Gili Lev

CMMC compliance isn't a checkbox exercise—it's a strategic imperative for every DoD contractor. Many organizations delay action, waiting for final deadlines or clearer guidance. But NIST SP 800-171 requirements have been contractually mandated for years. Waiting only increases your risk exposure. At TXAZ Consulting Services, we provide a phased, engineering-led approach: • Conduct comprehensive readiness assessments to identify gaps. • Develop tailored remediation plans that align with your operational realities. • Implement technical controls and continuous monitoring solutions. • Prepare you thoroughly for certification audits with mock assessments and evidence documentation. Our certified cybersecurity experts bring decades of DoD and industry experience to ensure your compliance efforts are defensible and sustainable. Start reducing risk today. Don't wait for shifting timelines—build a compliance roadmap that protects your contracts and your reputation. How far along is your company on its CMMC path? #CMMCCompliance #CybersecurityServices #DoDContractors #CUIProtection #CyberAwareness

4

🔐 Happy to help with a new initiative from Aspen Digital's US Cybersecurity Group: Playing Offense, a project exploring the strategic shift from reactive cyber defense to proactive offense. Historically, offensive cyber actions were viewed as too risky, escalatory, or unreliable. That mindset is evolving. Through this series, members of the US Group and other thought leaders unpack what a whole-of-nation offensive cyber strategy could look like. We’ll examine emerging risks and opportunities, the evolving role of the private sector, and the frameworks needed to move forward. 📘 First in the series: “On the Same Page: A Common Language for Understanding Offensive Cyber Action” by Kemba Walden “Offense Won’t Cut it Alone: Don’t Forget the Cyber Fundamentals” by Sean Joyce Explore the project ➡️ https://lnkd.in/eRKZ2rdN #AspenCyber #OffensiveCyber #Cybersecurity #NationalSecurity #Leadership Vaibhav Garg, PhD

79

2 Comments

Good morning! Here is this week's ICS Advisory, Other CERT, and Vendor vulnerability advisories weekly summary for 23 - 27 February 2026. This past week, CISA released 12 new CISA ICS Advisories for the following vendors: Copeland, InSAT, CloudCharge, EV Energy, Chargemap, SWITCH EV, Mobility46, EV2GO, Gardyn, Johnson Controls, Inc. Pelco, Inc. and Schneider Electric. One update was released this past week for Honeywell Schneider Electric, Mitsubishi Electric, Hitachi Energy, ICONICS and Mitsubishi Electric. Based on the new CISA advisory, #Energy, #TransportationSystems, #Commercial #Facilities, #Healthcare and #PublicHealth, #Defense #Industrial Base, #Food and #Agriculture, Critical #Manufacturing, #Government #Facilities, #Financial #Services, #InformationTechnology, #Water and #WastewaterSystem are the potentially affected critical infrastructure (CI) sectors. The ICS Advisory Project identified 16 new ICS Advisories for Festo, ARC Informatique, Moxa, Phoenix Contact, ABB, Bosch Rexroth, Hitachi Energy, Ubiquiti Networks, Trumpf, PDUexperts, Socomec and one update for Hitachi Energy. View the summary details of other CERT & Vendor product advisories identified last week (23 - 27 February 2026) at: https://lnkd.in/efKiMsxs This past week, CISA added 3 new Known Exploited Vulnerability (KEV) Catalog. None added this week correlated to a CISA ICS Advisory. ICS Advisory Project identified one CVE: CVE-2020-11023 – JQuery Cross-Site Scripting (XSS) Vulnerability listed in the Festo advisory for CODESYS vulnerabilities in Festo Automation Suite [VDE-2025-108]. This week, ICS Advisory Project, powered by Industrial Data Works LLC, in collaboration with EmberOT, released our 2024–2025 ICS/OT Vulnerability Intelligence Report. Check it out at: https://lnkd.in/ehG4DNPs Thank you all at EmberOT for your amazing support in getting this report out this year. Acknowledgement: Thank you Mikael Vingaard at the ICSRange for sharing with ICS[AP] the new ICS Advisory for PDUexperts. Visit the ICS[AP] CISA KEV Catalog Dashboards: https://lnkd.in/emzXBbBw View previous ICS Advisory Project weekly summaries: https://lnkd.in/eQKxhAEi To view the updated ICS Advisory Project Dashboards, visit: icsadvisoryproject.com Sign up to receive ICS[AP] Weekly Summary Slides & Other CERT and Vendor Advisory Summaries via email every Monday https://lnkd.in/eUwQrrj4 I appreciate everyone's comments & support. Have a great week!  #CISA #ot #ics #otsecurity #icssecurity  #cybersecurity #cybersecurityawareness #industrialautomation #buildingautomation #oilandgas #maritime #vulnerabilitymanagement Disclaimer: The views expressed in my LinkedIn posts and profiles are my own, not those of my employers or LinkedIn.

29

CISA just released the blueprint for securely integrating AI into your physical operations. If you are looking to leverage AI to drive efficiency in your Operational Technology (OT) environments, this new joint guidance from CISA and international partners is a mandatory read. It moves beyond high-level theory and offers a practical framework for balancing the benefits of AI with the critical need for safety and reliability. Integrating AI into OT isn't just a software upgrade. It introduces unique risks to physical systems that standard IT security practices might miss. This guide breaks down exactly how to navigate those challenges without stalling innovation. Here are the core principles you need to adopt: Understand the Risk: Start by educating your personnel. Your team needs to understand not just how the AI works, but the specific security and safety implications of the AI lifecycle. Assess Before You Deploy: Evaluate the business case and the data security risks immediately. Don't let the promise of efficiency blind you to long-term integration debts. Lockdown Governance: Implement a governance framework that includes continuous testing. AI models drift, and your security protocols need to evolve with them. Embed Safety: Maintain human oversight and transparency. Ensure your incident response plans are updated to handle AI-specific anomalies. You can read the full breakdown and access the guidance here: https://lnkd.in/ef7VXFDf

8

VulnCheck November research highlights out now! Stats from the past month: • We added 95 new vulnerabilities to VulnCheck KEV in October, 80 of which weren't yet on CISA KEV • VulnCheck Canary Intelligence found 25 new KEVs, 22 of which had no prior publicly reported exploitation evidence • VulnCheck CNA assigned 162 CVEs in October for vulnerabilities lacking identifiers, including 13 with exploitation evidence We also dig into a few recent emerging threats, including Microsoft WSUS CVE-2025-59287. Big thanks to Patrick Garrity 👾🛹💙 Wade Sparks III and our exploit dev / intel folks for their insights and input! https://lnkd.in/eNTU2DBy

22

CISA just published new Zero Trust Microsegmentation guidance. What are the 3 most important takeaways, and what's missing? Watch my video commentary to find out.

39