Securing the unpatchable in an age of AI-driven vulnerabilities
Summary: Cisco Talos reports that AI-assisted code analysis is surfacing decades of technical debt, with Microsoft's September Patch Tuesday release carrying 975 vulnerability advisories and 1,415 vulnerabilities dropped this month against a pre-June average of 100 a month. The article notes that OT systems such as medical equipment, building management systems, and industrial critical systems often cannot be patched because they are certified for a fixed software set or run unsupported software, citing the NHS's 2017 WannaCry impact partly from end-of-life Windows XP and exploitation of end-of-life software against governmental systems in 2023.
Why it matters: A monthly vulnerability count that jumped from roughly 100 to 1,415 leaves any organization running certified or end-of-life OT with unmitigated known vulnerabilities, and the NHS's WannaCry experience shows what that looks like in practice. Talos's compensatory answer is visibility, micro-segmentation with VLANs and ACLs, and NGFW/IPS filtering, because air gaps and data diodes tend to be breached by staff and contractors taking shortcuts.
Read the original at Cisco Talos ↗
- Topics
- OT / ICS & Critical Infrastructure
- Related
- Siemens RUGGEDCOM APE1808 Cyber Risks · Nov 12, 2026How to Assess OT Incident Response Preparedness Cyber Risks · Nov 10, 2026Three China-Nexus Espionage Campaigns Linked Through Sparrow Malware Ecosystem Cyber Risks · Nov 10, 2026