Secomea

16/10/2026

Calling all OT security leaders heading to Chicago next week: we've got a few things planned for you. 🇺🇸

Secomea is bringing an important topic to the stage of 𝗠𝗮𝗻𝘂𝗦𝗲𝗰 𝗨𝗦𝗔: What does an agentic SOC need to make reliable decisions in industrial environments?

🎤 Our CTPO, Knud Kegel, will discuss how third-party access governance, identity information, approvals, and remote session evidence can provide the operational context needed for faster investigations and more trusted autonomous responses.

Agentic SOC Needs More Than AI. It Needs Context
📅 Wednesday, October 21 | 12:10 PM CT

Stop by the Secomea booth throughout the two days. Knud, Todd, Chet, and Juliana will be there to discuss OT security challenges, exchange ideas, and show you what we're working on.

🎟️ If you don't have a ticket yet, asset owners can get a complimentary pass using the code SECOMEA.

But there's more! ↓

If you're arriving a day early, join us for 𝗢𝗧 𝗼𝗻 𝗧𝗼𝘂𝗿 𝗖𝗵𝗶𝗰𝗮𝗴𝗼! 📍

On 𝗢𝗰𝘁𝗼𝗯𝗲𝗿 𝟮𝟬, we're hosting an evening for manufacturing, OT, and cybersecurity professionals to connect over food, drinks, and practical industry discussions.

Knud will share how one global manufacturer standardized Secure Remote Access across 100+ production sites and 90+ third parties – and what that foundation makes possible for the future of OT security.

→ Sign up here: https://eu1.hubs.ly/H0z6p1x0

15/10/2026

Secure Remote Access depends on more than secure technology. Customers also need evidence that 𝘁𝗵𝗲 𝘀𝗲𝗿𝘃𝗶𝗰𝗲 𝗯𝗲𝗵𝗶𝗻𝗱 𝗶𝘁 is supported by the right controls.

𝗦𝗲𝗰𝗼𝗺𝗲𝗮 𝗵𝗮𝘀 𝘀𝘂𝗰𝗰𝗲𝘀𝘀𝗳𝘂𝗹𝗹𝘆 𝗰𝗼𝗺𝗽𝗹𝗲𝘁𝗲𝗱 𝗮 𝗦𝗢𝗖 𝟮 𝗧𝘆𝗽𝗲 𝗜 𝗮𝘂𝗱𝗶𝘁 𝘂𝗻𝗱𝗲𝗿 𝗜𝗦𝗔𝗘 𝟯𝟬𝟬𝟬 – adding independent assurance around the organizational controls supporting our cloud services.

The engagement assessed those controls using the applicable AICPA Trust Services Criteria for Security, Availability, Processing Integrity, and Confidentiality.

The milestone adds another layer to a security program that already includes:
→ IEC 62443-4-1 certification for our secure product development lifecycle
→ Regular assessments against IEC 62443-4-2 requirements
→ Our role as a CVE Numbering Authority (since 2020)

Together, these efforts address complementary parts of the same responsibility: 𝗯𝘂𝗶𝗹𝗱𝗶𝗻𝗴 𝘀𝗲𝗰𝘂𝗿𝗲 𝗽𝗿𝗼𝗱𝘂𝗰𝘁𝘀 𝗮𝗻𝗱 𝘀𝘂𝗽𝗽𝗼𝗿𝘁𝗶𝗻𝗴 𝘁𝗵𝗲𝗺 𝘁𝗵𝗿𝗼𝘂𝗴𝗵 𝘁𝗿𝘂𝘀𝘁𝗲𝗱 𝘀𝗲𝗿𝘃𝗶𝗰𝗲 𝗼𝗽𝗲𝗿𝗮𝘁𝗶𝗼𝗻𝘀.

For customers evaluating Secomea, that means additional independent evidence across both areas – product development and SaaS operations – supporting security reviews, procurement processes, and vendor-risk assessments.

