💡 On Claroty Nexus, Debora Borel, Cyber Security Coordinator at Einstein Hospital Israelita in 🇧🇷 Sao Paolo, Brazil, explains how the intersection of #IT and #OT within hospitals presents a constant challenge for the infrastructure and for those responsible for crucial areas. There is a constant need for operational resilience, network segmentation, secure remote access, and identity protection, among other security practices.

Read here: https://nexusconnect.io/videos/debora-borel-on-itot-convergence-in-hospitals

#OT #Advisory VDE-2026-0001
JBL: DoS vulnerability in Flip 4

Any attacker in radio range can send malicious messages to cause the device to crash.
#CVE CVE-2025-41725

https://certvde.com/en/advisories/vde-2026-0001/

#CSAF https://harman.csaf-tp.certvde.com/.well-known/csaf/white/2026/hbsa-2025-0003.json #oCSAF

🛜 As cyber-physical systems (CPS) become more connected and complex, relying on isolated security tools isn’t enough. A programmatic approach that aligns visibility, #RiskManagement, and operational resilience is essential to truly protect CPS environments.

In our latest blog, we break down why moving beyond point solutions matters and how organizations can start building a sustainable CPS security strategy that scales across #IT and #OT. https://claroty.com/blog/why-a-programmatic-approach-is-essential-to-protect-cyber-physical-systems

Keine #Maschinensicherheit ohne #Cybersicherheit: #IT und #OT gehören untrennbar miteinander zusammen - das ist hinlänglich bekannt. Um diese Erkenntnis aber auch zur praktischen Umsetzung zu bringen, schafft die neue #EU #Maschinenverordnung unmittelbar in allen Mitgliedstaaten ab dem 20.01.2027 neue Pflichten zur #Cybersecurity.

Die Grundregel dabei ist wie auch schon für den #CRA: Was dann nicht konform ist, darf im EU-Markt nicht mehr in Verkehr gebracht werden:

https://www.elektronikpraxis.de/cybersicherheit-wird-zur-maschinensicherheit-a-7c13f33e8d24d864703e32a11463ecfe/

#OT #Advisory VDE-2025-109
Phoenix Contact: Unbounded growth of the session cache in TCP encapsulation service in FL MGUARD 2xxx and 4xxx firmware

The OpenSSL library used in the affected products is vulnerable to an unbounded growth of the session cache in the TLSv1.3 implementation.
#CVE CVE-2024-2511

https://certvde.com/en/advisories/vde-2025-109/

#CSAF https://phoenixcontact.csaf-tp.certvde.com/.well-known/csaf/white/2026/vde-2025-109.json

#OT #Advisory VDE-2026-004
WAGO: Vulnerabilities in Managed Switch

Several vulnerabilities have been identified in the WAGO 852‑1328 device's web‑based management interface, which is implemented using a modified lighttpd server and custom CGI binaries. These issues include multiple stack buffer overflows, an authentication bypass, and insecure credential storage.
#CVE CVE-2026-22906, CVE-2026-22904, CVE-2026-22903, CVE-2026-22905

https://certvde.com/en/advisories/vde-2026-004/

#CSAF https://wago.csaf-tp.certvde.com/.well-known/csaf/white/2026/vde-2026-004.json