Briefing on recent advisory, research, and vendor integration items relevant to OT, IoT, CPS, and ICS security.
New Jersey advisory highlights PLC compromises in water and wastewater utilities
The New Jersey Cybersecurity & Communications Integration Cell reports that utilities in several states, including New Jersey, have reported compromises of internet-exposed programmable logic controllers (PLCs). The advisory notes that non-internet-exposed PLCs may remain reachable through other compromised internet-facing assets with a network path into OT environments.
Sophos and Nozomi Networks announce IT/OT security operations integration
Sophos announced an integration between Sophos Fusion and Nozomi Networks Vantage that the companies say brings OT telemetry, asset intelligence, and threat data into a security operations environment alongside IT endpoint, network, cloud, and identity data. The announcement describes cross-domain correlation and SOAR-based enrichment and response as intended capabilities.
Claroty-backed research spotlights cyber-physical asset identity gaps
Cyber Security Intelligence summarizes Claroty research reporting that 88% of cyber-physical systems do not transmit an exact product code and 76% transmit codes that differ from official vendor records, and it reports gaps in operating-system data. The article states the implication that asset-identification weaknesses can reduce confidence in vulnerability correlation, patching decisions, and risk prioritization.
Crytica and Forescout integrate device-integrity alerts for OT, IoT, and embedded environments
Industrial Cyber reports a Crytica Security and Forescout integration that brings Crytica RDAi device-integrity alerts into Forescout Vistaro; the companies say the combined offering is intended to extend continuous integrity monitoring, visibility, and response workflows across OT, IoT, IoMT, and embedded devices, including industrial control systems. These are vendor-stated capabilities.
