Build visibility before you build controls
Effective OT defense starts with knowing your assets, communications and operational dependencies—without disrupting the process.
Open the ICS fundamentals path →IT · OT · ICS CYBERSECURITY
Understand the threat.
Secure the operation.
Clear cyber intelligence and practical industrial security learning—built for defenders who work across enterprise and operational environments.
ITEnterprise defense
OTOperational resilience
ICSControl-system security
THREAT SURFACE ACTIVE
ITOTICS
MONITORLEARNDEFEND
FIELD BRIEFING
What matters now
IT DEFENSE
Identity is still the front line
Reduce attack paths through strong authentication, least privilege and continuous review.
LEARNING
From Purdue to protocols
Follow a structured path through zones, devices, monitoring and industrial traffic.
CYBER INTELLIGENCE
News that connects
enterprise and operations.
This week in cybersecurity: 21–26 September 2026. Selected IT and OT updates, with original sources and practical next steps.
22 Sep 2026
Check Point warns of active exploitation in gateway and management products
Check Point reports exploitation of CVE-2026-85102 and CVE-2026-93616. Fixes are available for both. The gateway fix was released on 9 September; the management fix accompanied this week’s advisory. Review affected versions, install the applicable fixes and follow the vendor’s investigation guidance.
Read original source ↗22 Sep 2026
Nine industrial advisories cover Siemens, lwIP and OpenPLC
CISA published nine ICS advisories covering Siemens industrial and building systems, the lwIP network stack and OpenPLC Runtime v3. Check the product list against your asset inventory and review each advisory’s mitigations. Plan OT changes with operations and test them before deployment.
Read original source ↗22 Sep 2026
Microsoft disrupts the EvilTokens cybercrime service
Microsoft announced a coordinated disruption of EvilTokens, linked to over 12,000 compromised inboxes across more than 10,000 organizations. The service combined device-code phishing with AI-assisted mailbox analysis and fraud. Microsoft advises independently verifying payment changes; compromised sessions and tokens also need attention, beyond password resets.
Read original source ↗CISA bulletin: 22 Sep 2026
Industrial Edge account-takeover flaw highlighted by CISA
CISA’s 22 September bulletin includes Industrial Edge Management. Siemens originally disclosed CVE-2026-18963 on 8 September: a password-reset authentication bypass. Fixed releases include Pro V1.15.20, Pro V2.2.2 and Virtual V2.9.1. Check the exact affected ranges in the vendor advisory; Siemens says its cloud service was already fixed.
Read original source ↗Updated 21 Sep 2026
Roundcube advisory updated with exploitation warning
Canada’s Cyber Centre updated its May advisory after open-source reporting indicated exploitation of CVE-2026-48842. Review Roundcube installations and apply the relevant security updates. The advisory identifies versions before 1.6.16 and 1.7.1; this week’s development is the exploitation warning, not a newly released patch.
Read original source ↗ICS CYBERSECURITY LEARNING
Learn the plant floor.
Defend it safely.
A practical, ordered path from foundational concepts to industrial protocols and detection. Start anywhere; the sequence is designed for newcomers.
VIDEO LESSON · 1 MIN 33 SEC
How Modbus works
Explore Modbus communication in an industrial control network.
MODULE 01BEGINNER · 35 MIN
OT security foundations
Understand why protecting an industrial process requires a different mindset from protecting an office network.
CORE IDEA
In OT, the goal is not only to protect data. It is to keep the physical process safe, available and under control.
SAFE PROCESS SIMULATION
DCS Lab.
Control a fictional water process, watch the trend and investigate safe fault scenarios. This training lab is not connected to real equipment.
SIMULATION ONLINE00:00
PROCESS OVERVIEW · AREA 01COMM: HEALTHY
FV-101
VOPEN 42%
TK-101
56%
755025LT101
P-101
RUNNING
NORMAL
Process within operating limits
LIC-101 · LEVEL CONTROLAUTO
PV56.0%
SP60.0%
OUT42.0%
LIVE TREND · 60 SECPV SP
CYBER / FAULT INJECTIONTRAINING ONLY
Select one scenario and observe the process, alarms and event log.
EVENT LOG
- INFO
Simulation initialized in automatic mode.
Learning objective
Compare what the operator sees with what the physical process is actually doing. In OT, safe response requires process context—not only a cybersecurity alert.
ABOUT DIGITAL BANO
Cybersecurity,
made operational.
Digital Bano is being rebuilt as a focused learning and intelligence platform for people working across IT, operational technology and industrial control systems.
The aim is simple: turn complex security topics into clear, useful guidance without losing the technical detail that matters.
01
Practical
Useful knowledge for real environments.
02
Clear
Technical concepts without needless complexity.
03
Responsible
Defensive learning with safety at the center.