Anthropic announced a Critical Infrastructure Defense Program that pairs Claude with outside security firms, CrowdStrike among them. Alongside it, Anthropic is running a free, opt-in scanning service for open-source maintainers directly, CyberScoop reported.
Perspective Coverage
7 publishers
- Builder
- Builder 44%
- Operator
- Operator 35%
- Investor
- Investor 21%
Reality
- Evidence58
- Adoption38
- Hype gap+10
- Incentives72
- Confidence60
Anthropic expects more than 90% of the unreviewed vulnerability reports its new OSS Scanner sends to open source maintainers to be real. Opt-in projects get findings faster and take on the work of catching the errors, such as wrong severity ratings.
Reality
- Evidence55
- Adoption25
- Hype gap+10
- Incentives60
- Confidence60
CISA and six partner agencies updated AA26-097A on July 22, extending the vendor scope beyond Rockwell and adding detection guidance for tampered reusable code modules.
Reality
- Evidence70
- Adoption
- Insufficient
- Hype gap−10
- Incentives
- Insufficient
- Confidence65
buildOne report1 publisher The FBI and EPA's advisory I-073026-PSA blames a water-sector campaign across at least seven states on MicroLogix controllers left reachable on the open internet. The remedy they describe is network placement.
Reality
- Evidence40
- Adoption
- Insufficient
- Hype gap+20
- Incentives
- Insufficient
- Confidence35
The controllers that failed in July sat on public cellular links, outside the network boundaries utilities spent years hardening, and the only municipal record of those SIMs is a line on a carrier invoice.
Reality
- Evidence40
- Adoption15
- Hype gap+10
- Incentives70
- Confidence45
Gizmodo counts dozens of US water treatment plants attacked since February. The security consortium director it interviewed says the connection itself matters less than what the utility does with the data coming back off the controller.
Reality
- Evidence38
- Adoption44
- Hype gap+24
- Incentives55
- Confidence45
The LightTok chip senses, stores and computes in the same pixel, and its authors report 87.3% recognition accuracy with a tenfold energy gain on turning light into tokens across an array of 1,024 pixels.
Reality
- Evidence46
- Adoption7
- Hype gap+32
- Incentives62
- Confidence44
buildOne report1 publisher The 30 July advisory asks water utilities to validate what is reachable from outside. A query of ZoomEye's Modbus fingerprint on 15 September matched 47,028 assets on the public internet.
Reality
- Evidence58
- Adoption45
- Hype gap+12
- Incentives72
- Confidence62
The two deals move industrial AI inside the automation vendors' stacks, which changes who a plant negotiates with over its optimization targets. The record does not yet say what that layer costs an operator to run.
Reality
- Evidence42
- Adoption32
- Hype gap+18
- Incentives78
- Confidence40
The bureau and the EPA describe intruders changing IP addresses and switching passwords on internet-facing controllers, and the remedy they list is network design and credentials rather than firmware anyone can ship.
Publishers:fbi.gov
Reality
- Evidence66
- Adoption58
- Hype gap−12
- Incentives38
- Confidence62
The largest of Nissan's new carts hauls about 4,190 pounds and the fleet can cover for a stalled machine, but the software once sent two robots to the same spot, and forklift drivers stay on the floor as insurance while five phases remain.
Reality
- Evidence57
- Adoption42
- Hype gap+16
- Incentives71
- Confidence55
Rockwell found and reported both CVEs itself, and the only fix is firmware v2.002 on hardware wired into running machines. That puts this on a maintenance calendar rather than an incident bridge, with the web server outage the part that bites during a fault chase.
Reality
- Evidence74
- Adoption
- Insufficient
- Hype gap−8
- Incentives58
- Confidence66
The gap between Rockwell's 95% of manufacturers funding AI and McKinsey's 2% embedding it in plant operations gets easier to read once you notice the 60% who never set a target for what the deployment should achieve.
Reality
- Evidence40
- Adoption32
- Hype gap+18
- Incentives76
- Confidence52
CVE-2026-12663 covers every ControlFLASH build through V15.07, where any local account on an engineering workstation could stage code that runs with the privileges of the next engineer to open the firmware updater.
Reality
- Evidence66
- Adoption
- Insufficient
- Hype gap−8
- Incentives34
- Confidence70
One crafted CIP packet drops the ControlLogix EtherNet/IP bridge. Every firmware version is affected, so the fix Rockwell offers is a different part number and an outage window to install it.
Reality
- Evidence76
- Adoption
- Insufficient
- Hype gap−12
- Incentives42
- Confidence68
The four CVEs share one patch target and one recovery step, a manual service restart, but CISA's advisory carries no CVSS metrics and no per-CVE mapping, so the only axis an OT team can rank them on is network reachability.
Reality
- Evidence58
- Adoption22
- Hype gap+9
- Incentives55
- Confidence57
CVE-2026-9633 and CVE-2026-9634 let a standard user on a Windows host plant a DLL where the tool will look for it, then collect Administrator or SYSTEM the next time an admin runs it. Version 10.01.00 fixes both.
Reality
- Evidence68
- Adoption
- Insufficient
- Hype gap−12
- Incentives50
- Confidence63
CVE-2021-42260 still drives a major nonrecoverable fault on ControlLogix, CompactLogix and GuardLogix hardware below four firmware branches. A faulted safety controller needs a program download before it runs again.
Reality
- Evidence74
- Adoption
- Insufficient
- Hype gap−14
- Incentives58
- Confidence66
Rockwell reported CVE-2026-9637 to CISA itself. A length validation bug in CIP handling drops ControlLogix, CompactLogix and GuardLogix controllers into a major nonrecoverable fault, and clearing it needs a person at the cabinet.
Reality
- Evidence72
- Adoption
- Insufficient
- Hype gap−14
- Incentives45
- Confidence62
CISA's advisory covers Series B 5.202 and Series C 7.101 across five critical infrastructure sectors, but the published text carries no CVSS vectors and no corrected version numbers for an asset owner to upgrade to.
Reality
- Evidence64
- Adoption
- Insufficient
- Hype gap−12
- Incentives55
- Confidence58