Successful mitigation of today’s security threats requires an approach that is both on the offensive and on the defensive. Here, we give our take on how to approach and handle specific security challenges, as well as our reaction to some of the latest industry topics.
08.27.26Featuring insights from DirectDefense’s fireside chat with Christopher Walcutt and Charly Bun Watch the Full Webinar OT environments were never designed to operate like traditional IT environments. Many of the systems and protocols still in use today were built decades ago, before cybersecurity, remote access, cloud connectivity, and today’s threat landscape were part of the… Read more »
08.26.26A few weeks ago, I wrote that AWIA was never enough to address the cybersecurity risks facing U.S. water utilities. Since then, we’ve gotten another reminder of why. In late July, the FBI and EPA warned that attackers had targeted internet-facing PLCs at water and wastewater utilities across multiple states, in some cases causing operational… Read more »
08.05.26The cyberattacks against water utilities reported over the past week have generated a familiar response. Questions about attribution. Discussions about foreign adversaries. Renewed calls for additional funding. And, inevitably, renewed conversations about compliance. Those conversations miss the point. Whether these attacks ultimately trace back to Iranian actors or another threat group is important for national… Read more »
07.31.26Over the past several weeks, the cyberattack against Coca-Cola’s Fairlife dairy business has continued to evolve. On July 16, Coca-Cola disclosed that Fairlife had experienced a ransomware event involving unauthorized access to a portion of its systems, including production-related systems, prompting the company to temporarily suspend U.S. production. Days later, ransomware group Anubis claimed responsibility… Read more »
06.23.26Accenture’s acquisition of a majority stake in Dragos is more than another cybersecurity transaction. It represents a defining moment for the Operational Technology (OT) security market and a clear signal that industrial cyber resilience has become a strategic business priority. As industrial organizations face increasing pressure from ransomware groups, nation-state actors, AI-enabled threats, and continued… Read more »
07.30.25Utilities are under increasing pressure to secure the path between their IT and OT environments and keep attackers out of both.
07.23.25Why Cybersecurity in Mergers and Acquisitions Can be a Dealmaker – or a Deal Breaker It’s not uncommon for companies that are approaching a merger or acquisition process to focus on financials, company culture, and operational structure, casting cyber due diligence to the wayside. If cybersecurity isn’t a key component in a company’s M&A process,… Read more »
03.25.25Getting a wastewater utility’s OT and IT departments on the same page to address vulnerabilities they didn’t know they had. Wastewater utilities are among some of the most targeted industries for cyber attacks, and the implications can be devastating as operational interruptions or shut-downs could directly affect public health. The Environmental Protection Agency (EPA) does… Read more »
10.03.24Last Wednesday, CISA issued an advisory two days after Arkansas City, Kansas, revealed that a Sunday morning cyberattack forced it to switch its water treatment facility to manual operations. In the alert, CISA urged OT/ICS operators in critical infrastructure sectors to apply the recommendations listed in Defending OT Operations Against Ongoing Pro-Russia Hacktivist Activity to… Read more »
05.23.24On Monday, the U.S. Environmental Protection Agency (EPA) issued an enforcement alert outlining the cybersecurity threats and vulnerabilities facing community drinking water systems. It details the necessary steps these systems must take to comply with the Safe Drinking Water Act (SDWA). The EPA issued this alert due to the rising frequency and severity of threats… Read more »
