Security Insights
Latest threat analysis, industry news, and security best practices from our expert team.
CVE-2026-64892: Johnson Controls EasyIO Neo EC/CW Information Exposure — OT Defense and Remediation Guide
Overview CISA advisory ICSA-26-274-04 and the referenced CSAF identify CVE-2026-64892 in Johnson Controls EasyIO Neo Series EC and CW contro...
CVE-2026-27875: Johnson Controls Simplex Incident Manager Credential Exposure — Detection and Remediation Guide
CVE-2026-27875: Cleartext Credentials in Johnson Controls Simplex Incident Manager Memory CISA has published ICS Advisory ICSA-26-232-01 cov...
CVE-2026-64887 & CVE-2026-34492: Johnson Controls Airwall Hard-Coded Key and Path Traversal — Detection and Remediation Guide
CISA Flags Two Airwall Flaws — Hard-Coded Crypto Keys Meet Path Traversal CISA has published ICS advisory ICSA-26-225-03 covering two vulner...
CISA ICSA-26-225-14: Johnson Controls Metasys Building Automation Vulnerability — Detection and Hardening Guide
Introduction CISA has published ICS advisory ICSA-26-225-14 covering vulnerabilities in the Johnson Controls Metasys building automation sys...
CVE-2026-34490: Johnson Controls XAAP Android Cleartext Storage — Detection and Remediation
CVE-2026-34490: Johnson Controls XAAP Android Cleartext Storage — Detection and Remediation By Senior Security Consultant, Security Arsenal ...