Aaron Mog

Good morning! Here is this week's ICS Advisory, Other CERT, and Vendor vulnerability advisories weekly summary for 23 - 27 February 2026. This past week, CISA released 12 new CISA ICS Advisories for the following vendors: Copeland, InSAT, CloudCharge, EV Energy, Chargemap, SWITCH EV, Mobility46, EV2GO, Gardyn, Johnson Controls, Inc. Pelco, Inc. and Schneider Electric. One update was released this past week for Honeywell Schneider Electric, Mitsubishi Electric, Hitachi Energy, ICONICS and Mitsubishi Electric. Based on the new CISA advisory, #Energy, #TransportationSystems, #Commercial #Facilities, #Healthcare and #PublicHealth, #Defense #Industrial Base, #Food and #Agriculture, Critical #Manufacturing, #Government #Facilities, #Financial #Services, #InformationTechnology, #Water and #WastewaterSystem are the potentially affected critical infrastructure (CI) sectors. The ICS Advisory Project identified 16 new ICS Advisories for Festo, ARC Informatique, Moxa, Phoenix Contact, ABB, Bosch Rexroth, Hitachi Energy, Ubiquiti Networks, Trumpf, PDUexperts, Socomec and one update for Hitachi Energy. View the summary details of other CERT & Vendor product advisories identified last week (23 - 27 February 2026) at: https://lnkd.in/efKiMsxs This past week, CISA added 3 new Known Exploited Vulnerability (KEV) Catalog. None added this week correlated to a CISA ICS Advisory. ICS Advisory Project identified one CVE: CVE-2020-11023 – JQuery Cross-Site Scripting (XSS) Vulnerability listed in the Festo advisory for CODESYS vulnerabilities in Festo Automation Suite [VDE-2025-108]. This week, ICS Advisory Project, powered by Industrial Data Works LLC, in collaboration with EmberOT, released our 2024–2025 ICS/OT Vulnerability Intelligence Report. Check it out at: https://lnkd.in/ehG4DNPs Thank you all at EmberOT for your amazing support in getting this report out this year. Acknowledgement: Thank you Mikael Vingaard at the ICSRange for sharing with ICS[AP] the new ICS Advisory for PDUexperts. Visit the ICS[AP] CISA KEV Catalog Dashboards: https://lnkd.in/emzXBbBw View previous ICS Advisory Project weekly summaries: https://lnkd.in/eQKxhAEi To view the updated ICS Advisory Project Dashboards, visit: icsadvisoryproject.com Sign up to receive ICS[AP] Weekly Summary Slides & Other CERT and Vendor Advisory Summaries via email every Monday https://lnkd.in/eUwQrrj4 I appreciate everyone's comments & support. Have a great week!  #CISA #ot #ics #otsecurity #icssecurity  #cybersecurity #cybersecurityawareness #industrialautomation #buildingautomation #oilandgas #maritime #vulnerabilitymanagement Disclaimer: The views expressed in my LinkedIn posts and profiles are my own, not those of my employers or LinkedIn.

29

🔍 **Can Burp Suite Pro find smart contract vulnerabilities?** Short answer: **Not directly — and that distinction matters.** Burp Suite Pro is excellent at testing **Web3 front-ends, APIs, and wallet interactions**. It can uncover broken authentication, parameter tampering, insecure APIs, and flawed transaction construction. But when it comes to **actual smart contract vulnerabilities**—like reentrancy, access control failures, logic flaws, or gas abuse—Burp simply isn’t built for that job. That’s where many teams get it wrong. Our latest blog explains **where Burp Pro fits in a smart contract security program — and where it doesn’t**. More importantly, it shows why relying on a single tool creates blind spots that attackers are happy to exploit. 👉 Read the full breakdown here: [https://lnkd.in/gzFsWzry) At **DISC InfoSec**, we help organizations design **end-to-end security strategies**—covering Web apps, APIs, cloud, and emerging technologies like blockchain and smart contracts. Whether it’s tool selection, secure architecture reviews, or governance-driven risk assessments, we focus on **real risk reduction**, not tool theater. 💡 **Security isn’t about the tool you run — it’s about the risks you understand and manage.** 🔗 DISC InfoSec — Practical security. Real assurance. [https://lnkd.in/gEufQ9aq](https://lnkd.in/gEufQ9aq) If you’re building or assessing Web3 platforms and want clarity on **what to test, how to test it, and which tools actually matter**, let’s talk. https://lnkd.in/g6NA67d4 #CyberSecurity #Web3Security #SmartContracts #BlockchainSecurity #BurpSuite #AppSec #PenTesting #RiskManagement #InfoSec #DISCInfoSec #SecurityStrategy #vCISO

2

Big Story here, in my opinion: The group responsible for cybersecurity information sharing across state lines is hemorrhaging funds, and its operator is in emergency funding mode. It’s hard to overstate the importance of basic information-sharing in cybersecurity. When the name of the game is prevention, siloed state agencies rely on threat detection and vulnerability research services from their peers around the country, shared via open lines of communication. https://lnkd.in/gfwFgaiR

6

The document is primarily meant for federal agencies, but CISA hopes businesses will also use it to push vendors for software bills of materials. The Cybersecurity and Infrastructure Security Agency (CISA) has updated its recommendations for the minimum features of a software bill of materials (SBOM), the latest step in the agency’s campaign to encourage transparency in the software market. “The updates and additions included in this document will better position Federal Government agencies and other SBOM consumers to address a range of use cases, understand the generation process, and improve data quality,” CISA said in the new publication, which it released on Thursday. #confidentialcomputing #PQCReadiness #CBOM #KeyInsight #DataSecurityManager #ArmetAI #GRC #TPRM #CodeSigning #Tokenization

3

Heading to FutureCon CyberSecurity Events Milwaukee this week? Don't miss Cofense's own Joshua Bartolomie, as he presents "From OSINT to Compromise: The AI Phishing Attack Pipeline.” His 10:30 AM session will cover: 1️⃣ How adversaries turn your OSINT into personalized, polymorphic phishing emails that bypass traditional security. 2️⃣ Real-world examples of AI-generated attacks that have hit enterprise inboxes. 3️⃣ Actionable strategies to reduce your digital footprint and mitigate these advanced threats. While there, visit the Cofense booth to meet our team and learn how to strengthen your phishing defense program. See you soon!

16