Business Development Representative

Rockwell Automation expands SecureOT Managed Services to support Fortinet firewalls and existing customer infrastructure. New offerings help manufacturers secure and maintain OT environments regardless of existing infrastructure investments MILWAUKEE, Oct. 6, 2026 /PRNewswire/ - Rockwell Automation, Inc. (NYSE: ROK), the world's largest company dedicated to industrial automation and digital transformation, today announced two new additions to its SecureOT(TM) industrial cybersecurity solution suite: Firewall Managed Services with Fortinet and Infrastructure Managed Services. The new offerings give manufacturers greater flexibility in how they secure and manage operational technology (OT) environments, with support for Fortinet firewalls and existing customer-owned infrastructure. As cyber threats targeting industrial operations continue to increase and skilled OT security resources remain difficult to source, manufacturers are looking for new ways to strengthen resilience without adding complexity. Rockwell's latest research found that cybersecurity now ranks among manufacturers' top external business risks, reflecting growing concern as IT and OT environments become more connected. The new services provide around-the-clock monitoring, maintenance and professional management designed to help manufacturers reduce risk, improve resiliency and sustain uptime. Firewall Managed Services with Fortinet Rockwell's Firewall Managed Services now supports Fortinet FortiGate firewalls, extending the service to a broader range of standard hardware options available for customers. FortiGate firewalls bring high-performance security to OT environments with cost-effective scalability across sites, advanced threat detection backed by FortiGuard Labs OT threat data, and lower total cost of ownership than many alternatives. Under this service, Rockwell manages Fortinet firewalls on the customer's behalf, handling monitoring, alarm management, rule change management, patching and firmware updates. Customers get a single point of contact for the health and maintenance of their firewall. The goal is simplicity: one managed service contract, one professional team and one less thing to worry about. Infrastructure Managed Services Infrastructure Managed Services delivers a scalable, fully managed solution designed to strengthen operational resiliency across industrial network and compute environments. By combining 24/7 global support and secure monitoring with hardware lifecycle management, the solution helps industrial organizations maintain high availability and uptime, reduce cyber risks and decrease operating costs. Infrastructure Managed Services offers turnkey solutions to manage defensible architectures, including Industrial Data Centers (IDC), VersaVirtual(TM) Appliance (VVA), firewalls and network switches. The managed services have now expanded to help organizations manage existing infrastructure they already own, including servers, virtualization platforms, switches and backup systems from vendors, such as Fortinet. This is designed for manufacturers who have already invested in their infrastructure but want Rockwell's operational experience managing it going forward. "Manufacturers need cybersecurity solutions that fit their operations, not the other way around," said Aaron White, global capability manager, infrastructure managed services, Rockwell Automation. "Whether they're standardizing on Fortinet firewalls or looking for professional support managing infrastructure they've already deployed, these SecureOT services provide the flexibility and industry experience needed to help secure critical operations and maintain uptime." Both Firewall Managed Services with Fortinet and Infrastructure Managed Services are available now as part of Rockwell's SecureOT solution suite, which helps manufacturers assess, protect and continuously improve their OT security posture. To learn more about latest SecureOT managed services and Rockwell's latest cybersecurity offerings, visit www.rockwellautomation.com/en-Rockwell Automation, Inc./capabilities/industrial-cybersecurity. Frequently Asked Questions: What are Rockwell Automation's new SecureOT managed services? Rockwell Automation has introduced Firewall Managed Services with Fortinet and Infrastructure Managed Services, expanding its SecureOT portfolio of managed cybersecurity and infrastructure solutions for industrial operations. What does Firewall Managed Services with Fortinet provide? The service provides professional management of Fortinet FortiGate firewalls, including 24/7 monitoring, alarm management, firmware updates, rule change management, patching and ongoing operational support. It focuses on the health and maintenance of the customer's firewall appliance. This allows access to one of the industry's most widely adopted firewall platforms. What is Infrastructure Managed Services? Infrastructure Managed Services provides professional monitoring, lifecycle management and operational support for industrial networks, servers, virtualization platforms, firewalls and related OT infrastructure. The service helps manufacturers improve availability, reduce cyber risk and extend the value of existing investments, freeing up internal resources to focus on other efforts. Can manufacturers use SecureOT managed services with infrastructure they already own? Yes. Infrastructure Managed Services now supports customer-owned infrastructure from leading vendors, including Fortinet. This allows manufacturers to leverage Rockwell's professional help without replacing existing hardware or technology investments. About Rockwell Automation Rockwell Automation, Inc. (NYSE: ROK ), is a global leader in industrial automation and digital transformation. Rockwell Automation, Inc. connect the imaginations of people with the potential of technology to expand what is humanly possible, making the world more productive and more sustainable. Headquartered in Milwaukee, Wisconsin, Rockwell Automation employs approximately 26,000 problem solvers dedicated to its customers in more than 100 countries as of fiscal year end 2025. To learn more about how Rockwell Automation, Inc. is bringing the Connected Enterprise(R) to life across industrial enterprises, visit www.rockwellautomation.com . SOURCE Rockwell Automation, Inc. Published October 6, 2026 About Rockwell Automation Rockwell Automation, Inc. (NYSE: ROK), is a global leader in industrial automation and digital transformation. Rockwell Automation, Inc. connect the imaginations of people with the potential of technology to expand what is humanly possible, making the world more productive and more sustainable. Headquartered in Milwaukee, Wisconsin, Rockwell Automation employs approximately 26,000 problem solvers dedicated to its customers in more than 100 countries as of fiscal year end 2025. To learn more about how Rockwell Automation, Inc. is bringing the Connected Enterprise(R) to life across industrial enterprises, visit www.rockwellautomation.com. About the Rockwell Automation PartnerNetwork Rockwell Automation believes Rockwell Automation, Inc. is better together - and Rockwell Automation, Inc. do its part by delivering an expansive, global partner ecosystem of market-leading technology, superior support and services, and an integrated and streamlined approach to business. Succeed on an international scale by utilizing its network's breadth of innovative technologies and services that no single vendor can provide alone. To learn more about how the PartnerNetwork is helping to deliver the value of The Connected Enterprise, visit PartnerNetwork Program.