Read what was assessed, how SOC 2 complements IEC 62443, and download our public ISAE 3000 Assurance Report: https://eu1.hubs.ly/H0z5-Kk0

14/10/2026

Remote access is no longer just about getting the right expert connected to the right machine. Organizations also need to decide:

- who has authority
- who performs the work
- who is accountable
- how oversight is maintained across organizational boundaries

Join our webinar tomorrow to explore how the right governance model can help asset owners and third parties answer those questions more clearly.

𝗙𝗿𝗼𝗺 𝗰𝗼𝗻𝗻𝗲𝗰𝘁𝗶𝘃𝗶𝘁𝘆 𝘁𝗼 𝗳𝗲𝗱𝗲𝗿𝗮𝘁𝗲𝗱 𝗰𝗼𝗻𝘁𝗿𝗼𝗹
📅 October 15, 3:00 PM CEST / 9:00 AM ET

Register here: https://eu1.hubs.ly/H0z28wm0



P.S. Can't be there live? Register anyway, and catch up with the recording later. ⏯️

13/10/2026

400 refrigeration alarms a day. 1,500+ supermarkets to monitor. And a very good reason to take remote access security seriously.

For our customer AK-Centralen, that's the reality of monitoring supermarket cooling systems around the clock, 365 days a year.

And this week's cyberattack affecting hundreds of French supermarkets shows just 𝗵𝗼𝘄 𝗺𝘂𝗰𝗵 𝗶𝘀 𝗮𝘁 𝘀𝘁𝗮𝗸𝗲 𝘄𝗵𝗲𝗻 𝗿𝗲𝗳𝗿𝗶𝗴𝗲𝗿𝗮𝘁𝗶𝗼𝗻 𝘀𝘆𝘀𝘁𝗲𝗺𝘀 𝗮𝗿𝗲 𝗰𝗼𝗺𝗽𝗿𝗼𝗺𝗶𝘀𝗲𝗱.

Attackers reportedly manipulated refrigeration controllers remotely, triggering defrost cycles and leaving retailers with food losses estimated in the millions of euros.

For supermarket operators and their service providers, there's a critical balance to maintain: refrigeration equipment needs constant monitoring and timely intervention, without unnecessarily exposing the equipment to cyber threats.

𝗦𝗼 𝗵𝗼𝘄 𝗱𝗼 𝘆𝗼𝘂 𝗲𝗻𝗮𝗯𝗹𝗲 𝘁𝗵𝗮𝘁 𝗿𝗲𝗺𝗼𝘁𝗲 𝗰𝗼𝗻𝗻𝗲𝗰𝘁𝗶𝘃𝗶𝘁𝘆 𝘀𝗲𝗰𝘂𝗿𝗲𝗹𝘆?

Here's how our customer, AK-Centralen, approaches it:

→ 24/7 monitoring of cooling systems across more than 1,500 supermarkets.
→ Secure connectivity between refrigeration equipment and a centralized monitoring center.
→ Remote monitoring and intervention without requiring access to customers' wider IT networks.

All supported by Secomea's Secure Remote Access technology.

The exact intrusion path in France has yet to be confirmed. But the implications extend far beyond supermarket refrigeration.

Whether you're managing production lines, energy infrastructure, or other connected industrial equipment, the same questions apply:

Who can remotely access your OT assets? What can they control? And how is that access secured?

Read how AK-Centralen approaches secure, around-the-clock refrigeration monitoring: https://eu1.hubs.ly/H0z20CX0

12/10/2026

Patching a remote access gateway does not prove the attacker is gone.

That's one of the clearest lessons from this week's OT security developments.

Three very different routes toward operational systems stood out:

→ US authorities warned of an active campaign targeting internet-facing VPN gateways with leaked or reused credentials and password attacks. Attackers have created persistent accounts, locked out administrators, and supplied access to ransomware affiliates.

