Special · S04: The OT/ICS Defende...

Special · S04: The OT/ICS Defender — Why Volt Typhoon Should Worry You

Tech Updates di Andres Sarmiento
S1 · E25
20 mag 2026
08:28

Note sull'episodio

$140K. When you mess up, the lights go out for real. Final episode of TechUpdates Special Series. The most consequential security job almost nobody talks about — defending the systems that keep the country running. Power grids. Water utilities. Petrochemical plants. Pipelines. What you'll hear: • What OT/ICS defenders actually do — segmentation, SCADA patching, PLC defense, plant-engineer coordination • Comp reality — why OT pays 40–60% less than cloud security at the same companies, and the "purpose tax" • The real stakes: Ukraine 2015 grid attack · Triton 2017 (Saudi Arabia) · Oldsmar 2021 · Aliquippa 2023 · Volt Typhoon pre-positioning across U.S. critical infrastructure • A real day — substations at 6 AM, vendors that still ship Windows 7 SCADA, plant managers explaining why your last predecessor retired in 2015 • The two paths in — plant engineer to security, or IT security to OT — and why CISSP doesn't help but GICSP does • LinkedIn's "critical infrastructure defender" vs. the actual day (30% travel to plants, 20% talking plant engineers into caring) When you mess up here, there's a body count. When you do it right, nobody notices the lights stayed on. That's the whole job description. And it matters more every year as adversaries pre-position inside the operational networks of utilities they intend to disrupt on a date of their choosing. Sources: CISA joint advisory on Volt Typhoon (early 2024) · Ukrainian power grid attack (Dec 2015) · Triton/TRISIS analysis (Saudi Arabia, 2017) · Oldsmar water treatment incident (Florida, 2021) · Aliquippa Municipal Water Authority compromise (Pennsylvania, 2023, attributed to CyberAv3ngers). That wraps the Special Series. Pick the role that fits you. The field is wide. — Andrés Sarmiento #OTSecurity #ICSSecurity #CriticalInfrastructure #VoltTyphoon #cybersecurity #TechUpdates