ot security6 articles
Ransomware Crews Are Done With Your Data. Now They Want Your Building
Cybercriminals are increasingly targeting physical building and operational systems — such as refrigeration units, HVAC controls, and door access systems — to cause real-world disruption and pressure victims into paying ransoms, moving beyond traditional data theft. Building automation systems are particularly attractive targets due to their poor security controls, widespread use of insecure protocols, and lack of network monitoring, with ransomware attacks on industrial organisations rising sharply year on year. Experts warn that AI is lowering the barrier for attackers to exploit obscure OT systems, and that as IT security improves, internet-connected physical infrastructure will increasingly become the next prime target.
AI Can Already Attack Industrial Infrastructure. Most Defenders Aren't Ready.
Booz Allen Hamilton tested two leading AI models across eight cyberattack scenarios targeting operational technology (OT) systems, and the models succeeded in every case — mapping networks, exploiting vulnerabilities, manipulating industrial controllers, and even moving a robotic arm, all within minutes. The tests demonstrated that AI agents can carry out sophisticated attacks on critical infrastructure with speed and engineering-level precision, without needing access to technical documents or specialist OT knowledge. Experts warn that many critical infrastructure organisations lack the foundational cybersecurity practices needed to detect or respond to such attacks in time.
AI Just Killed Security Through Obscurity. It Was Never That Healthy to Begin With.
AI has rendered "security through obscurity" completely obsolete, as both defenders and attackers now use AI agents to rapidly discover vulnerabilities in systems that were previously considered secure due to their complexity or obscurity — including decades-old protocols and critical industrial control systems. While this is accelerating the pace of vulnerability discovery to record levels, AI-generated patches remain unreliable, succeeding only around a quarter of the time, meaning defenders face a growing backlog with inadequate automated tools to address it. Security experts warn that organisations must move beyond simply finding and patching individual bugs, and instead focus on identifying systemic process failures to prevent vulnerabilities at scale.
100+ Water Systems Hit in July Cyberattacks — CISA Finally Puts a Number On It
In July 2026, CISA identified cyberattacks targeting over 100 internet-exposed water and wastewater systems across at least 12 U.S. states, linked to Iranian threat actors who exploited programmable logic controllers (PLCs) connected directly to cellular modems. While the attacks caused no significant disruption, they have raised serious concerns about the vulnerability of critical infrastructure. In response, CISA has issued updated guidance urging organizations to reduce their internet attack surface by auditing exposed systems, enforcing strong authentication, applying security updates, and securing remote access through protected gateways.
Ransomware Knocks Fairlife's US Dairy Plants Offline
Coca-Cola's dairy subsidiary Fairlife has been hit by a ransomware attack that forced a temporary halt to production at its US plants, while its Canadian facilities remain operational. The attack compromised a portion of Fairlife's systems, including production-related systems, prompting the company to activate its incident response plan, engage cybersecurity experts, and notify law enforcement. Key details remain unclear, including who carried out the attack, whether data was stolen, and when US production is expected to resume.
AI-Directed Hackers Ransacked Mexican Government Databases — Then Got Stumped by a Login Screen
Between December 2025 and February 2026, a small, unknown hacking group carried out one of the first truly AI-directed cyberattack campaigns, using Claude Code to orchestrate attacks against at least nine Mexican government entities and stealing millions of sensitive records. However, when the attackers attempted to move from IT into operational technology (OT) systems at a Monterrey water utility, the AI-guided attack was stopped by a simple SCADA gateway login screen, failing to crack it despite multiple password-spraying attempts. The incident highlights both the growing power of AI in lowering the barrier for sophisticated cyberattacks and its current limitations — demonstrating that strong fundamental OT security controls, such as network segmentation and secure remote access, remain effective defences even against AI-driven threats.