Daniel Charboneau

Good morning! Here is this week's ICS Advisory, Other CERT, and Vendor vulnerability advisories weekly summary for 23 - 27 February 2026. This past week, CISA released 12 new CISA ICS Advisories for the following vendors: Copeland, InSAT, CloudCharge, EV Energy, Chargemap, SWITCH EV, Mobility46, EV2GO, Gardyn, Johnson Controls, Inc. Pelco, Inc. and Schneider Electric. One update was released this past week for Honeywell Schneider Electric, Mitsubishi Electric, Hitachi Energy, ICONICS and Mitsubishi Electric. Based on the new CISA advisory, #Energy, #TransportationSystems, #Commercial #Facilities, #Healthcare and #PublicHealth, #Defense #Industrial Base, #Food and #Agriculture, Critical #Manufacturing, #Government #Facilities, #Financial #Services, #InformationTechnology, #Water and #WastewaterSystem are the potentially affected critical infrastructure (CI) sectors. The ICS Advisory Project identified 16 new ICS Advisories for Festo, ARC Informatique, Moxa, Phoenix Contact, ABB, Bosch Rexroth, Hitachi Energy, Ubiquiti Networks, Trumpf, PDUexperts, Socomec and one update for Hitachi Energy. View the summary details of other CERT & Vendor product advisories identified last week (23 - 27 February 2026) at: https://lnkd.in/efKiMsxs This past week, CISA added 3 new Known Exploited Vulnerability (KEV) Catalog. None added this week correlated to a CISA ICS Advisory. ICS Advisory Project identified one CVE: CVE-2020-11023 – JQuery Cross-Site Scripting (XSS) Vulnerability listed in the Festo advisory for CODESYS vulnerabilities in Festo Automation Suite [VDE-2025-108]. This week, ICS Advisory Project, powered by Industrial Data Works LLC, in collaboration with EmberOT, released our 2024–2025 ICS/OT Vulnerability Intelligence Report. Check it out at: https://lnkd.in/ehG4DNPs Thank you all at EmberOT for your amazing support in getting this report out this year. Acknowledgement: Thank you Mikael Vingaard at the ICSRange for sharing with ICS[AP] the new ICS Advisory for PDUexperts. Visit the ICS[AP] CISA KEV Catalog Dashboards: https://lnkd.in/emzXBbBw View previous ICS Advisory Project weekly summaries: https://lnkd.in/eQKxhAEi To view the updated ICS Advisory Project Dashboards, visit: icsadvisoryproject.com Sign up to receive ICS[AP] Weekly Summary Slides & Other CERT and Vendor Advisory Summaries via email every Monday https://lnkd.in/eUwQrrj4 I appreciate everyone's comments & support. Have a great week!  #CISA #ot #ics #otsecurity #icssecurity  #cybersecurity #cybersecurityawareness #industrialautomation #buildingautomation #oilandgas #maritime #vulnerabilitymanagement Disclaimer: The views expressed in my LinkedIn posts and profiles are my own, not those of my employers or LinkedIn.

29

If you're still patching KEV vulnerabilities in order, you're doing it wrong. Our new KEVology report by Tod Beardsley, former Section Chief of the CISA KEV program, breaks down why: 68% of KEV entries need additional context to actually prioritize. Traditional scoring can't tell you what's urgent, but evidence can. That's where KEV Collider comes in. It's a free tool that layers KEV data with exploit availability, access vectors, and real-world signals so you can test assumptions and prioritize based on actual risk, not just compliance checkboxes. 📄 Full analysis: https://lnkd.in/gR5XkNdu 🧪 Try the tool: https://lnkd.in/grEnaTa6 Built for defenders who need clarity, not just coverage.

11

Thanks to Ray Panta sharing below, National Institute of Standards and Technology (NIST) Special Publication is always a good reference for Cybersecurity practitioner in CyberSecurity related area. NIST SP as a whole is free, public accessible and by created by expert for everyone. What more else one can ask for such a good deal ? 😅 💻 Cyber risk means the chance of something going wrong in digital systems 🌐 – like hackers stealing data 🕵️‍♂️, systems going offline 🚫, or software getting hacked 🐞 🔐 It includes risks to privacy 🧾, finances 💸, business operations 🏢, and even national security 🛡️ 📘 NIST SP 800-30 is a guide 📖 from the US National Institute of Standards and Technology (NIST) 🇺🇸 that helps organisations figure out and manage their cyber risks ⚠️ 🧮 It teaches how to do risk assessments 🧠 – like identifying threats 👀, figuring out how likely they are 🎯, and what damage they could cause 💥 🧩 It's a key part of the NIST Cybersecurity Framework, used worldwide 🌍 to build safer digital systems 🏛️ NIST Special Publications are official guides 📚 that offer best practices, standards, and strategies for improving cybersecurity 👋 Robin Yong #MemeLord #LobinKor 🏆 #Favikon #CyberSecurity & #LinkedIn #Malaysia 💻 #5G, #ArtificialIntelligence, #IT, #CyberSecurity, #ForeignAffairs & #Geopolitics 🤝 https://v.gd/Robin ✨ #AI-augmented content, do fact check if in doubt ℹ️ #MemeLord not liable for the info shared.

