Hard-Coded Keys Travel With the Project File
CISA's 10 September advisory for AVEVA Pipeline Integrity Monitor puts the fix in a one-way migration, and the patch never reaches the copies.
Zoniax
Field Notes
Field notes on industrial operations intelligence — sensors, edge telemetry, and machine learning for processing plants.
Firmware 4.21 Alone Won't Close the M580 Safety Bypass
Schneider's notification for CVE-2026-3869 makes the fix a firmware version plus a rebuilt project, and on a SIL3 controller the rebuild is the slow half.
What a 5.6% Energy Price Month Does to a Plant Budget
Eurostat's July release put producer energy prices up 5.6% in a single month; how, and when, that reaches a plant's invoice depends on a contract most engineers have never read.
Block, Baseline, or Harden: Defending Siemens S7 PLCs
AI-written exploit scripts now masquerade as OT monitoring on the S7comm wire. Three defensive postures, and where each earns its keep.
Which CO2 the ETS Will Bill Your Incinerator For
From 2031 the EU ETS charges a waste plant for its fossil CO2 and lets the biogenic half go free; how you measure that split decides the bill.
When Your PLC Faces the Internet
Seven U.S. agencies updated their advisory on attackers rewriting the logic inside internet-exposed controllers; read from the control room, it's a story about an open door and a project file you filed as a backup.
Remaining Useful Life Without Run-to-Failure Data
You don't need a graveyard of failed bearings to forecast a repair, and the number on the dashboard was never the point.
AI on Both Sides of the OT Firewall
Brussels just put AI on both sides of the plant firewall. Read from the control room, the EU's new Cyber-AI Action Plan is part threat model, part toolkit.
What to Measure Before You Electrify the Boiler
A heat pump's economics live or die on two signals the boiler house has never logged: the temperature each duty truly needs, and the shape of the load across the day.
The Model That Goes Quiet: MLOps on the Plant Floor
Deployment is day one for an industrial model, not the finish line: how drift, retraining, and ownership decide whether it survives its second year.
Scoring Your CRA Readiness From the Plant Floor
ENISA just shipped a five-domain maturity model for the Cyber Resilience Act, and read against a real processing line it works less like a scorecard than a gap list.
The AI Act Slipped. The Machinery Deadline Didn't.
The digital omnibus pushed high-risk AI obligations out to December 2027, but the machinery regulation still lands in January 2027, and that gap is where the work sits.