A cyberattack took Braham's water plant offline for two hours—yet no one lost water. Why it's a Level 3 OT incident, and how to contain the next one.
The July 22 AA26-097A update confirms stolen PLC project files, altered control logic, and disabled shutdown and alarm functions. What it means for asset...
The July 2026 DeNexus newsletter is out — a practical OT risk playbook (Quantify · Reduce · Transfer), CISA BOD 26-04, the Check Point VPN zero-day, and...
CISA's BOD 26-04 drops the CVSS mandate for a four-variable risk model. Why OT vulnerability management still needs expected loss, not just exploitability.
José Seara joins the Data Center Go-to-Market Podcast to discuss AI-driven OT cyber risk, the OT/IT divide, and whether industrial cyber stays insurable.
Six national cyber agencies just put AI-amplified OT risk on the board agenda. What the Five Eyes statement means for industrial operators — and how to...
OT incident recovery time has a dollar value. See how DeRISK CRQ models faster recovery into lower expected loss — and a funding argument finance accepts.
OT cyber incidents are now balance-sheet events. How to quantify cyber-physical loss, value mitigation, and make smarter retain-vs-transfer decisions.
IT security questionnaires were never built for OT. See why they miss the industrial cyber risk underwriters actually price — and how data-driven evidence...