From the PrOTect IT All Weekly Security Brief, sent to the list on September 17, 2026.
If you are using AI to defend OT systems and you can't tell when it's wrong, that's the problem. This week's episode gets into exactly that.
This week's episode: AI in OT - Why Humans Stay in the Loop and the Junior Problem with Jori VanAntwerp
Jori VanAntwerp comes back on the show for a completely unscripted conversation. The real value here is hearing two people who use AI every day make the case for keeping humans in the loop - not because AI is bad, but because AI shapes junior output to look senior without the understanding underneath. If your team is leaning on AI without being able to interrogate it, this one is worth an hour of your time.
Listen: https://protectitallpod.com/ep123/
This week in cyber
Schneider Electric put out an advisory for the SCADAPack x70 line - the 47x, 47xi, 47xd, 470R, and 57x. These are RTUs doing remote monitoring and control work in the field. If you have any of these, go read the advisory and check your patch status.
https://www.cisa.gov/news-events/ics-advisories/icsa-26-258-04
mySCADA myPRO Manager has vulnerabilities in versions 2.1 and below that could let an attacker access privileged management functions or send arbitrary SMS messages through a connected GSM modem. Attackers getting into your SCADA management layer is not a drill. Check your version.
https://www.cisa.gov/news-events/ics-advisories/icsa-26-258-03
Mandiant reported that an attacker hijacked an active AI coding-assistant session at a software provider and spread malware across about 100 internal code repositories. The assistant had recommended software the attacker had already poisoned. This is exactly the kind of AI risk that doesn't show up in the marketing brochures - your AI tool can be turned into a delivery mechanism if you haven't thought through what it can touch.
https://thehackernews.com/2026/09/attacker-hijacks-ai-coding-assistant.html
Do this this week
If you have SCADAPack x70 RTUs or mySCADA myPRO Manager in your environment, spend thirty minutes this week confirming what firmware or software version is running and whether a patch has been applied. If you don't know off the top of your head, that's the first thing to find out. Pull the advisory, compare your version, and document what you find.
Where I'll be and what I'm working on
The show reaches the people who actually run plants and utilities. If your company wants to be in front of that audience, sponsoring an episode is a straightforward way to do it.
https://protectitallpod.com/sponsor/?src=blog
Short of the week
This one is short and worth two minutes of your time: "You can't automate clarity you don't have."
https://www.youtube.com/shorts/ZDS6ae3x-vM
If the show has been useful to you, a YouTube subscribe helps more people find it. We are working toward 500 subscribers at https://www.youtube.com/@PrOTectITAll and every one counts.
Aaron