BlackHat USA 2026 (1–6 August) and DEF CON 33 (6–9 August) closed the hottest two weeks of the year for industrial security experts. Three presentations genuinely change the threat map for European MES: automated OPC UA break-in through poisoned certificates, AI model theft from edge Jetson servers via side-channel, and a supply-chain attack through the open-source Python ecosystem in SCADA environments. This article walks through each of the three vectors without marketing, plus a concrete list of changes to deploy within 30 days.

Digitalization of manufacturing plants has made automation systems and IT systems work together more closely than ever before. Machine data flows into MES, ERP, and analytical platforms, while IT systems increasingly need access to industrial devices to monitor their status, security, and compliance with corporate policies. This creates tremendous opportunities for business growth, but it also introduces an area that requires exceptional caution. Communication between IT and OT networks is one of the most sensitive points within a facility — it is exactly here where vulnerabilities can emerge, leading to cyberattacks or disruptions in production processes.