OT Security Guidance: NIST Drafts Updated Guide, CISA/FBI Advise on ICS Integrators

NIST has released a draft update to its Operational Technology (OT) Security Guide (Special Publication 800-82 Revision 4) for public comment, expanding coverage to additional sectors and aligning with the NIST Cybersecurity Framework 2.0. Concurrently, CISA and the FBI issued guidance warning critical infrastructure operators about risks associated with third-party ICS integrators, emphasizing the principle of least privilege and recommending contractual cybersecurity requirements. The agencies highlighted a 2025 intrusion where foreign actors accessed an industrial automation company's network, potentially enabling disruptive downstream attacks. The guidance advises monitoring remote access, minimizing exposure, and incorporating cybersecurity controls in service agreements.

• securityweek.com/ot-security-guidance-nist-drafts-updated-guide-cisa-fbi-advise-on-ics-integrators/ (opens in a new tab)

• Exploitation Targeting Node-RED, a Tool Embedded in ICS ProductsCampaign2026-11-03
• Whole-of-state defense: How SLED agencies can secure critical infrastructure in the AI eraAnalysis2026-10-27
• MITRE ATT&CK v20 Catalogs AI Abuse, MFA Bypass, Water Utility AttacksNews2026-10-19
• In Other News: ICS-Sniper Attack, Hacking XWorm Malware Operators, $250k Chrome ExploitAnalysis2026-10-16
• ICS Patch Tuesday: Siemens Issues 17 Advisories, Rockwell Fixes ArmorBlock Takeover FlawHighVulnerability2026-10-14