Jon Davis

Good morning! Here is this week's ICS Advisory, Other CERT, and Vendor vulnerability advisories weekly summary for 23 - 27 February 2026. This past week, CISA released 12 new CISA ICS Advisories for the following vendors: Copeland, InSAT, CloudCharge, EV Energy, Chargemap, SWITCH EV, Mobility46, EV2GO, Gardyn, Johnson Controls, Inc. Pelco, Inc. and Schneider Electric. One update was released this past week for Honeywell Schneider Electric, Mitsubishi Electric, Hitachi Energy, ICONICS and Mitsubishi Electric. Based on the new CISA advisory, #Energy, #TransportationSystems, #Commercial #Facilities, #Healthcare and #PublicHealth, #Defense #Industrial Base, #Food and #Agriculture, Critical #Manufacturing, #Government #Facilities, #Financial #Services, #InformationTechnology, #Water and #WastewaterSystem are the potentially affected critical infrastructure (CI) sectors. The ICS Advisory Project identified 16 new ICS Advisories for Festo, ARC Informatique, Moxa, Phoenix Contact, ABB, Bosch Rexroth, Hitachi Energy, Ubiquiti Networks, Trumpf, PDUexperts, Socomec and one update for Hitachi Energy. View the summary details of other CERT & Vendor product advisories identified last week (23 - 27 February 2026) at: https://lnkd.in/efKiMsxs This past week, CISA added 3 new Known Exploited Vulnerability (KEV) Catalog. None added this week correlated to a CISA ICS Advisory. ICS Advisory Project identified one CVE: CVE-2020-11023 – JQuery Cross-Site Scripting (XSS) Vulnerability listed in the Festo advisory for CODESYS vulnerabilities in Festo Automation Suite [VDE-2025-108]. This week, ICS Advisory Project, powered by Industrial Data Works LLC, in collaboration with EmberOT, released our 2024–2025 ICS/OT Vulnerability Intelligence Report. Check it out at: https://lnkd.in/ehG4DNPs Thank you all at EmberOT for your amazing support in getting this report out this year. Acknowledgement: Thank you Mikael Vingaard at the ICSRange for sharing with ICS[AP] the new ICS Advisory for PDUexperts. Visit the ICS[AP] CISA KEV Catalog Dashboards: https://lnkd.in/emzXBbBw View previous ICS Advisory Project weekly summaries: https://lnkd.in/eQKxhAEi To view the updated ICS Advisory Project Dashboards, visit: icsadvisoryproject.com Sign up to receive ICS[AP] Weekly Summary Slides & Other CERT and Vendor Advisory Summaries via email every Monday https://lnkd.in/eUwQrrj4 I appreciate everyone's comments & support. Have a great week!  #CISA #ot #ics #otsecurity #icssecurity  #cybersecurity #cybersecurityawareness #industrialautomation #buildingautomation #oilandgas #maritime #vulnerabilitymanagement Disclaimer: The views expressed in my LinkedIn posts and profiles are my own, not those of my employers or LinkedIn.

29

INSURABILITY CHECKLIST FOR RENEWAL SEASON Cybersecurity Month = prep for cyber insurance renewal. Underwriters want proof, not promises. Tips: 1) Collect pen-test reports, MFA proof, patch & backup logs. 2) Document tabletop IR exercises and results. 3) Produce a one-page evidence packet for underwriters. Let’s discuss an assessment to help you organize your evidence packet — DM me to start. #CybersecurityMonth #CyberInsurance #Insurability #RiskManagement #CISO #Compliance

3

⚠️⚠️⚠️ 83% of security analysts say alert overload is their top challenge. 67% of organizations don't have enough staff to keep up. EDR, MDR, and XDR all address these problems, but they do it in fundamentally different ways. Pick the wrong one and you're either overpaying for capabilities your team can't use, or underprotecting your business because everyone's overwhelmed. We put together a decision guide with a simple framework for figuring out which solution fits your team's reality. Grab it here 👉 https://bit.ly/49O76Rc

35

We're all guilty of it: checking the box, making the spreadsheet turn green, whatever you want to call it. True security is cultural. Every security professional knows this (and complains about it!), and yet it's still a pervasive issue. Why? Check out the latest blog post from our team for some actionable tips on how to combat this culture dissonance in your own org.

4

Audits and forensics aren’t witch-hunts to “name the hacker.” They’re how you stop the next breach. A good audit/forensic review will: Expose misconfigurations and control gaps Surface broken processes (people • tech • vendors) Produce a clear timeline to improve response Provide evidence for insurance claims and regulators Demonstrate senior management intent and due diligence One breach costs more—in money, trust, and time—than doing the work properly up front. At Tylers, we turn incidents into hardening plans: fixes, owners, deadlines. Not blame—better security. #CyberSecurity #DigitalTrust #Forensics #Audit #IncidentResponse #Tylers

17

2 Comments

I usually do this when the admins call about the Endpoint Protection blocking something or the system having performance issues. The basic administration and troubleshooting procedures should be part of your handover package to the client's operations team. MDR.. Managed Endpoint Detection and Response. #TerrificCybershield #TerrificSolutions

1

Most security teams think they need better tools. What they really need is better understanding of the tools they already have. SIEM. EDR. Threat intelligence. Dashboards. Tickets. All producing data. Very little producing clarity. This is the gap CyberFuse and SecLM solve. Your SOC does not need more tools. It needs better understanding. www.cyberfuse.net #CyberFuse #SecLM #SOCFusion #CISO #SIEM #EDR

9

1 Comment

Excellent article for those new to SOC reports. A great resource if you are not sure if your company should perform a SOC examination.

3

CMMC consultant: "Here's your documentation. Good luck maintaining it." Then reality hits: Daily IT operations don't match documented processes Security tools generate alerts nobody investigates Configuration changes break compliance baselines Evidence collection falls to whoever has time VSO manages your IT operations AND your compliance posture. Because they're the same thing. #ManagedServices #CMMC #DefenseContractors

3