It's so disheartening to explain this over and over working in critical infrastructure cybersecurity full time. It's because everyone demands cheap, fast remote support and AI enabled real time telemetry and control. We’ve worked ourselves into this corner through demanding connectivity and I see next to nothing truly airgapped anymore. In fact, it’s impossible to convert some critical systems back at this point.
A lot of our power infrastructure is so complex with microgrids and renewables and real time billing and buy backs that it can’t be switched to manual anymore. A lot of industrial vendors won’t provide warranty support if their remote access is removed.
And this is all happening in super low maturity environments with limited if any cybersecurity resources or tools.
We’re trying, but the state of things is pretty dire, the barrier to basic disruptive attacks is lowering rapidly, and we can’t find enough people who understand the industrial environments and cybersecurity on thirty year old computers fast enough to hire close to enough people.
@hacks4pancakes the amount of orgs that have factory in the same flat network is disheartening. They are also the ones who refuse to decom that windows 95 machine running a 3 million dollar piece of machinery.
You can have insecure environments, but let's not put them on the internet 🫠