CONTROL SIGNALThe 4-minute OT security brief.
ICS & SCADA threats, vendor advisories, and standards changes — curated from 30+ trusted sources, filtered for operational environments, in your inbox every morning. Built for the people who keep industrial systems running.
Free forever · No credit card
Alarm summary — today's signal
REPRESENTATIVE EXAMPLE · LIVE FEED, INCLUDED FREE| SEVERITY | REFERENCE | DESCRIPTION |
|---|---|---|
| ■ CRIT 9.8 | CVE-2025-12841 | Siemens SIMATIC S7-1500 — unauthenticated remote code execution via crafted Profinet packets. |
| ■ ADV 8.8 | ROCKWELL PSIRT | FactoryTalk View — improper access control allows local privilege escalation to SYSTEM. Affects v12.0 and earlier. |
| ■ CRIT — ACTIVE | CISA AA26-115A | Active exploitation targeting Modbus-enabled RTUs across water and energy sectors. Port 502 scanning confirmed. |
| ■ STD UPDATE | IEC 62443-3-3 | Edition 2 published — updated security level requirements for IACS component suppliers. |
The brief, as delivered
READS IN ~4 MINUTES · BEFORE YOUR FIRST MEETINGOne top story with operational context. Not a headline dump — the most important item of the day, with a direct note on what to check or prioritise in your environment, and how long that check should take.
Three to five quick hits. CVEs, vendor advisories, standards updates — one sentence each, severity-coded.
A weekly spotlight. One technology or standard explained properly, written for someone who actually works with this stuff.
Reply to any brief — what’s in your environment, what you want covered. Every reply is read and answered.
CISA warns of active exploitation targeting Modbus-enabled RTUs across water and energy sectors
Threat actors are actively scanning for exposed Modbus TCP port 502 on RTUs across critical infrastructure. CISA confirmed inciden…
If your RTUs are network-connected and Modbus is exposed — even internally — this is directly relevant. Estimated 15 min to verify…
Four streams, one loop
CURATED DAILY · IF IT DOESN'T APPLY TO INDUSTRIAL ENVIRONMENTS, IT DOESN'T GO INOT cybersecurity briefing
Threats, vulnerabilities, and advisories relevant to control systems — with a plain-English “why it matters to you” on every top story. New to OT cyber? Start here
Safety standards updates
Changes across IEC 61511, IEC 62443, NIST CSF, and ISA standards — flagged the day they happen.
Automation & industry news
Product releases, protocol developments, and industry moves — from Control Engineering, IET E+T, IEEE Spectrum.
Weekly tech spotlight
One technology explained properly each week — OPC UA, TSN, Ethernet-APL, IO-Link, SIL verification.
General notes
- This is not a content-marketing newsletter. It is an operational briefing. Every story is filtered for OT/ICS relevance before it goes in.
- Relationship to CISA ICS-CERT: CISA publishes raw advisories with no priority signal. Control Signal reads CISA, NVD, vendor PSIRTs, and industry press, then reports what matters today and why. It is the layer between the raw data and your working day.
Origin
Control Signal is built by a controls engineer who got tired of piecing together OT security news from a dozen places every morning — ICS-CERT, vendor portals, LinkedIn, RSS — before a shift.
No marketing fluff. No content that doesn’t apply to operational environments.
— GEORGE, FOUNDER · DRAWN & CHECKED BY THE SAME PERSON
Specification & pricing
FREE FOREVER FOR THE DAILY BRIEF · PRO 14-DAY TRIAL · CANCEL ANYTIME| Free£0 / month | Pro£20 / mo · £200 / yr | |
|---|---|---|
| Daily email brief | ● | ● |
| Dashboard, CVE feed, standards tracker | ● | ● |
| Vendor filtering — scoped to your vendors | — | ● |
| Standards watchlist with update alerts | — | ● |
| Asset register — map alerts to your hardware | — | ● |
| Delivery-day control · weekly digest | — | ● |
| Team seats · site profiles · API/SIEM · SSO | — | — |
| Enterprise: compliance export, dedicated support, SLA — contact us | Start free | Try Pro |
Your first brief arrives tomorrow morning.
Full daily brief on the free tier. No card needed.