From Existential to Reality: 3 Experts on the Evolution of ICS Threats
summary
Ransomware starts in IT but routinely breaks operations by hitting ERP, HMIs and billing systems that OT depends on, so attackers shift from simple encryptions to double extortion and targeted tricks like searching for data historians; defenders see roughly 15 activity groups focused on ICS plus tailored ransomware strains. Practical fixes are clear: add OT network visibility, identify crown‑jewel assets, test backups and restoration, build site partnerships and response playbooks so billing or HMI loss no longer forces shutdowns or ransom payments.
AI-written summary · about
chapters (9)
- 0:00Intro
- 1:10FM Global
- 9:00Bryson Miller
- 16:25Kim Zetter
- 18:21The attackers motivations
- 20:19The developers
- 21:20The biggest concern
- 22:24Colonial Pipelines response
- 24:07Why did Colonial Pipeline pay the ransom
related talks
27mRansomware in ICS: Impacting Critical Infrastructure and Operations
51mPreparing for and Defending OT Systems from Ransomware
29mNo More Ransomware in Critical Infrastructure!
30mForced Digital Transformation and the Realities to ICS/OT Cybersecurity
45mThe Age of Economic Warfare: What to Expect in This New Reality
52mThe Industrial Cyberthreat Landscape: Year in Review Report with Updates
48mRansomware: From the Boardroom to the Situation Room
53mThe Evolution of Industrial Cyberthreats: Year in Review Report