Daily OT Security News: October 04, 2026

This post summarizes CISA advisories (published Oct 1, 2026) that disclose multiple serious vulnerabilities in industrial control, OT/IoT and EV charging systems — including high‑severity CVEs affecting Armatura One and Monta, privilege‑escalation and path‑traversal flaws in ABB PCM600, cleartext credential exposure in Johnson Controls EasyIO Neo, and missing‑authorization issues in Meari IoT Cloud — and advises operators to apply vendor updates and compensating controls such as TLS enforcement, service account hardening, network segmentation, and monitoring. CISA reports no known exploitation for these issues at the time of publication.