Successful mitigation of today’s security threats requires an approach that is both on the offensive and on the defensive. Here, we give our take on how to approach and handle specific security challenges, as well as our reaction to some of the latest industry topics.
08.27.26Featuring insights from DirectDefense’s fireside chat with Christopher Walcutt and Charly Bun Watch the Full Webinar OT environments were never designed to operate like traditional IT environments. Many of the systems and protocols still in use today were built decades ago, before cybersecurity, remote access, cloud connectivity, and today’s threat landscape were part of the… Read more »
08.26.26A few weeks ago, I wrote that AWIA was never enough to address the cybersecurity risks facing U.S. water utilities. Since then, we’ve gotten another reminder of why. In late July, the FBI and EPA warned that attackers had targeted internet-facing PLCs at water and wastewater utilities across multiple states, in some cases causing operational… Read more »
08.05.26The cyberattacks against water utilities reported over the past week have generated a familiar response. Questions about attribution. Discussions about foreign adversaries. Renewed calls for additional funding. And, inevitably, renewed conversations about compliance. Those conversations miss the point. Whether these attacks ultimately trace back to Iranian actors or another threat group is important for national… Read more »
06.23.26Accenture’s acquisition of a majority stake in Dragos is more than another cybersecurity transaction. It represents a defining moment for the Operational Technology (OT) security market and a clear signal that industrial cyber resilience has become a strategic business priority. As industrial organizations face increasing pressure from ransomware groups, nation-state actors, AI-enabled threats, and continued… Read more »
04.09.26Featuring insights from DirectDefense’s fireside chat with Jim Broome, Rick McElroy, and Tim Armstrong Watch the Full Webinar The Reality: Cyber Risk Isn’t Changing – It’s Accelerating Budget cuts. Leaner teams. AI-generated code. Expanding attack surfaces. Cyber risk in 2026 doesn’t look entirely new, but it is moving faster, becoming harder to see, and shifting… Read more »
03.09.26Operational technology security is no longer a side conversation at RSA. It is central to the broader cybersecurity dialogue. As industrial environments become more connected, threat activity continues to evolve, and regulatory expectations increase, organizations are being pushed to strengthen how they detect and respond to incidents in OT environments. At RSA Conference 2026, DirectDefense… Read more »
09.11.25How do you build a bot that can out-talk human judgement in real time? At DEF CON’s first Battle of the Bots, we put ours to the test, and won. Team DirectDefense, consisting of Matt Bangert and Michael Tomlinson, were selected to compete in DEF CON’s first ever Battle of the Bots: Vishing Edition; a… Read more »
07.30.25Utilities are under increasing pressure to secure the path between their IT and OT environments and keep attackers out of both.
07.23.25Why Cybersecurity in Mergers and Acquisitions Can be a Dealmaker – or a Deal Breaker It’s not uncommon for companies that are approaching a merger or acquisition process to focus on financials, company culture, and operational structure, casting cyber due diligence to the wayside. If cybersecurity isn’t a key component in a company’s M&A process,… Read more »
07.21.25Unpatched SharePoint? This Zero-Day Could Let Attackers In Microsoft has issued an urgent warning regarding a newly weaponized zero-day vulnerability, CVE-2025-53770, affecting on-premise SharePoint Server deployments. With a CVSS score of 9.8, this remote code execution (RCE) flaw is being actively exploited and poses a severe risk to unpatched environments. What’s the Threat? This unauthenticated… Read more »
