supermarkets, forcing prolonged defrost cycles and destroying stock. Le Monde reported that extending the cycles delayed temperature alarms causing food damage and wastage. It was not until the morning after the attack that delivery workers noticed that the storeroom was damaged and triggered […] The post The Blind Operator: Lessons from France’s Supermarket Attacks appeared first on SIGA.
When the Fridge Is the Attack Surface: Lessons from France's Supermarket Cyberattack
Most conversations about connected device risk start with cameras, door controllers, and badge readers. This week, the conversation started with refrigerators.
Darktrace Names Three Senior Executives to Strengthen Finance, Revenue, and Customer Leadership
OT Visibility Without the Trade-Off: How Waterfall & Siemens Energy are Securing Critical Infrastructure together
Lior Frenkel on the joint Waterfall and Siemens Energy MDR solution: real-time OT visibility through Unidirectional Gateways, with no path back into the systems. The post OT Visibility Without the Trade-Off: How Waterfall & Siemens Energy are Securing Critical Infrastructure together appeared first on Waterfall Security Solutions.
AI SOC 에이전트, 팀원처럼 채용하기
Gartner는 2028년까지 대형 SOC의 70%가 1차, 2차 분석 업무를 보강하기 위해 AI SOC 에이전트를 시범 도입할 것으로 봤습니다. 같은 전망에는 단서가 붙어 있습니다. 구조화된 평가 체계 없이 도입한 조직 중 측정 가능한 개선을 얻는 곳은 15%에 그칠 것이라는 내용입니다. 70%가 도입하고 15%가 성과를 낸다면, 그 차이는 어디서 생길까요? 이 아티클은 AI SOC 에이전트 도입을 채용 과정에 대입해 봅니다. 새 팀원을 뽑을 때 거치는 단계를 AI에도 똑같이 적용하면, 무엇을 정하고 무엇을 측정해야 하는지가 구체적으로 보입니다. 1. 도구로 들인 AI SOC 에이전트에 생기는 일 Gartner의 2026 보안 운영 하이프 사이클에서 AI SOC 에이전트는 기대가 가장 부풀려진 정점(Peak of Inflated Expectations)에 올라 있습니다. 1년 전만 해도 도입률이 한 자릿수에 머무는 초기 단계였습니다. 빠르게 도입되는 만큼 운영은 따라가지...
Hiring AI SOC Agents Like Teammates
Gartner expects that by 2028, 70% of large SOCs will pilot AI SOC agents to augment Tier 1 and Tier 2 work. The forecast comes with a condition: only 15% will achieve measurable improvement without structured evaluation. If 70% adopt and 15% see results, where does the difference come from? This article maps AI SOC agent adoption onto the hiring process. Applying the steps you take for a new team member to AI makes it concrete what to decide and what to measure. 1. What happens to AI SOC...
Data lineage for manufacturing: Tracing messages from sensor to store
Learn how to build end-to-end data lineage in manufacturing using MQTT, message tracing, semantic graphs, and data governance across IT/OT systems.
The Response Gap: Why the Attacker's Clock and the SOC's Clock No Longer Match
The Response Gap is the difference between how fast an attacker spreads inside a network and how fast a SOC takes its first action. Understanding it starts with reading two clocks. Breakout time is the time an attacker needs to move from the first compromised system to another. Stop the attack within that window and the damage stays on one endpoint. Miss it and the attack becomes a problem for the whole internal network. In 2025 the average breakout time was 29 minutes. The fastest case took...
Google Pixel 10 Hacked Three Times at Pwn2Own, Researchers Win $562,500
Hackers got into Google’s newest flagship phone three times on Thursday. The break-ins happened at Pwn2Own Ireland, a contest in Cork run by Trend Micro’s Zero Day Initiative, or ZDI. The contest pays researchers to show real attacks on up-to-date devices. The flaws are then passed to the makers so they can fix them. Pwn2Own […] The post Google Pixel 10 Hacked Three Times at Pwn2Own, Researchers Win $562,500 appeared first on PrivacySavvy.