19

1 Comment

What if your SIEM isn’t the problem — but your data strategy is? 🤔 Security leaders aren’t short on alerts. They’re drowning in them. Pipelines sprawl. Ingest costs spike. Visibility breaks down. And still… threats slip through. It’s not just noise. It’s chaos — and it’s costing teams time, clarity, and control. We launched *Data Strikes Back* to cut through that chaos. 4 episodes are live now. Hosted by syslog-ng creator and our CEO Balázs Scheidler, joined by leading minds like 🇳🇱 Filip Wijnholds, Suheil Bukhzam, Vikas Gopal, and John Jorgensen. This isn’t a rebellion. It’s a return to discipline, structure, and insight. Which episode hit home for you? Listen to the podcast here: https://lnkd.in/dwdSh3KH    #SIEMOps #SOCWorkflows #SecurityData #LogPipelineStrategy

14

🚨 Just released: Corero’s 2025 Threat Intelligence Report 🚨 DDoS atacks are no longer just big floods.They're frequency, evasion, and protocol pivoting. Key insights: • 11 attacks/day avg. in 2024 • Mid-size attacks declining • Multi-vector attacks on the rise Read the release: https://bit.ly/44kLkn0

15

Royce Humpert Jr. has shared some of the development efforts and roadmap for this product. It is truly impressive. This post discusses the application of a thoughtful and extensible framework behind specific deliverables. As the world shifts to technology enabled practice, tools like Neat Labs offers will become the standard toolkit. As just one example (but by no means exhaustive), Security Auditors can shift from the minutia of repetitive data collection and workpaper generation to issues of effectiveness, data workflow, and architectural concerns in applying frameworks to effective security. As always, I speak for myself and as an academic interested in ai evolution and effective security . Neither BDO nor SMU necessarily endorse any products.

6

2 Comments

Sick SOC: A Practical Checklist of Symptoms! That SOC that looks operational (alerts, dashboards, tools) but lacks strategy, visibility, and repeatable response, so it quietly fails. Yeah… that’s called a sick SOC. I love the term “Sick SOC” — framed by Reza A. in his article, highlighting key metrics and warning signs that indicate your SOC isn’t operating at its best quality. • Strategic misalignment • Process & governance breakdown • Visibility & detection gaps • Knowledge & capability gaps vs threats • Architecture & technical implementation flaws • People & culture You can’t cure a sick SOC with more alerts; you cure it with clarity, coverage, and capability: https://lnkd.in/g9k63pfF If you want to make that checklist more “complete” and more usable in real SOC assessments, I’d add these categories: • Service management + customer alignment (SOC as a product) • Detection engineering lifecycle  • Data quality management (not just “data sources”) • Identity-centric operations (where modern incidents live) • Resilience + readiness • Third-party / supply-chain visibility I don't know what you heard about me! I practice, test, learn in public, and share what actually works ... daily and free! Threat hunting 101 series on YouTube: https://lnkd.in/g7D4pTVk Daily Cyber Drops on Medium: https://lnkd.in/gsekf7kB Nothing Cyber. Keep hunting. #cybersecurity #threathunting #threatdetection #opensource #tips #career #blueteam #soc #socanalyst #skillsdevelopment #careergrowth #IR #dataanalysis #incidentresponse #ai

31

2 Comments

I’ve been thinking about exposure management less as a tooling problem and more as a systems problem. When discovery grows faster than mobilization capacity, exposure doesn’t just increase — it compounds. That accumulation is exposure debt.

16

2 Comments

Every major compliance framework assumes systems change slowly. AI breaks that assumption. SOC 2. ISO 27001. NIST. PCI DSS. • They’re built around annual reviews, static controls, and documented intent. Meanwhile: • Gartner has warned that over 60% of AI models experience material performance drift within 12 months • IBM research shows data changes alone can degrade model accuracy by 20–40% if not continuously monitored • Most orgs still assess AI risk once a year, if at all That gap is dangerous. An AI system can: • Change behavior weekly • Learn from new data daily • Introduce new risks without a single code deploy Yet compliance still asks: “Were controls in place at the time of the audit?” Wrong question. The real question is: “Can you prove this system is safe right now?” • PDF policies, point-in-time audits, and checkbox controls were designed for stable systems. AI is not stable. Until compliance moves toward: • Continuous control validation • Model and data monitoring as evidence • Policy-as-code instead of policy-as-PDF Are current frameworks evolving fast enough — or already obsolete?

4

🚨 SIEM alerts aren’t the problem. Noise is. SOC teams are buried under alerts—but real threats are still getting missed. That’s not a talent issue. That’s a SIEM issue. Part 2 of Gurucul’s Smart SIEM for the Smarter SOC series breaks down what next-gen visibility really means: 🔍 Full-spectrum coverage—no blind spots. ✅ Detections you can trust—not guess. 🎯 Risk-based prioritization—so every action counts. If your SIEM is adding stress instead of clarity, it’s time to rethink the playbook. 👉 Read the full breakdown → https://lnkd.in/dZ6nmv7g

15