OT Security Roundup: Siemens Exploit and AI Lab Findings

Siemens reported that CVE-2026-110936 in its Software Center desktop application has been exploited, with a signed executable loading malicious DLLs; version 4.0.9.8 contains the fix. Separately, Booz Allen Hamilton said advanced AI systems completed all eight goals in an isolated OT lab modeled on manufacturing, including moving from an initial breach into control-network actions.

Siemens ProductCERT confirmed exploitation of CVE-2026-110936 on Oct. 19, 2026. The flaw involved a legitimate signed Software Center build loading unchecked helper DLLs from its folder; version 3.5.8.7 was cited. Siemens said its application was unchanged and it knew of no breach to its systems, products, or update channel. The fix is 4.0.9.8, applied at next startup for existing installs.

Booz Allen Hamilton’s isolated OT lab evaluation, reported Oct. 20, found frontier AI models met all eight objectives in a multi-vendor manufacturing-like setting. One scenario reached control-network actions from a perimeter compromise in just over 16 minutes; another moved a robotic arm. Human operators approved exploits and physical-effect actions. Firewalls, segmentation, endpoint protection, and local controls slowed or blocked some steps, but no single safeguard consistently stopped the models.

Count? First para: Siemens(1) ProductCERT2 confirmed3 exploitation4 of5 CVE-2026-1109366 on7 Oct.8 19,9 2026.10 The11 flaw12 involved13 a14 legitimate15 signed16 Software17 Center18 build19 loading20 unchecked21 helper22 DLLs23 from24 its25 folder;26 version27 3.5.8.728 was29 cited.30 Siemens31 said32 its33 application34 was35 unchanged36 and37 it38 knew39 of40 no41 breach42 to43 its44 systems,45 products,46 or47 update48 channel.49 The50 fix51 is52 4.0.9.8,53 applied54 at55 next56 startup57 for58 existing59 installs.60

Second: Booz1 Allen2 Hamilton’s3 isolated4 OT5 lab6 evaluation,7 reporte