Sony Patches Seven XAV-9500ES Flaws That Could Have Enabled Device Compromise
Sony patched seven XAV-9500ES vulnerabilities affecting Wi-Fi, Bluetooth, and USB. VicOne examines the attack paths, potential impact, and next steps.
Three Teams Demonstrate Remote Hacks of Fully Patched Google Pixel 10 at Pwn2Own
Three research teams broke into Google's Pixel 10 on October 8 at Pwn2Own Ireland, a hacking contest in Cork whose rules require every target to be fully patched. The contest pays researchers to show working exploits and passes the flaws to the vendors. One of the three Pixel exploits earned Ikotas Labs $300,000, the contest's top prize, and made the team the overall winner. Trend Micro's Zero
The Network Is Now the Critical Dependency for AI
AI is no longer a side initiative or a promising experiment. It’s becoming the operational core of how organizations make decisions, deliver services, and respond to emerging threats. Models are growing more capable, inference is moving closer to the edge, and data is flowing across increasingly complex environments. But as AI accelerates, one truth becomes unavoidable: The Network Is Now the Critical Dependency for AI In the first five posts of this series, we explored the limitations of legacy
Marlink, TXOne Networks join forces to strengthen cybersecurity across connected maritime and industrial environments
Marlink, a vendor of managed services for business-critical digital solutions, has entered into a partnership with TXOne Networks,... The post Marlink, TXOne Networks join forces to strengthen cybersecurity across connected maritime and industrial environments appeared first on Industrial Cyber.
Claroty finds 58% of CPS operators faced operational cyberattacks as third-party access and AI risks grow
New research from cyber-physical systems (CPS) protection vendor Claroty found that 58% of CPS operators said they experienced... The post Claroty finds 58% of CPS operators faced operational cyberattacks as third-party access and AI risks grow appeared first on Industrial Cyber.
What Canada’s Bill C-8 Means for Critical Infrastructure and OT Security
What Is Canada Bill C-8?Bill C-8 is a Canadian cybersecurity law that will require designated critical infrastructure operators to establish programs to identify and manage cyber risk, protect critical cyber systems, detect cybersecurity incidents, and minimize their impact. The law, which received Royal Assent on June 15, 2026, also introduces cybersecurity incident reporting requirements.At the heart of Bill C-8 is the Critical Cyber Systems Protection Act (CCSPA), which creates a new cybersec
Cybersecurity M&A Roundup: 39 Deals Announced in September 2026
Significant cybersecurity M&A deals announced by Dragos, IBM, Palo Alto Networks, Kiteworks, and Upwind. The post Cybersecurity M&A Roundup: 39 Deals Announced in September 2026 appeared first on SecurityWeek.
Cling botnet uses STUN traffic to conceal command-and-control activity and attacks against vulnerable IoT devices
Nozomi Networks Labs has identified a botnet dubbed Cling that exploits internet-exposed IoT and networking devices and disguises... The post Cling botnet uses STUN traffic to conceal command-and-control activity and attacks against vulnerable IoT devices appeared first on Industrial Cyber.
Consequence-Based Risk Matrices for IEC 62443-3-2
Andrew Ginter shares a proposed IEC 62443-3-2 Appendix C: consequence-based risk matrices that replace likelihood with credibility for high-impact OT cyber attacks. The post Consequence-Based Risk Matrices for IEC 62443-3-2 appeared first on Waterfall Security Solutions.
Realtek Jungle SDK Exploit Attempts Deliver Cling Botnet With STUN-Based C2
Threat actors have been observed attempting to exploit a now-patched critical security flaw impacting the Realtek Jungle software development kit (SDK) to deploy a botnet malware called Cling. "Cling is notable not because it introduces a new propagation technique, but because it repurposes ordinary STUN behavior into a practical command-and-control channel," Nozomi Networks said in a report
6ème participation d'Allentis aux Assises à Monaco Qe-Streams OT, interface de 3ème génération
Paris, le 30 septembre 2026 – Allentis participera aux ASSISES à Monaco du 7 au 10 octobre 2026. Il s’agira de notre sixième participation au cours de laquelle nous présenterons les principaux composants de la plateforme QE : QE-SECURE, QE-STREAMS OT et QE-STREAMS IT. Le système souverain QE-SECURE met en oeuvre la technologie d’intelligence artificielle MIND AI conjointement à l’analyse protocolaire profonde afin de détecter les comportements suspects, le shadow IT et les cyber attaques en...
