Where autonomous AI agents actually stand in insurance underwriting in 2026, what "agentic" really means, and why OT cyber is the hardest frontier.
A risk number a CFO, underwriter, and operator can all trace to its evidence is one you can defend. Read the DeNexus August OT cyber risk issue.
A worked example of one MITRE ATT&CK for ICS attack path: how the FrostyGoop Modbus compromise unfolded, mapped to T0836, and what that outage actually...
A dated, sourced record of the 2026 water-sector OT intrusions: the confirmed method, effects across seven states, and why attribution isn't settled.
ENISA's 2025 dataset has become the de facto evidence base for NIS2. What 18.2% OT threat share, 53.7% essential-entity incidents, and Article 23...
A cyberattack took Braham's water plant offline for two hours—yet no one lost water. Why it's a Level 3 OT incident, and how to contain the next one.
The July 22 AA26-097A update confirms stolen PLC project files, altered control logic, and disabled shutdown and alarm functions. What it means for asset...
The July 2026 DeNexus newsletter is out — a practical OT risk playbook (Quantify · Reduce · Transfer), CISA BOD 26-04, the Check Point VPN zero-day, and...
CISA's BOD 26-04 drops the CVSS mandate for a four-variable risk model. Why OT vulnerability management still needs expected loss, not just exploitability.