Copia Automation has filed a notice with the US Securities and Exchange Commission for an exempt offering to raise $51.6 million in new funding. The company specialises in Industrial DevOps, providing a platform for Industrial Code Lifecycle Management. Its technology enables industrial enterprises to manage automation code that operates production lines, incorporating features such as automated backup and recovery, Git-based version control, and collaborative change management. Copia's platform integrates AI to enhance operational visibility and control. The system aims to help companies streamline production, prevent crises, and support growth. The filing was made under Regulation D of the Securities Act of 1933. Adam Gluck serves as chief executive officer.

Industrial cybersecurity threats for 2026: what changed. * Four emerging OT threats identified at S4x26 conference in Miami * Harmonic swarm attacks weaponize smart inverters to damage grid infrastructure * Hardware trojans designed for physical destruction expose OT security gaps * EU CRA penalties up to €15M reshape industrial security priorities Operational technology cybersecurity threats in 2026 are crossing boundaries that previous threat models failed to anticipate. At the S4x26 conference, presentations from Secvulre, Accenture, Copia Automation, ABS, and Emerson identified four threats reshaping how asset owners assess risk: the weaponization of distributed energy resources through harmonic swarm attacks, hardware trojans designed for physical destruction, Industrial Control Lifecycle Management (ICLM) as a replacement for IT-derived DevOps in OT, and compliance penalties that now exceed the estimated cost of many cyber incidents. For plant managers and engineers, these threats demand immediate reassessment of existing security frameworks and risk models. The findings emerged from S4x26, one of the world's premier gatherings for industrial cybersecurity professionals known for its forward-thinking approach to operational technology (OT) and industrial control systems (ICS) security, which attracts more than a thousand experts, innovators, and leaders. Unlike conventional vendor-driven conferences, S4x26's agenda focuses on in-depth technical sessions, proof-of-concept exhibits, and Birds of a Feather meetings that allow asset owners, researchers, and practitioners to discuss OT security in an unscripted manner rarely available at vendor expos. How do harmonic swarm attacks threaten power infrastructure? The shift from mechanical generators to software-controlled inverters has made the power grid programmable. By retuning control parameters, attackers can initiate harmonic swarm attacks: coordinated grid-wide oscillations that inject high-frequency signals at 20 kHz and above, while standard protection relays typically monitor frequencies up to approximately 3 kHz, allowing signals above that threshold to pass through undetected. The resulting electrical stress causes rapid dielectric puncture in substation transformers before traditional safety mechanisms activate. According to research presented at S4x26, the attack surface weaponizes the inverters' ability to generate, synchronize and focus destructive harmonic energy in the 15-28 kHz range, exploiting the physics of supraharmonics to bypass standard protection relays - which are effectively blind to these frequencies - and induce rapid dielectric breakdown in critical distribution assets. The attack uses the inverters as a distributed array of sensors to perform grid tomography via active probing, with the primary failure mechanism for targeted assets such as distribution transformers and capacitor banks being catastrophic insulation failure driven by high-voltage stress and partial discharge rather than thermal overload. This shifts the threat model from traditional cyber intrusions to coordinated cyber-physical attacks exploiting the physics of modern distributed energy infrastructure. What makes hardware Trojans a physical threat? The September 2024 pager and radio explosions across Lebanon and Syria demonstrated that a supply chain compromise can produce physical casualties, with Raphael Arakelian of Accenture presenting this incident at S4x26 as "Operation Grim Beeper," classifying it as a hardware trojan with malicious firmware co-development that used embedded firmware to trigger a concealed detonator via a heating circuit. For OT security, this exposes a gap in current threat models, as frameworks like