What's really happening in OT cyberattacks (in 2025!)

Seth and Lesley are full time industrial incident responders and digital forensics analysts, dealing with a broad array of bizarre, worrying, and sometimes ingenious attacks against ICS and critical infrastructure systems. From ransomware attacks on oil platforms to adversaries developing stage 2 tool kits to attack ever-changing industrial devices and processes, they've seen some really strange stuff. It's only getting worse.

In this presentation, Seth and Lesley will discuss the most common incident types seen in full-time consulting OT incident response, common intrusion vectors into industrial environments today, as well as misconceptions we see repeatedly in the sales space and media. There are even dire misconceptions within the cybersecurity community itself about which attacks matter and what attacks really look like today. Those misunderstandings can drastically impact the viability of defence, when lives and equipment are on the line.

In the latter half of the presentation, the team will discuss tool-agnostic tactics for building better defense against current adversaries in OT environments and for developing in-house incident handling capabilities in OT environments, based on real-world experience.