→ Critical vulnerabilities in energy-monitoring and historian software could enable remote code ex*****on or administrative access. Even after updating, older network settings may remain in place – meaning version status alone does not prove the exposure is gone.

→ A critical-infrastructure professional was targeted through a weaponized recruitment exercise designed to deploy malware and establish a remote access tunnel. Successful compromise and OT impact remain unconfirmed, but the case shows how a trusted engineer's workstation can become part of the route toward industrial environments.

🔌 Main takeaway: OT access control has to extend from the identity all the way to the asset – because compromise can happen anywhere along that route.

📰 Our latest 𝐎𝐓 𝐒𝐞𝐜𝐮𝐫𝐢𝐭𝐲 𝐖𝐞𝐞𝐤𝐥𝐲 looks at the verified developments, the remaining uncertainties, and the practical actions OT leaders should consider: https://eu1.hubs.ly/H0z02b10



–––

There is no shortage of OT security news. The hard part is knowing what deserves your attention. Each week, filters the signal from the noise and brings the most relevant developments together in one place. Follow Secomea for a new edition every Monday. ✉️

09/10/2026

✈️ Heading to ManuSec USA or it-sa this October? Come a day early. 📅

𝗢𝗧 𝗼𝗻 𝗧𝗼𝘂𝗿 is stopping in Chicago and Nuremberg this month – with both events taking place the day before major cybersecurity gatherings in the same city.

𝗢𝗰𝘁𝗼𝗯𝗲𝗿 𝟮𝟬 · Chicago 🇺🇸
Ahead of ManuSec USA, we're bringing manufacturing, OT, and cybersecurity professionals together for a focused evening on what it takes to standardize secure remote access at global scale.
Secomea CTPO Knud Kegel will share how one global manufacturer moved from fragmented remote access across 100+ production sites and 90+ third parties to a more consistent model for governing access – and what that foundation can enable next.
→ Sign up here: https://eu1.hubs.ly/H0y-8Cl0
🎟 Staying for 𝗠𝗮𝗻𝘂𝗦𝗲𝗰 𝗨𝗦𝗔? You'll find us there on October 21–22 too – and asset owners can get a complimentary ticket using the code SECOMEA.

𝗢𝗰𝘁𝗼𝗯𝗲𝗿 𝟮𝟲 · Nuremberg 🇩🇪
Ahead of it-sa Expo&Congress, Björn Gaworski-Dammann and Jeff Stahlnecker will explore another part of the OT security puzzle: the operational context AI needs to make better decisions.
We'll look at how remote access activity, approvals, audit trails, and session data can provide context behind security events – and what that could mean for faster investigations and more trusted AI-assisted security operations.
→ Sign up here: https://eu1.hubs.ly/H0y-8Dd0
🎟 Continuing on to 𝗶𝘁-𝘀𝗮 𝗘𝘅𝗽𝗼&𝗖𝗼𝗻𝗴𝗿𝗲𝘀𝘀? We'll see you there from October 27.

Two OT security conversations worth having. Two good reasons to arrive a day early. 📍

08/10/2026

If OT remote access went down tomorrow, how long could your operations afford to wait?

Remote access was once a convenient way to avoid travel and reduce service costs. Today, for many industrial organizations, it plays a much bigger role in how operations are supported, recovered, and kept running.

But how many have a contingency plan for when remote access itself fails?

🎙️ In the latest episode of 𝐓𝐚𝐥𝐤 𝐎𝐓 𝐭𝐨 𝐌𝐞, Jesper Andersen and Jeff Stahlnecker tackle a question that deserves more attention: 𝗪𝗵𝗲𝗻 𝗱𝗼𝗲𝘀 𝗢𝗧 𝗿𝗲𝗺𝗼𝘁𝗲 𝗮𝗰𝗰𝗲𝘀𝘀 𝗯𝗲𝗰𝗼𝗺𝗲 𝗶𝗻𝗳𝗿𝗮𝘀𝘁𝗿𝘂𝗰𝘁𝘂𝗿𝗲?

