CISA has published a page for its Installed Base Program, a voluntary partnership with operational-technology (OT) original equipment manufacturers. Participating OEMs share product, vulnerability, misconfiguration and customer-alignment data; CISA validates which devices are exposed to the internet, identifies their owners using its scanning tools and, when needed, administrative subpoenas, and then notifies them with mitigation guidance. OEMs join by contacting CISA and signing an agreement on roles and data sharing.

Why it matters: exposed PLCs, HMIs and building controllers are routinely abused (the French refrigeration-control attacks this month are one example). If you run OT, expect notifications to come via your vendor or CISA, and make sure both have a current security contact for you.