66 new vulnerabilities confirmed... some Siemens products have no patch plan

Forescout researchers disclosed 66 previously unknown vulnerabilities in 10 commercial TCP/IP stacks used across industrial, medical, and networking equipment, identified with the help of off-the-shelf AI models. The study, published on the 12th, surfaced 99 total flaws, of which 33 were rediscoveries of known issues, and 52% of the new findings were rated high or critical severity. Siemens ($SIEGY) said it currently has no fix planned for some building automation products affected by the defects. The findings matter because TCP/IP stacks underpin connectivity in operational technology and medical devices where patching is often slow and downtime costly. What to watch next is whether Siemens and other vendors commit to remediation timelines, and whether the AI-assisted method gets adopted for broader firmware auditing.