Safetybits Blog

Open industrial control cabinet with PLC modules, DIN-rail terminal blocks, and wiring

7 CISA Mitigations for Siemens S7 PLCs: How Safetybits Covers Each One

On August 19, 2026, CISA, the NSA, the FBI, the DOE, and the EPA jointly published AA26-231A, warning of an active threat against Siemens S7 Series PLCs, the full family, S7-200 through S7-1500, including the F-series safety controllers. CISA is explicit this is not theoretical: threat actors are conducting reconnaissance and capability development against U.S. installations right now, and the technique generalizes to any exposed PLC, not only Siemens.

Contextual Threat Intelligence for OT Security

Safetybits introduces Contextual Threat Intelligence, so you see exactly where your network traffic goes, and act before it turns into a breach. It shows live traffic by country on your plant dashboard, tells you which device talked to whom, evaluates every packet on the spot with rules built on Zero Trust philosophy that flag any destination outside your allow-list of countries, and marks connections to IPs with poor reputation, showing you how that IP is actually used. It could be a datacenter, a CDN, or a botnet.

Safetybits and Tekio Alliance: Operational resilience for heavy industry

Zaragoza, July 6, 2026 Protecting the critical networks of an industrial infrastructure leaves no room for trials or margins of error. In the face of regulatory demands such as the European NIS2 directive and an increasingly unstable geopolitical landscape, shop floor cybersecurity has shifted from a mere recommendation to a non-negotiable requirement for business continuity. However, the sector faces a historic gap: traditional IT tools do not understand the rhythm of production, and software vendors rarely step onto the factory floor.

Engineers reviewing OT compliance and audit controls during an inspection in an industrial facility.

Don't let a lost PDF ruin your OT audit

In the industrial cybersecurity (OT) sector, regulatory compliance has rightfully earned a bad reputation. It is often perceived as an overly bureaucratic process, written in legalese that is hard to apply on the factory floor or in critical infrastructure, forcing engineering teams to look away from real threats to focus on gathering paperwork.

Industrial power plant at night representing critical operational infrastructure

When Hacktivist DDoS Campaigns Turn Industrial Infrastructure into Weapons

Over the past months, coordinated DDoS campaigns linked to groups such as NoName057(16) have expanded across Europe. Through what is known as the DDoSia project, volunteers are recruited and orchestrated to launch distributed denial of service attacks against public institutions and private organizations.

Safetybits and Digital Hand Made announce a strategic partnership to strengthen OT cybersecurity in industrial environments

Zaragoza, 15th January 2026 Safetybits, a company specialized in cybersecurity for OT (Operational Technology) environments, and Digital Hand Made, a reference company in the design and implementation of secure technology solutions, have announced the signing of a strategic collaboration agreement aimed at strengthening the protection of industrial environments and supporting organizations in the continuous management of their OT security posture.

When AI Becomes the Attacker: Why Abnormal Behavior Still Betrays It

Artificial intelligence is reshaping cybersecurity, not only for defenders but also for attackers. Every week, we read about new tools that make phishing campaigns more convincing, code generation faster, and social engineering more believable. The same algorithms that help us detect anomalies are now being used to create them. This is both fascinating and worrying.

A lock surrounded by the stars in the european union flag

How will NIS2 affect European Industries

The European NIS2 directive arrived in 2024 to Europe to set a new high bar on the union’s cybersecurity. So far, the directive defines only a set of guidelines that state members were expected to transpose into local laws by October 17. However, it’s been a few months, and only a few countries have done their homework. Luckily, this is enough to let us know what to expect from the implementation of this directive.

Introducing Seamless Compliance Inside Safetybits OTSPM Platform

Safetybits introduces Seamless Compliance to help you comply with security standards and regulations. It continuously checks your security requirements so you can act as soon as you fall out of compliance or new risks appear, uses multi-domain correlation to provide rich context that enables guidance through mitigation actions, and reduces noise by documenting accepted risks.

The European Blackout Is the Closest We’ve Been to a Cyberattack, Even if It Wasn’t Caused by One.

This week, a Blackout hit southern Europe, with Spain being the most affected country. Twenty-four hours later, work continues to bring power to a few last places.