Critical Zero-Day Exploitation Surge: FortiMail and Cisco SD-WAN Under Active Attack. Security agencies are scrambling as critical zero-day vulnerabilities in FortiMail (CVE-2026-104286) and Cisco SD-WAN (CVE-2026-76504) are actively exploited in the wild. CISA has mandated immediate patching for federal agencies to mitigate the risk of arbitrary file writes and remote code execution. Encrygma is selling the entire Full Cyber Weapon Research of Critical Zero-Day Exploitation Surge: FortiMail and Cisco SD-WAN Under Active Attack for ₿ 0.10 BTC. Contact Encrygma. Encrygma AI Cyber Weapons Advisory Services: ₿ 0.10 BTC Encrygma sell the full cyber research about this cyber weapon, including full source code, technical blueprints, exploits, implants and control and command dashboards. Consult with Encrygma · Telegram Executive takeaway - TL;DR. * Category: - Zero-Day Exploits * Severity: - Critical * Actor Type: - APT * Geography: - Global * Confidence: - Confirmed * CVE: - CVE-2026-104286, CVE-2026-76504 * Source: - CISA / Help Net Security * Read Time: - 4 min Executive summary. In the last 48 hours, the cybersecurity landscape has been dominated by the active exploitation of critical zero-day vulnerabilities in enterprise-grade infrastructure. Specifically, Fortinet's FortiMail and Cisco's SD-WAN solutions have been targeted by threat actors, leading to immediate intervention by the Cybersecurity and Infrastructure Security Agency (CISA). These vulnerabilities allow for unauthenticated remote access and arbitrary file manipulation, posing a severe risk to global enterprise networks. Threat analysis. The current wave of attacks highlights a trend of targeting edge appliances that provide critical network connectivity and security services. By exploiting these devices, attackers gain a foothold within the internal network, bypassing traditional perimeter defenses. The rapid addition of these vulnerabilities to the CISA Known Exploited Vulnerabilities (KEV) catalog underscores the severity and the high probability of widespread automated exploitation. Technical details. * FortiMail (CVE-2026-104286): This critical vulnerability (CVSS 9.8) stems from improper path traversal and null byte neutralization. It allows unauthenticated attackers to write arbitrary files to the underlying system via crafted HTTP/HTTPS requests. This effectively grants the attacker the ability to drop web shells or configuration files to maintain persistence. * Cisco SD-WAN (CVE-2026-76504): This flaw represents the fifth zero-day exploitation event for Cisco's SD-WAN product line this year. While specific technical mechanics are being closely guarded, the vulnerability facilitates remote code execution, allowing attackers to bypass authentication and execute commands with elevated privileges. Attribution Assessment. While specific threat actor groups have not been definitively named in these latest campaigns, the nature of the exploits - targeting high-value infrastructure appliances - is consistent with the tactics, techniques, and procedures (TTPs) of state-sponsored Advanced Persistent Threat (APT) groups. These actors prioritize persistent access to government and critical infrastructure networks to facilitate long-term espionage. Implications. The exploitation of these devices provides attackers with a "master key" to internal network segments. Organizations that fail to patch these vulnerabilities are at immediate risk of data exfiltration, ransomware deployment, and lateral movement. The speed at which these vulnerabilities have moved from discovery to active exploitation suggests that exploit code is being shared or sold within underground forums. Recommendations. * Immediate Patching: Organizations must prioritize the deployment of vendor-supplied patches for FortiMail and Cisco SD-WAN appliances. * Compromise Assessment: Conduct a thorough review of system logs for unauthorized file modifications or unexpected outbound traffic originating from these appliances. * Network Segmentation: Isolate management interfaces for edge appliances from the public internet where possible. * Monitor CISA KEV: Continue to monitor the CISA KEV catalog for further updates and guidance on remediation. Need zero click spyware for android and ios? Encrygma delivers serverless, offline, quantum-safe encrypted communications built for executives, agencies, and operators facing zero-click spyware and advanced mobile surveillance threats.