Why OT Remote Access Requires Continuous Monitoring and Oversight in the Age of AI
Zero Trust Doesn’t End at LoginGoogle Cloud’s Office of the CISO recently published an article entitled, A manufacturing blueprint for secure agentic AI. The article offers a practical look at how AI agents are moving from analysis to action on the factory floor.One principle that stands out for anyone responsible for securing plant operations is Zero Trust. Google describes “continuously enforc[ing] Zero Trust policies from the enterprise cloud down to shop-floor PLCs,” with behavioral and oper
Wersja 5
Krytyczne Alerty (ICSECINT-4437) Po zalogowaniu, użytkownik zostanie poinformowany o krytycznych alertach w systemie ScadvanceXP. Widoczne one będą w nowym oknie w rogu ekranu. Krytyczne alerty będą informować o najbardziej krytycznych powiadomieniach które wymagają jak najszybszej reakcji ze strony użytkownika, takich jak: duże użycie zasobów systemu czy duża ilość zagrożeń powtarzających się w ostatnim okresie czasu. […] Artykuł Wersja 5 pochodzi z serwisu ICsec.
GSX 2026 Recap: AI Everywhere, and What It Takes to Put It to Work
Walking the floor at GSX 2026 in Atlanta two weeks ago, the biggest takeaway was a lot of familiar topics that have developed considerably this year. AI and the convergence of physical security and IT have been part of the conversation for several years. What changed was how each in its own way has moved from a sense of skepticism into stages of real progress and thoughtful application.
The AI Protection Myth: Why AI Readiness Needs a Hardware Floor
AI readiness is not just about adopting better models, writing stronger policies, or adding more software guardrails. As Forrester explains in The CIO’s Guide to AI Readiness, success depends on IT capability maturity—the ability to deploy, govern, and secure AI at scale. But there is a critical layer beneath governance and security frameworks: the physical... View Article The post The AI Protection Myth: Why AI Readiness Needs a Hardware Floor appeared first on Owl Cyber Defense.
Nozomi identifies 19 vulnerabilities in Pepperl+Fuchs IO-Link Master enabling root access and OT attacks
Researchers from Nozomi Networks Labs identified 19 vulnerabilities in the Pepperl+Fuchs IO-Link Master ICE2-8IOL-K45P-RJ45 running EtherNet/IP firmware version... The post Nozomi identifies 19 vulnerabilities in Pepperl+Fuchs IO-Link Master enabling root access and OT attacks appeared first on Industrial Cyber.
NVIDIA Open Agent Safety Platform just validated what we’ve been saying for years. Software can’t hold an AI agent. You need a boundary it cannot argue its way past.
Today NVIDIA launched its Open Agent Safety Platform, built around OpenShell (a secure runtime boundary) and Sentry (a hardware watchdog running on BlueField DPUs that can quarantine a misbehaving agent in milliseconds). More than 100 organizations, including Anthropic, Microsoft, Palantir, and CrowdStrike, are already lining up behind it. It has become clear we cannot trust... View Article The post NVIDIA Open Agent Safety Platform just validated what we’ve been saying for years. Software
How to Build an Effective OT Incident Response Playbook for the AI Era
AI is changing the speed of cybersecurity incident response. It can correlate alerts, analyze large volumes of data, and help investigators identify patterns that might otherwise take hours to uncover. In OT, however, faster analysis does not necessarily make the most consequential decisions any easier. According to ISACA’s State of Cybersecurity 2026, 41% of organizations […] The post How to Build an Effective OT Incident Response Playbook for the AI Era appeared first on SIGA.