Briefings ·
OTASEC Daily Briefing | 31-10-2026
Siemens publishes a cluster of Node2Shell advisories, while actively exploited flaws in Ivanti Connect Secure and Cisco ASA/FTD remote access gear dominate the edge-security news.
1Siemens advisories cover Node2Shell (CVE-2026-111497) across its portfolio
Siemens ProductCERT issued three advisories on Node2Shell, an out-of-bounds write in the Brotli decoder bundled with Node.js that could allow remote code execution. They cover Siemens products in general, PAN-OS on RUGGEDCOM APE1808 devices, and Industrial Edge Management, where the affected functionality is not used or exposed unless Management Applications are installed. Siemens advises following the workarounds in the upstream Palo Alto Networks notifications.
For asset owners: Check whether you run RUGGEDCOM APE1808 or Industrial Edge Management with Management Applications installed, and apply the listed workarounds.
2CISA adds Ivanti Connect Secure flaws to KEV after active exploitation
CISA added two Ivanti Connect Secure flaws to its Known Exploited Vulnerabilities catalog, including CVE-2026-111357 (CVSS 8.8), a missing authentication issue. Attackers are reported to chain three flaws to gain unauthenticated root access.
For asset owners: If Ivanti Connect Secure provides remote access into your OT environment, prioritise patching and review the appliances for signs of compromise.
3Cisco fixes actively exploited ASA and FTD VPN flaw CVE-2026-76418
NCSC-NL reports that Cisco fixed a serious vulnerability in Secure Firewall ASA and FTD, which Cisco confirms is being actively exploited. CVE-2026-76418 has a CVSS score of 8.6 and sits in the Remote Access SSL VPN functionality.
For asset owners: Identify Cisco ASA and FTD devices that terminate remote access VPN at IT/OT boundaries and patch them promptly.
4TeamViewer flaw lets attackers take over helpdesk systems
Security.NL reports a TeamViewer vulnerability that allows attackers to take over the system connected to the one they are targeting, such as a helpdesk machine. No further details are given in the excerpt.
For asset owners: Review where TeamViewer is used for remote support or OT maintenance access and check for vendor updates.
5Australia reports 20% rise in cyber incidents
The ASD's ACSC responded to more than 1,500 cybersecurity incidents, a 20% rise, with threat notifications up nearly 80%. Industrial Cyber links the figures to risks for critical infrastructure.
For asset owners: Use such national figures to support your case for monitoring and incident response readiness in OT.