Fortinet FortiMail CVE-2026-104286 zero-day exploitation alert. Urgent: Active exploitation of critical FortiMail zero-day CVE-2026-104286 allows unauthenticated file writes. Immediate patching and mitigation required. The cybersecurity community is facing an urgent threat with the active exploitation of a critical zero-day vulnerability in Fortinet's FortiMail email security appliance, identified as CVE-2026-104286. This path traversal flaw can be triggered via crafted HTTP or HTTPS requests to the FortiMail web interface, enabling unauthenticated attackers to write arbitrary files remotely. The vulnerability affects multiple FortiMail versions from 7.2.0 through 8.0.1 and holds a formidable CVSS score of 9.8, reflecting its severity and exploitability. Understanding the FortiMail CVE-2026-104286 Vulnerability. At the core, CVE-2026-104286 involves a path traversal and null byte injection flaw within FortiMail's web management interface. The vulnerability allows attackers to bypass normal path restrictions and security validations, resulting in arbitrary file writes without authentication. This potentially escalates to remote code execution, compromising the integrity and availability of the email gateway. Given FortiMail's role in enterprise email security, such compromise can facilitate advanced persistent threats, data exfiltration, and lateral movement inside networks. Active exploitation and risk implications. Reports confirm that the vulnerability is being actively exploited in the wild, with threat actors likely leveraging unauthenticated HTTP/HTTPS requests to mount attacks. Detailed attribution and attack patterns remain undisclosed publicly; however, the inclusion of CVE-2026-104286 in CISA's Known Exploited Vulnerabilities (KEV) catalog underscores the high impact and urgency. Federal agencies have been mandated to remediate this flaw by early October 2026, highlighting the critical nature of the risk. This active exploitation is particularly concerning as it requires no credentials or user interaction, vastly increasing the attack surface. Since FortiMail functions as a critical security component filtering and securing email traffic, compromise here can undermine an organization's entire cybersecurity posture. Mitigation strategies and security recommendations. While Fortinet is preparing patches for FortiMail versions 7.4.9, 7.6.7, and 8.0.2, these fixes are not yet widely available. In the interim, organizations must implement immediate mitigation steps: * Disable Identity-Based Encryption (IBE): Disabling IBE via FortiMail's CLI prevents exploitation of the vulnerable features associated with this encryption method. * Restrict Management Interface Access: Limit access to the FortiMail web management interface to trusted IP addresses or networks to reduce exposure. * Conduct Comprehensive Log and Configuration Reviews: Hunt for indicators of compromise (IoCs), including suspicious IP addresses and unauthorized file changes, as published by Fortinet and CISA. * Implement Network Segmentation: Isolate critical email gateway infrastructure to prevent lateral movement if compromise occurs. * Enforce Least Privilege Access Controls: Minimize access rights and restrict administrative roles. * Penetration Testing and Continuous Monitoring: Regular security assessments help detect exploitation attempts and strengthen defenses. Organizations should prioritize patching as soon as official updates become available and align incident response plans to cover this zero-day exploitation scenario. Broader cybersecurity insights. The exploitation of CVE-2026-104286 illustrates emerging attacker tactics of leveraging unauthenticated path traversal flaws in enterprise security appliances. This trend emphasizes the need for vigilant vulnerability management, especially for internet-facing systems integral to organizational security. Moreover, the rapid public disclosure and CISA intervention reflect a growing urgency within the cybersecurity community to respond swiftly to critical zero-days threatening foundational infrastructure. Security leaders must maintain proactive communication with vendors and regulatory bodies to anticipate and mitigate such evolving risks. Conclusion. CVE-2026-104286 represents a severe and actively exploited zero-day threat to Fortinet FortiMail appliances, enabling unauthenticated arbitrary file writes and potential remote code execution. Given FortiMail's critical security role, successful exploitation can have significant adverse impacts on confidentiality, integrity, and availability. Immediate action is imperative: apply mitigation steps such as disabling IBE and restricting management access, monitor systems closely for compromise, and deploy patches promptly once released by Fortinet. Security teams should treat this vulnerability as a high priority within their risk management and incident response frameworks. Staying vigilant against such advanced exploitation techniques is essential to safeguard email gateway infrastructure and maintain organizational cybersecurity resilience.