Daily OT Security News: October 25, 2026

Five recent, source-verified developments relevant to operational technology and connected-device security. Original source dates are shown for each story. Vulnerability disclosures are not evidence of a production-system compromise. Apply changes only through approved OT change control. 1. Coast Guard publishes NVIC 02-26 maritime cybersecurity implementation guidance On October 20, the Coast Guard announced NVIC 02-26, guidance for owners and operators covered by the Maritime Transportation Security Act and 33 CFR Part 101, Subpart F. It explains how to document a qualified Cybersecurity Officer, conduct a Cybersecurity Assessment, and develop and submit a Cybersecurity Plan, with July 16, 2027 given as the deadline. Four enclosures address plan development and maintenance, a sample officer-designation letter, penetration-testing guidance, and an optional NIST Cybersecurity Framework-based risk-filtering method to scope environments, identify critical IT and OT systems, and assess dependencies. The testing guidance discusses periodic tests during five-year renewal cycles and OT safety…