[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fUYLjhgSzFPBB3wHu0EPVEOG2-_6i-CZYbpMp7SWszPo":3},{"article":4,"iocs":54,"watch_terms":62,"solutions":63,"lesson":151},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"url":11,"image_url":12,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":31,"category":32,"article_tags":36},"05b733fc-623b-4315-82ee-7300b165b5ea","OT Security Guidance: NIST Drafts Updated Guide, CISA\u002FFBI Advise on ICS Integrators","ot-security-guidance-nist-drafts-updated-guide-cisa-fbi-advise-on-ics-integrator-7c5d04","Revision 4 of NIST’s operational technology security guide is open for public comments until November 30. The post OT Security Guidance: NIST Drafts Updated Guide, CISA\u002FFBI Advise on ICS Integrators appeared first on SecurityWeek.","NIST has published a draft of its Special Publication 800-82 Revision 4, an updated guide for operational technology (OT) security, which is open for public comment until November 30, 2026. The revision expands sector coverage and aligns with NIST Cybersecurity Framework 2.0. Concurrently, CISA and the FBI issued a fact sheet advising critical infrastructure operators to exercise caution with third-party ICS integrators, highlighting risks of excessive access and recommending least privilege, following an incident where foreign actors accessed sensitive data from a US industrial automation company.","NIST releases updated OT security guide draft; CISA\u002FFBI warn on ICS integrator risks.","https:\u002F\u002Fwww.securityweek.com\u002Fot-security-guidance-nist-drafts-updated-guide-cisa-fbi-advise-on-ics-integrators\u002F","https:\u002F\u002Fwww.securityweek.com\u002Fwp-content\u002Fuploads\u002F2026\u002F09\u002FOT-industrial-ICS.jpeg","2026-09-24T11:05:16+00:00","2026-09-24T12:00:33.56913+00:00",8,[17,20,23,25,27,29],{"name":18,"type":19},"Special Publication 800-82 Revision 4","product",{"name":21,"type":22},"Operational Technology (OT)","technology",{"name":24,"type":22},"Industrial Control Systems (ICS)",{"name":26,"type":22},"SCADA",{"name":28,"type":22},"Industrial IoT",{"name":30,"type":22},"Zero Trust","c5c77cdb-f7d7-4990-9436-c81dcbff1163",{"id":31,"icon":33,"name":34,"slug":35},null,"Policy","policy",[37,42,44,49],{"category":38},{"id":39,"icon":33,"name":40,"slug":41},"217d3263-c763-41ca-875e-06901f522fe0","NIST","nist",{"category":43},{"id":31,"icon":33,"name":34,"slug":35},{"category":45},{"id":46,"icon":33,"name":47,"slug":48},"d6f63bb8-0801-486a-be7f-171400700454","IoT\u002FOT","iot-ot",{"category":50},{"id":51,"icon":33,"name":52,"slug":53},"e7b231c8-5f79-4465-8d38-1ef13aea5a14","Threat Intelligence","threat-intelligence",[55,59],{"type":56,"value":57,"context":58},"mitre_attack","T1560.001","Staging archive files containing network schematics, device configurations, and customer details.",{"type":56,"value":60,"context":61},"T1071.001","Foreign cyber actors searched for SCADA and customer records.",[18],{"controls":64,"vendors":150},[65,93,121],{"slug":66,"name":67,"problem":68,"products":69},"privileged-access-management","Privileged access management (PAM)","Admin accounts stop being one stolen password away from control of everything.",[70,78,86],{"vendor_slug":71,"vendor_name":72,"vendor_logo":73,"product_slug":74,"product_name":75,"url":76,"description":77},"wallix","WALLIX","\u002Fvendor-logos\u002Fwallix.png","wallix-pam","WALLIX PAM","https:\u002F\u002Fwww.wallix.com\u002Fproducts\u002Fprivileged-access-management-software\u002F","Privileged access management with session recording, for IT and OT environments.",{"vendor_slug":79,"vendor_name":80,"vendor_logo":81,"product_slug":82,"product_name":83,"url":84,"description":85},"delinea","Delinea","\u002Fvendor-logos\u002Fdelinea.png","secret-server","Delinea Secret Server","https:\u002F\u002Fdelinea.com\u002Fproducts\u002Fsecret-server","Vault for privileged credentials with discovery, rotation and session recording.",{"vendor_slug":87,"vendor_name":88,"vendor_logo":89,"product_slug":66,"product_name":90,"url":91,"description":92},"threatlocker","ThreatLocker","\u002Fvendor-logos\u002Fthreatlocker.png","Privileged Access Management","https:\u002F\u002Fwww.threatlocker.com\u002Fcapabilities\u002Fprivileged-access-management","Gives elevated rights to specific applications only where needed, so users do not need local admin accounts.",{"slug":94,"name":95,"problem":96,"products":97},"asset-inventory","Cyber asset inventory","You cannot patch, monitor