Company
Rockwell Automation makes Allen-Bradley industrial control hardware, including PLCs and automation software used in manufacturing and critical infrastructure.
Siemens published 17 ICS advisories on Patch Tuesday, with critical flaws in Simatic S7-1500 CPUs, Industrial Edge and Ruggedcom Crossbow SAC. Some are patched; for others Siemens has issued only mitigations.
Reality
Port counts for 102, 502 and 44818 in a 22 September 2026 ZoomEye snapshot cannot be summed into one exposure figure, a dev.to analysis says. The totals are index entries for protocols with different vendor bases and risk profiles, so none of them is a count of vulnerable devices.
Reality
Anthropic announced a Critical Infrastructure Defense Program that pairs Claude with outside security firms, CrowdStrike among them. Alongside it, Anthropic is running a free, opt-in scanning service for open-source maintainers directly, CyberScoop reported.
Perspective Coverage
9 publishersReality
Anthropic's Cyber Mission puts Claude models, engineers and funding behind bug fixing, after Glasswing finds often waited months for a patch. Its free OSS Scanner sends unreviewed reports that Anthropic expects to be over 90% accurate, so it suits maintainers who have time to verify them.
Reality
Anthropic expects more than 90% of the unreviewed vulnerability reports its new OSS Scanner sends to open source maintainers to be real. Opt-in projects get findings faster and take on the work of catching the errors, such as wrong severity ratings.
Perspective Coverage
6 publishersReality
CISA and six partner agencies updated AA26-097A on July 22, extending the vendor scope beyond Rockwell and adding detection guidance for tampered reusable code modules.
Reality
The FBI and EPA's advisory I-073026-PSA blames a water-sector campaign across at least seven states on MicroLogix controllers left reachable on the open internet. The remedy they describe is network placement.
Reality
The controllers that failed in July sat on public cellular links, outside the network boundaries utilities spent years hardening, and the only municipal record of those SIMs is a line on a carrier invoice.
Reality
Gizmodo counts dozens of US water treatment plants attacked since February. The security consortium director it interviewed says the connection itself matters less than what the utility does with the data coming back off the controller.
Reality
The LightTok chip senses, stores and computes in the same pixel, and its authors report 87.3% recognition accuracy with a tenfold energy gain on turning light into tokens across an array of 1,024 pixels.
Reality
The 30 July advisory asks water utilities to validate what is reachable from outside. A query of ZoomEye's Modbus fingerprint on 15 September matched 47,028 assets on the public internet.
Reality
The two deals move industrial AI inside the automation vendors' stacks, which changes who a plant negotiates with over its optimization targets. The record does not yet say what that layer costs an operator to run.
Reality
The bureau and the EPA describe intruders changing IP addresses and switching passwords on internet-facing controllers, and the remedy they list is network design and credentials rather than firmware anyone can ship.
Reality
The largest of Nissan's new carts hauls about 4,190 pounds and the fleet can cover for a stalled machine, but the software once sent two robots to the same spot, and forklift drivers stay on the floor as insurance while five phases remain.
Reality
Rockwell found and reported both CVEs itself, and the only fix is firmware v2.002 on hardware wired into running machines. That puts this on a maintenance calendar rather than an incident bridge, with the web server outage the part that bites during a fault chase.
Reality
The gap between Rockwell's 95% of manufacturers funding AI and McKinsey's 2% embedding it in plant operations gets easier to read once you notice the 60% who never set a target for what the deployment should achieve.
Reality
CVE-2026-12663 covers every ControlFLASH build through V15.07, where any local account on an engineering workstation could stage code that runs with the privileges of the next engineer to open the firmware updater.
Reality
One crafted CIP packet drops the ControlLogix EtherNet/IP bridge. Every firmware version is affected, so the fix Rockwell offers is a different part number and an outage window to install it.
Reality
The four CVEs share one patch target and one recovery step, a manual service restart, but CISA's advisory carries no CVSS metrics and no per-CVE mapping, so the only axis an OT team can rank them on is network reachability.
Reality
CVE-2026-9633 and CVE-2026-9634 let a standard user on a Windows host plant a DLL where the tool will look for it, then collect Administrator or SYSTEM the next time an admin runs it. Version 10.01.00 fixes both.
Reality
Security · August 26, 2026 · Confirmed2 publishers