They discuss:

→ How dependent industrial operations have become on remote expertise
→ What downtime reveals about the criticality of remote access
→ When redundancy and recovery planning become necessary
→ Why Operations needs a seat at the table alongside Cybersecurity when defining remote access requirements

One takeaway worth considering: 𝗧𝗵𝗲 𝗰𝗿𝗶𝘁𝗶𝗰𝗮𝗹𝗶𝘁𝘆 𝗼𝗳 𝗿𝗲𝗺𝗼𝘁𝗲 𝗮𝗰𝗰𝗲𝘀𝘀 isn't measured by how often it's used. It 𝗶𝘀 𝗺𝗲𝗮𝘀𝘂𝗿𝗲𝗱 𝗯𝘆 𝘄𝗵𝗮𝘁 𝗵𝗮𝗽𝗽𝗲𝗻𝘀 𝘄𝗵𝗲𝗻 𝗶𝘁 𝗶𝘀𝗻'𝘁 𝗮𝘃𝗮𝗶𝗹𝗮𝗯𝗹𝗲.

Imagine your production line is down. The expert who can fix it is 2,000 miles away. And your remote access system is offline.
How long before this becomes a serious operational problem?

If the answer is measured in hours or minutes, this conversation is worth your time.

🎧 Listen to it on Spotify: https://eu1.hubs.ly/H0yYcm30

And check out more episodes here: https://eu1.hubs.ly/H0yYclc0

07/10/2026

Asset owners need control and oversight.

Third parties need practical access to deliver support.

Both needs are legitimate. And as vendor ecosystems grow, governing them through fragmented tools and processes gets harder.

Join our live webinar to explore how federated control can help create a model that works for both.

📅 October 15
⏰ 3:00 PM CEST / 9:00 AM ET
🎙️ Live webinar: 𝗙𝗿𝗼𝗺 𝗰𝗼𝗻𝗻𝗲𝗰𝘁𝗶𝘃𝗶𝘁𝘆 𝘁𝗼 𝗳𝗲𝗱𝗲𝗿𝗮𝘁𝗲𝗱 𝗰𝗼𝗻𝘁𝗿𝗼𝗹

Register here: https://eu1.hubs.ly/H0yVRjJ0



P.S. Live timing not ideal? Register anyway, and watch whenever it suits you. ⏯️

06/10/2026

2:03 am: an engineer remotely connects to an OT asset.

The login time appears unusual; the asset had recently undergone maintenance; and the configuration changes weren't planned.

What should an AI agent do? Based on those security signals alone, there are good reasons to investigate. 𝗦𝗵𝗼𝘂𝗹𝗱 𝘁𝗵𝗲 𝘀𝗲𝘀𝘀𝗶𝗼𝗻 𝗯𝗲 𝘀𝘁𝗼𝗽𝗽𝗲𝗱, 𝗷𝘂𝘀𝘁 "𝘁𝗼 𝗯𝗲 𝘀𝗮𝗳𝗲"??

Adding a few more facts changes both the interpretation and the response:

→ The engineer is known
→ An urgent maintenance ticket is open
→ Emergency access was requested
→ The plant manager approved it
→ Access is limited to the affected PLC

Looking at the 𝗿𝗲𝗺𝗼𝘁𝗲 𝗮𝗰𝗰𝗲𝘀𝘀 𝗲𝘃𝗶𝗱𝗲𝗻𝗰𝗲 𝗽𝗿𝗼𝘃𝗶𝗱𝗲𝘀 𝘁𝗵𝗲 𝗰𝗼𝗻𝘁𝗲𝘅𝘁 𝘁𝗵𝗮𝘁 𝘄𝗮𝘀 𝗺𝗶𝘀𝘀𝗶𝗻𝗴 𝗳𝗿𝗼𝗺 𝘁𝗵𝗲 𝗶𝗻𝗶𝘁𝗶𝗮𝗹 𝘀𝗶𝗴𝗻𝗮𝗹𝘀. What first appeared suspicious could instead be a legitimate intervention that is essential to restoring or maintaining operations.

