https://otasec.com/OT & ICS security news, filtered for asset ownersenhttps://otasec.com/briefing/2026-10-25/otasec-briefing-2026-10-25-enSun, 25 Oct 2026 06:13:15 +0000A quiet day: Siemens has published two advisories as a follow-up to the PHP2Shell story, and one vendor launch targets OT asset documentation.https://otasec.com/briefing/2026-10-24/otasec-briefing-2026-10-24-enSat, 24 Oct 2026 07:21:13 +0000The UK moves to toughen penalties for subsea cable sabotage, while a large edge-device campaign exposes more than 70,000 credentials. Forescout flags exposed refrigeration controls, and ESET adds detail on the Sandworm wiper attack in Ukraine.https://otasec.com/briefing/2026-10-23/otasec-briefing-2026-10-23-enFri, 23 Oct 2026 09:07:37 +0000PHP2Shell dominates today, with Palo Alto still without fixed PAN-OS releases and attacks seen since 17 October. Ransomware exploitation of a GlobalProtect flaw and a long-running intrusion in a Russian healthcare network round out the threat picture.https://otasec.com/briefing/2026-10-22/otasec-briefing-2026-10-22-enThu, 22 Oct 2026 12:52:20 +0000Today's briefing is led by a private-sector push to help under-resourced utilities, plus follow-up coverage of the SafePay ransomware advisory. Also in the news: a Sandworm wiper attack on Ukrainian food logistics and guidance on retail automation and post-quantum readiness.https://otasec.com/briefing/2026-10-21/otasec-briefing-2026-10-21-enWed, 21 Oct 2026 10:14:41 +0000Siemens confirms active exploitation of a Software Center flaw, and a joint advisory puts SafePay ransomware at more than 600 critical infrastructure victims. The EU Cyber Resilience Act and AI risks to OT round out the day.https://otasec.com/briefing/2026-10-20/otasec-briefing-2026-10-20-enTue, 20 Oct 2026 06:05:21 +0000AI-assisted exploit development against Internet-facing OT leads today, alongside new detail on the PEERSTITCH intrusion and a cyberattack on building automation vendor LOXONE. Regulation and remote-access governance round out a quieter day.https://otasec.com/briefing/2026-10-19/otasec-briefing-2026-10-19-enMon, 19 Oct 2026 09:39:17 +0000A quiet day with no new exploited vulnerabilities or advisories. The news is about guidance and frameworks: MITRE ATT&CK v20, Singapore's quantum-safe push, and the OT security debt in manufacturing.https://otasec.com/briefing/2026-10-18/otasec-briefing-2026-10-18-enSun, 18 Oct 2026 00:28:53 +0000A BeyondTrust Remote Support zero-day exploited since late August leads the news, followed by exposed supermarket refrigeration systems and actively exploited firewall flaws. Guidance from NIST and new segmentation research round out the day.