nerc-cip

Episode Description OT Ransomware Surges 140%; FLI Warns AI Lacks Safety The Future of Life Institute warns of a "striking lack" of safety commitments across major AI companies, while new research unveils that large language models are fundamentally incentivized to guess rather than acknowledge uncertainty. Simultaneously, reports confirm ransomware attacks on industrial systems surged 140% over four years, with 38% of incidents compromising physical safety systems and operational reliability. In response, the US government pivots grid security requirements to internal network monitoring; professionals must embrace architectural controls like segmentation and FinOps to reduce threat surface and curb massive cloud overspending. ...

Episode Description News Brief: Volt Typhoon's 5-Year Shadow: Critical Infra at Risk Nation-state cyber groups like Volt Typhoon have maintained persistent access to US critical infrastructure for over five years, setting conditions for operational disruption in potential "total war" scenarios. This strategic cyber threat converges with severe infrastructure risk, evidenced by the fact that 70% of US power transformers exceed 25 years of age, contributing to doubled weather-related outages in the last two decades. To cope with grid strain and capacity deficits, operators are rapidly scaling automated demand response; Enel North America demonstrated operational maturity by dispatching 1,700 DR events across 1.25 million devices in one year. Technical professionals must urgently shift from post-hoc security and explainability solutions to architectures designed intrinsically with compliance and resilience, especially as AI and operational technology convergence expands the attack surface. ...

Episode Description CISA Warns: Volt Typhoon Infiltrates US Infrastructure CISA, the FBI, and NSA warn that China's Volt Typhoon group has pre-positioned destructive capabilities inside U.S. critical infrastructure, including energy and water systems, for over five years. General Thomas Hensley characterized the sophisticated infiltration as setting conditions for "total war," even as the EPA reveals 70% of inspected water systems fail basic cybersecurity hygiene like changing default passwords. In response to rising systemic risk and regulatory pressure, the Explainable AI market surges past $9.77 billion as the EU AI Act makes transparency mandatory for high-risk automated decisions. Technical leaders must urgently integrate XAI and abstraction layers into architecture, or face massive legal liability and the operational chaos of an IT breach cascading into an OT disaster. ...

I came into operational-technology security at a moment when the field was still figuring out what it wanted to be. NERC CIP v3 was the working regime; v5 was on its way; and the first generation of Smart Grid pilots was starting to land at utilities across North America. That stretch — roughly 2012 to 2018 — is where most of modern ICS security's practitioner vocabulary got fixed. Walking the floor at DistribuTECH 2025 in Dallas this past March was a useful prompt to look back at that window from where the industry sits today — and to write down which lessons still hold up. ...

Episode Description AI Orchestration, Grid Security, and the Cloud/Energy Operational Divide: Key Findings on Autonomy, Standardization, and the Implementation Gap. This Research Curation Daemon episode synthesizes findings across three major domains and identifies a central conflict in current technology deployment patterns. Research Analysis Topics 1. AI Orchestration Fundamental architectural shift in cloud platforms toward AI agent frameworks Enhanced model availability across AWS, Google Cloud, and Azure Agentic orchestration and autonomous task execution capabilities Evolution from traditional cloud services to AI-native platforms 2. Grid Security NERC CIP updates mandating MFA and expanding security controls Integration of DER (Distributed Energy Resource) management standards IEEE/FERC standardization efforts Critical infrastructure hardening through parallel advancement 3. Cloud/Energy Operational Divide Core tension: Technical capability outpaces evidence on reliability and economics Implementation gap in large-scale operational practices Successful Digital Twin ROI vs. unproven scalability Demand Response technology advancement vs. flat wholesale market adoption Critical Implementation Gaps Identified AI agent reliability challenges in production environments Multi-cloud cost reality checks and optimization difficulties Persistent serverless cold start latency issues Gap between technical demos and operational deployment Curated Research Insights Analysis reveals systematic pattern where proof-of-concept successes don't translate to reliable, economic large-scale operations ...