Why CVSS is the wrong way to rank OT findingsConsequence to the process, not exploitability on paper.
Articles & papers
Articles, white papers
and video briefings.
Walking down a lift station networkWhat a passive capture shows in the first hour on site.
Meeting TSA SD-02 segmentation with one outage windowA staged DMZ build for pipeline operators.
The vendor VPN nobody remembers installingThe single most common finding across six sectors.
Segmenting a small water utility without an outage windowPurdue zoning for plants with one operator on nights.
Reading a DNP3 capture as an operatorTelemetry, control and what an anomaly looks like.
