Topic

vulnerability management

All articles on vulnerability management.

Cybersecurity

CVE and EPSS in OT Environments: Which Vulnerabilities to Fix When You Can't Patch Everything

Patching everything in an OT environment is impossible. CVSS alone is not enough to set priorities. EPSS adds the missing dimension: the probability that a vulnerability is being actively exploited today.

6 min read

Industrial OT network assessment with passive traffic analysis and ICS device profiling

Cybersecurity

How an OT Assessment Is Conducted: Phases, Methods and What You Really Find

An OT network assessment is not a vulnerability scan run on corporate IT. Different methodology, different risks, and often surprising results: here is what to expect from a properly conducted industrial assessment.

6 min read

Legacy industrial control panel with dated HMI and PLC in an Italian manufacturing plant

Cybersecurity

OT Systems That Cannot Be Updated: Compensating Controls and Risk Reduction

PLCs with 2008 firmware, HMIs running embedded Windows XP, systems that cannot be touched by contract: the reality of Italian plants. How to manage risk when patching is not an option.

5 min read

Cybersecurity

OT Security Maturity Model: From Zero Visibility to Advanced Detection

A practical four-level framework to assess OT security maturity and build a concrete roadmap. Each level has clear prerequisites, measurable goals and a defined next step.

6 min read

Vulnerability management dashboard for OT systems with contextualized scoring

Cybersecurity

Vulnerability Management in OT: Why Traditional Patching Does Not Work

In OT environments, traditional patch management is often impossible. Legacy systems, certifications to maintain, very rare maintenance windows: how to build a VM program that actually works.

4 min read