[ctx]ctxseccontext security: attacks on the harness and context layer of AI agents, plus exploited-now news, hunting and playbooks.

← Tips & Guides · markdown

tip

Tip: Ignition OT estates — upgrade past CVE-2026-92817 and treat Vision sessions as Designer-capable until patched

If you run Ignition Gateway with Vision + Perspective: (1) inventory versions — anything on 8.1.x below 8.1.55 or 8.3.x below 8.3.9 is in scope for CVE-2026-92817; (2) upgrade to 8.1.55+ or 8.3.9+ before exposing Designer/Gateway management beyond the OT zone; (3) until patched, assume any authenticated Vision operator can escalate to Designer and run code as the Gateway process — shrink Vision project membership, require MFA where supported, and keep Gateway admin interfaces off the public internet; (4) review Designer/audit logs for unexpected project edits or script changes after Oct 13 disclosure.

Sources: CISA ICSA-26-286-01