or protect the devices, cloud resources and accounts you do not know you have.",[98,106,114],{"vendor_slug":99,"vendor_name":100,"vendor_logo":101,"product_slug":102,"product_name":103,"url":104,"description":105},"axonius","Axonius","\u002Fvendor-logos\u002Faxonius.png","axonius-cyber-assets","Axonius Cyber Assets","https:\u002F\u002Fwww.axonius.com\u002Fplatform\u002Fcyber-assets","A continuously reconciled view of every asset, who owns it, which security controls cover it and where it drifts from policy.",{"vendor_slug":107,"vendor_name":108,"vendor_logo":109,"product_slug":110,"product_name":111,"url":112,"description":113},"runzero","runZero","\u002Fvendor-logos\u002Frunzero.png","runzero-platform","runZero Platform","https:\u002F\u002Fwww.runzero.com\u002Fplatform\u002F","Finds and fingerprints everything on the network and in the cloud, including IoT and OT devices, without agents or credentials, and flags exposures.",{"vendor_slug":115,"vendor_name":116,"vendor_logo":117,"product_slug":118,"product_name":116,"url":119,"description":120},"lansweeper","Lansweeper","\u002Fvendor-logos\u002Flansweeper.png","lansweeper-asset-inventory","https:\u002F\u002Fwww.lansweeper.com\u002Fproduct\u002Fasset-inventory\u002F","Discovery with and without agents that keeps one central, always-updated inventory of devices, software and their details.",{"slug":122,"name":123,"problem":124,"products":125},"third-party-risk-management","Third-party risk management (TPRM)","You know which suppliers could hurt you, and you hear quickly when one of them is breached.",[126,134,142],{"vendor_slug":127,"vendor_name":128,"vendor_logo":129,"product_slug":130,"product_name":131,"url":132,"description":133},"onetrust","OneTrust","\u002Fvendor-logos\u002Fonetrust.png","third-party-management","OneTrust Third-Party Management","https:\u002F\u002Fwww.onetrust.com\u002Fsolutions\u002Fthird-party-management\u002F","Supplier inventory, risk assessments and monitoring across privacy and security.",{"vendor_slug":135,"vendor_name":136,"vendor_logo":137,"product_slug":138,"product_name":139,"url":140,"description":141},"securityscorecard","SecurityScorecard","\u002Fvendor-logos\u002Fsecurityscorecard.png","security-ratings","SecurityScorecard Ratings","https:\u002F\u002Fsecurityscorecard.com\u002Fsolutions\u002Fuse-cases\u002Fsecurity-ratings\u002F","Outside-in security ratings and monitoring of suppliers.",{"vendor_slug":143,"vendor_name":144,"vendor_logo":145,"product_slug":146,"product_name":147,"url":148,"description":149},"bitsight","Bitsight","\u002Fvendor-logos\u002Fbitsight.png","bitsight-tprm","Bitsight Third-Party Risk Management","https:\u002F\u002Fwww.bitsight.com\u002Fproducts\u002Fthird-party-risk-management","Supplier assessments and continuous monitoring based on security ratings.",[],{"slug":152,"title":153,"body":154,"framework_refs":155,"framework_notes":169},"third-party-ics-integrator-access-enables-foreign-actor-breach-of-industrial-data","Third-Party ICS Integrator Access Enables Foreign Actor Breach of Industrial Data","Foreign actors were able to access sensitive data from a US industrial automation company by exploiting excessive privileges granted to third-party ICS integrators — a classic supply chain trust abuse scenario. Organizations frequently extend broad access to vendors and integrators for convenience, but fail to enforce least privilege or monitor that access adequately. This incident underscores that operational technology (OT) environments are high-value targets where a single compromised third party can expose critical industrial systems. The convergence of IT and OT networks amplifies the blast radius when perimeter trust is misplaced, making strict access governance and segmentation non-negotiable.",[156,157,158,159,160,161,162,163,164,165,166,167,168],"NIST SP 800-82 Rev. 4 (OT Security Guide)","NIST Cybersecurity Framework 2.0 — GV.SC (Supply Chain Risk Management)","NIST SP 800-53 AC-2 (Account Management)","NIST SP 800-53 AC-6 (Least Privilege)","NIST SP 800-53 IA-2 (Multi-Factor Authentication)","NIST SP 800-53 SI-4 (System Monitoring)","CIS Control 5 — Account Management","CIS Control 12 — Network Infrastructure Management","CIS Control 15 — Service Provider Management","IEC 62443-2-1 — Security Management System for Industrial Automation","CISA\u002FFBI ICS Integrator Fact Sheet (2024)","NERC CIP-005 (Electronic Security Perimeters)","NERC CIP-007 (Systems Security Management)",{}]