OT security

Security for production, control and automation technology.

Attacks on critical infrastructure: US water utilities in the crosshairs

At the end of July 2026 the FBI and the EPA issued a public warning (PSA I-073026). Since 27 July, water and wastewater utilities in at least seven US states have reported attacks, in some cases with operational effects. The targets were Rockwell/Allen-Bradley MicroLogix 1100 and 1400 controllers that were openly reachable from the internet. In parallel, more than 30 municipal water systems in Minnesota were attacked.

Beitrag lesen

Pragmatism in the OT SOC: how plant monitoring works in practice

OT security · Ali Recai Yekta

OT Security Made Simple podcast: pragmatism in the OT SOC

On "OT Security Made Simple" I talked to Klaus Mochalski about building OT SOCs. One point from it is worth repeating here. In OT security monitoring, the tools above all create visibility. On that basis the security team and the OT team take the decisions together.

Beitrag lesen

OT malware against water supply: ZionSiphon

OT security · Ali Recai Yekta

ZionSiphon: OT malware against Israeli water supply

On 16 April 2026 Darktrace published an analysis of malware called ZionSiphon, aimed at Israeli water and desalination plants. Dragos had examined the sample in March and reads ZionSiphon as an immature attempt at OT malware, possibly written with the help of an LLM. As a single sample it is not threatening. What it says about the threat landscape is worth reading anyway.

Beitrag lesen

The path from an open VPN into the control system

OT security · Ali Recai Yekta

Coordinated cyber attacks on Poland's energy sector

On 29 December 2025 a wave of coordinated attacks hit at least 30 wind and solar farms, a combined heat and power plant and a manufacturing company in Poland. The CERT.pl report on it is worth reading closely. The attacks were not about extorting money; they were sabotage of critical infrastructure.

Beitrag lesen

OT security · Ali Recai Yekta

OT security for SMEs: the risk nobody sees in industry

A talk from IT-Sicherheitstag NRW 2024 on the growing threats to industrial control systems. Ali Recai Yekta took apart a dangerous assumption: a successful attack on industrial systems does not require OT specialists.

Beitrag lesen

Subscribe to OT security