MITRE EMB3D account for data interception and untrusted firmware but do not model embedded cyber-kinetic payloads designed for physical destruction. Traditional hardware trojan detection methods focus on logic modification and data exfiltration, not on devices engineered to cause physical damage. Malicious modifications to printed circuit boards (PCBs) are known as hardware Trojans, which may arise when malafide third parties alter PCBs premanufacturing or postmanufacturing and are a concern in safety-critical applications, such as industrial control systems. The implications extend beyond traditional cybersecurity controls. Plant managers must now consider supply chain verification for critical control components, particularly those sourcing from third-party manufacturers or using outsourced production. This aligns with broader industry concerns about agentic cybersecurity in manufacturing, where automated threat detection systems need to evolve alongside increasingly sophisticated attack vectors. Why are compliance penalties reshaping OT security investment? The EU Cyber Resilience Act (CRA) applies to manufacturers of "products with digital elements," which includes many OT devices and systems, with non-compliance penalties reaching up to 15,000,000 euros or 2.5% of global annual turnover, and because compliance failures produce immediate and certain financial consequences while cyber incidents remain probabilistic, many OT organizations now treat regulatory compliance as a higher priority than traditional risk-based cybersecurity spending. Vulnerability and incident reporting obligations begin on September 11, 2026, full compliance including CE-marking and conformity assessment is required from December 11, 2027, and non-compliance can trigger fines of up to €15 million or 2.5% of global annual turnover, whichever is higher. For North American manufacturers selling into European markets, this represents a fundamental shift in how security budgets are allocated and justified. A fourth threat reshaping OT security involves lifecycle management. IT DevOps prioritizes speed and continuous deployment, but in OT environments, 10% of personnel write code while 90% sustain it according to Adam Gluck of Copia Automation at S4x26, and applying IT DevOps practices to industrial control systems creates misaligned priorities, with Industrial Control Lifecycle Management (ICLM) redesigning the DevOps value stream for OT by prioritizing resilience and governance over speed. This addresses a fundamental mismatch between IT-centric security approaches and OT operational realities. Key Takeaway The four threats identified at S4x26 require immediate action from plant managers and engineers. Harmonic swarm attacks demand upgraded protection relays capable of monitoring frequencies above 20 kHz. Hardware trojan risks necessitate supply chain verification for critical control components. EU CRA compliance deadlines beginning September 2026 make regulatory penalties a certainty rather than a probability, reshaping security investment priorities. Finally, adopting Industrial Control Lifecycle Management frameworks tailored for OT environments - not borrowed from IT DevOps - addresses the fundamental operational differences between enterprise and industrial systems. Organizations that continue applying IT-centric threat models to OT environments will miss emerging attack vectors that exploit the physics of industrial processes, not just network vulnerabilities. Frequently Asked Questions Q: What frequency range do harmonic swarm attacks exploit that current protection systems miss? Harmonic swarm attacks inject high-frequency signals at 20 kHz and above, while standard protection relays typically monitor only up to approximately 3 kHz. This gap allows coordinated oscillations to cause rapid dielectric puncture in substation transformers before traditional safety mechanisms can activate, bypassing existing grid protection infrastructure. Q: how does the EU Cyber Resilience Act affect manufacturers outside europe? The EU CRA applies to any manufacturer whose products with digital elements - including industrial controllers and OT devices - reach the EU market, regardless of where the company is headquartered. Vulnerability reporting obligations begin September 11, 2026, with penalties up to €15 million or 2.5% of global annual turnover for non-compliance, making it a priority for North American and Asian manufacturers selling into European markets.