This is one of the challenges with bringing Agentic SOC into OT.

Our new article explores what Agentic SOC means for OT, how it could work in practice, the role of Secure Remote Access as an evidence source, and what industrial organizations can start doing today to prepare.

Read it here: https://eu1.hubs.ly/H0yT70B0

If you'd rather continue the conversation in person, we'll also be talking about Agentic SOC at two upcoming events:

🇺🇸 𝗠𝗮𝗻𝘂𝗦𝗲𝗰 𝗨𝗦𝗔 · October 21-22 · Chicago
Join CTPO Knud Kegel on October 21 at 12:10 PM for his keynote:
"Agentic SOC needs more than AI. It needs context."

🇩🇪 𝗢𝗧 𝗼𝗻 𝗧𝗼𝘂𝗿 · October 26 · Nuremberg
Join Secomea Director of Product Management Björn Gaworski-Dammann and Senior Product Manager Jeff Stahlnecker as they explore how secure remote access is evolving beyond connectivity to provide the operational context modern OT security needs.
Sign up to attend: https://eu1.hubs.ly/H0yT6ZY0

Learn how Agentic SOC works in OT, what data AI-assisted response needs, where humans stay in the loop, and how industrial teams can prepare.

05/10/2026

The systems that can disrupt production are not always the ones controlling production.

That's the thread connecting several of this week's OT security developments:

→ Malware was identified in OT supporting aviation weather services in South Africa. The scope and operational impact are still under investigation, but the case is a reminder that operational dependence extends beyond core controllers.

→ Two actively exploited access-gateway vulnerabilities triggered urgent remediation guidance, followed days later by another flaw linked to targeted denial-of-service attacks. Patching was only part of the job: organizations also had to consider earlier compromise, forensic evidence, and continuity if the gateway needed to be isolated.

→ A critical vulnerability in an embedded software component exposed inherited risk inside a physical-access platform - the kind of component-level weakness that may never appear in a normal asset inventory.

→ A US government review found that many agencies still lacked complete, maintained inventories of networked IoT and OT assets.

𝗗𝗶𝗳𝗳𝗲𝗿𝗲𝗻𝘁 𝘀𝘁𝗼𝗿𝗶𝗲𝘀, 𝘀𝗮𝗺𝗲 𝘂𝗻𝗱𝗲𝗿𝗹𝘆𝗶𝗻𝗴 𝗽𝗿𝗼𝗯𝗹𝗲𝗺: can you identify the systems your operations depend on, understand how they are connected, and act quickly when one of those dependencies becomes unavailable or untrusted?

An OT asset inventory is part of that answer. But knowing that an asset exists is only the beginning.

You also need to know who owns it, what depends on it, who can reach it, through which connection, and what happens if that access or supporting system suddenly has to be isolated.

🔌 Main takeaway: operational resilience depends on understanding the systems around the process – and knowing what happens when one of them can no longer be trusted.

📰 That's what we explore in OT Security Weekly 008: Access gateway exploitation, operational dependencies, and asset visibility
Read it here: https://eu1.hubs.ly/H0yRLlL0

𝗦𝘁𝗮𝘆 𝗼𝗻 𝘁𝗼𝗽 𝗼𝗳 𝘁𝗵𝗲 𝗢𝗧 𝘀𝗲𝗰𝘂𝗿𝗶𝘁𝘆 𝗱𝗲𝘃𝗲𝗹𝗼𝗽𝗺𝗲𝗻𝘁𝘀 𝘄𝗼𝗿𝘁𝗵 𝗸𝗻𝗼𝘄𝗶𝗻𝗴 – without tracking dozens of sources yourself.