Welcome to the resources page! We have compiled a collection of useful information, tools, and resources to help you
PHP2Shell shows frontier AI turning long-known, hard-to-exploit vulnerabilities into real attacks. Andrew Ginter on what AI can and cannot do for attackers, and why OT defenders must engineer attack paths away.
Andrew Ginter’s practical advice for the smallest retailers and water utilities with Internet-exposed freezers and OT devices: bring in a firewall, allow only fixed IP addresses, and go live safely.
Lior Frenkel on the joint Waterfall and Siemens Energy MDR solution: real-time OT visibility through Unidirectional Gateways, with no path back into the systems.
Andrew Ginter shares a proposed IEC 62443-3-2 Appendix C: consequence-based risk matrices that replace likelihood with credibility for high-impact OT cyber attacks.
This webinar reviews recent government directives, clears up the controversy, and introduces practical approaches to islanding. We evaluate islanding advice in the context of the emerging era of AI-based zero-day exploits.
The CI-Fortify guidance asks critical infrastructure operators to prepare to isolate vital OT during a cyber emergency. Answer seven questions to get a clear picture of your isolation readiness — and the gaps worth investigating next.
Recommended guidelines on cyber security baseline requirements for Operational Technology (OT) systems were published in June 2026. I reviewed them…
Four governments just advised critical infrastructure operators to prepare to isolate their most important OT systems. Here’s what that means, who should care, and what to do about it.
This webinar reviews recent government directives, clears up the controversy, and introduces practical approaches to islanding. We evaluate islanding advice in the context of the emerging era of AI-based zero-day exploits.
OT security is “hard” – engineering change control (ECC) makes patching slow and expensive, many OT devices and systems have no real support for zero trust (ZT)…