Industrial cybersecurity threats for 2026. June 18, 2026 OT cybersecurity threats in 2026 are crossing boundaries that previous threat models did not account for. At S4x26, presentations from Secvulre, Accenture, Copia Automation, ABS, and Emerson identified four threats reshaping how asset owners assess risk: the weaponization of distributed energy resources through harmonic swarm attacks, hardware trojans designed for physical destruction, Industrial Control Lifecycle Management (ICLM) as a replacement for IT-derived DevOps in OT, and compliance penalties that now exceed the estimated cost of many cyber incidents. Weaponized distributed energy resources. The shift from mechanical generators to software-controlled inverters has made the power grid programmable. An adversary with centralized control over smart inverters does not need to damage a device physically. By retuning control parameters, attackers can initiate harmonic swarm attacks: coordinated grid-wide oscillations that inject high-frequency signals at 20 kHz and above. Standard protection relays typically monitor frequencies up to approximately 3 kHz. Signals above that threshold pass through undetected. The resulting electrical stress causes rapid dielectric puncture in substation transformers before traditional safety mechanisms activate. The attack exploits the gap between what inverters can produce and what protection relays can see. Hardware trojans cross the digital-physical line. The September 2024 pager and radio explosions across Lebanon and Syria demonstrated that a supply chain compromise can produce physical casualties. Raphael Arakelian of Accenture presented this incident at S4x26 as "Operation Grim Beeper," classifying it as a hardware trojan with malicious firmware co-development. The attack used embedded firmware to trigger a concealed detonator via a heating circuit, regardless of user interaction. For OT security, this exposes a gap in current threat models. Frameworks like MITRE EMB3D account for data interception and untrusted firmware but do not model embedded cyber-kinetic payloads designed for physical destruction. Industrial Control Lifecycle Management replaces OT DevOps. IT DevOps prioritizes speed and continuous deployment. In OT environments, 10% of personnel write code while 90% sustain it, according to Adam Gluck of Copia Automation at S4x26. Applying IT DevOps practices to industrial control systems creates misaligned priorities. Industrial Control Lifecycle Management (ICLM) redesigns the DevOps value stream for OT by prioritizing resilience and governance over speed. The focus shifts to automated backups for critical devices, firmware image capture, and code drift monitoring. These practices lower Mean Time to Recovery (MTTR) when IT/OT convergence incidents occur, because the organization can restore a known-good state rather than rebuilding from documentation. Compliance risk overrides probabilistic cyber risk. In multiple critical infrastructure sectors, the financial consequence of a compliance failure now exceeds the estimated cost of a probable cyber incident. Security spending is following the regulatory pressure. In maritime operations, IACS UR E26 and E27 standards require vessels to demonstrate cyber resilience. Michael DeVolld of ABS Cyber Center of Excellence described the enforcement mechanism at S4x26: a failure to comply results in loss of class certificates and vessel detention at port, costing operators upward of $100,000 per day in lost revenue. The EU Cyber Resilience Act (CRA) applies similar pressure to manufacturers of products with digital elements. Ben Morgan of Emerson presented the penalty structure at S4x26: non-compliance carries fines of up to 15,000,000 euros or 2.5% of global annual turnover. Because compliance failures produce immediate, certain financial consequences while cyber incidents remain probabilistic, organizations are treating regulatory risk as the primary driver for OT security investment. Faq. 1. What is a harmonic swarm attack on the power grid? A harmonic swarm attack exploits software-controlled smart inverters in distributed energy resources (DERs). Attackers with centralized control over these inverters retune their parameters to inject high-frequency signals at 20 kHz and above, creating coordinated grid-wide oscillations. Standard protection relays monitor only up to approximately 3 kHz, so the attack passes through undetected. The resulting electrical stress causes dielectric puncture in substation transformers before safety mechanisms can respond. 2. What is Industrial Control Lifecycle Management (ICLM)? ICLM is a framework for managing industrial control systems that replaces IT-derived DevOps practices with OT-specific priorities. While IT DevOps emphasizes speed and continuous deployment, ICLM prioritizes resilience and governance. Key practices include automated backups for critical devices, firmware image capture, and code drift monitoring. Adam Gluck of Copia Automation presented ICLM at S4x26, noting that 10% of OT personnel write code while 90% sustain it, making speed-focused IT practices a poor fit. 3. How does the EU Cyber Resilience Act affect OT manufacturers? The EU Cyber Resilience Act (CRA) applies to manufacturers of "products with digital elements," which includes many OT devices and systems. Non-compliance penalties reach up to 15,000,000 euros or 2.5% of global annual turnover. Ben Morgan of Emerson presented the implications at S4x26. Because compliance failures produce immediate and certain financial consequences while cyber incidents remain probabilistic, many OT organizations now treat regulatory compliance as a higher priority than traditional risk-based cybersecurity spending. Related from IIoT World. This article is based on presentations at S4x26 in Miami, attended by Lucian Fogoros of IIoT World. Sources: Presentations by Secvulre, Raphael Arakelian of Accenture, Adam Gluck of Copia Automation, Michael DeVolld of ABS Cyber Center of Excellence, and Ben Morgan of Emerson. AI tools were used to help summarize and organize the content. Reviewed and edited by the IIoT World editorial team.