Transcript
You know, I've luckily never been, when I was a system engineer, we didn't have an attack directly on our environments, but I knew people that unfortunately did have that. And when I was at Schneider Electric and other places, I, you know, I saw a lot of exposure to this and I think it's changed a lot over the years. You know, it used to either be really targeted, highly, you know, like nation state-y type stuff like Stuxnet or, you know, Black Energy or that sort of things, right? Like really, really advanced attacks targeting towards the OT equipment. And now I think we see a lot more of like bleed over effects from ransomware and those type of things, like more of an IT type attack that kind of gets over to the OT environment because we don't have good segmentation and we don't have good controls in place. So these are the things that I've seen, you know, we obviously do still have more OT type attacks that happen now, but I think it's become a lot more commoditized, like especially the stuff we've seen in like Ukraine and some of the ground wars that are going on right now. Like it's like hacktivist groups and things like that that are targeting this equipment, I think just because they can get to it, right? Especially any internet facing stuff they're going to go after. So it is something that's changed a lot over the years. But when I look at like the controls and the things that we have to do about it, it's kind of nice that we're, you know, it's hard to defeat a nation state, like they have a lot of resources. But a hacktivist group is a lot easier to go after, right? If they're just leveraging a remote connection with the default password because we never, you know, change the default creds on our PLC and we connect it to the internet, like those are things we can go fix. You know, that's not a billion dollar organization going after us. So the benefit of that is that we have a lot more control now. There are more advanced things that we can do and there's more advanced tools that we can put in place to help monitor for these and start, you know, start responding to them. You know, obviously that's stuff that Clarity does, but there's a lot of a lot of things that we can start doing to start working against that and to make sure that we're, you know, shoring up against these types of attacks that we're seeing.
