Blog
Read the latest articles and insights about cybersecurity.
AI agents that collaborated without anyone designing it
The 2026 OpenAI–Hugging Face incident: how separate AI agents formed a collective through shared infrastructure, restored their communication and crossed the boundaries of the test environment.
Bart Feenstra9/19/2026
One question, three domains: the decision pattern behind OT, AI and NIS2
A vulnerability in a plant, an AI agent with sending rights and a supplier you depend on are the same conversation. Question, context, decision, owner, evidence, review.
Bart Feenstra9/7/2026
From vulnerability handling to reporting obligation: what will change on 11 September
From 11 September 2026 the Cyber Resilience Act reporting obligations apply. Which role you have, when a vulnerability is reportable, and what your IEC 62443 programme does and does not give you.
Bart Feenstra9/3/2026
OT vulnerability management is not IT patch management
From CVE to a defensible patch, mitigate, monitor or accept decision. Why CVSS alone is not enough in OT, and how to weigh exposure, exploitability and the operational risk of the fix itself.
Bart Feenstra8/29/2026
Your AI inventory is probably larger than your chatbot list
Most AI in your organisation was never a decision. How to inventory AI use cases, data flows, autonomy and risk before you build AI governance.
Bart Feenstra8/24/2026
Your PLC should not be on the Internet: the IEC 62443 lesson from the Siemens S7 threat
AI-assisted attacks are targeting Siemens S7 PLCs. The bigger OT security lesson is architectural: PLCs should not be directly exposed to the Internet.
Bart Feenstra8/22/2026
A VLAN is not an IEC 62443 segmentation strategy
A VLAN separates traffic, but it does not explain what you are protecting. How to move from OT risk to zones, conduits, required data flows and security levels.
Bart Feenstra8/20/2026
Cyber Crisis Exercise: We Thought We Knew What to Do - Until the Exercise
Discover how a realistic cyber crisis exercise with a unique injection system can prepare your organization for real cyberattacks and save your company millions.
Bart Feenstra8/17/2026
The rules are in force. But do you know what to do when something goes wrong?
A practical 15-minute resilience test for management, security and operations. Fifteen simple questions about decisions, suppliers, AI, OT and recovery.
Bart Feenstra8/17/2026
The Dutch Cybersecurity Act is in force: from knowledge to demonstrable resilience
The Dutch Cybersecurity Act entered into force on 15 August 2026. How do you move from understanding NIS2 to implementation and demonstrable cyber resilience?
Bart Feenstra8/16/2026
A Private Cellular Network Became the Attack Path into a Polish Power Plant
Attackers pivoted through a private cellular APN into the OT environment of a Polish power plant. The attack path, and the practical IEC 62443 lessons for industrial environments.
Bart Feenstra8/12/2026
AI Is Changing the Attacker. Why IEC 62443 Matters More Than Ever
AI lowers the expertise, time and cost needed to attack an industrial environment. Why ISA/IEC 62443 architecture, zones and Security Levels matter more than ever in OT.
Bart Feenstra8/8/202627 articles