ot-ransomware

Episode Description FERC holds ComEd to $20B Joliet data center deal The Federal Energy Regulatory Commission rejected Commonwealth Edison's bid to cancel a transmission security agreement underpinning the one-point-eight-gigawatt PowerHouse data center campus in Joliet, Illinois — a roughly twenty-billion-dollar development by Hillwood. The ruling, reported September twenty-third, signals that FERC will enforce large-load interconnection obligations rather than permit unilateral utility exits, arriving after the commission's June eighteenth show-cause orders to all six grid operators. Also this week, NIST released the initial public draft of SP 800-82 Revision 4 for OT security with a public comment window closing November thirtieth, and Anthropic launched Claude Opus 5.5 carrying a CB-1 weapons classification and its strongest-ever disclosed cyber capabilities. Developers, utilities, and security teams all have concrete deadlines and regulatory signals to act on now. ...

Episode Description CERT Polska maps a 30-site energy intrusion in detail Poland's national incident response team published a rare, technically granular account of a multi-stage cyberattack that began in December 2025 and compromised roughly thirty energy facilities, including renewable installations and a combined heat-and-power plant. Investigators traced a chain from VPN compromise through private APN abuse to OT network tunneling across segments many operators still treat as isolated — no threat actor was named. Also this week, AWS disclosed it cannot restore customer data from its Bahrain region or one UAE availability zone after war-related destruction of physical infrastructure, making cross-region replication a hard requirement rather than a best practice. U.S. battery storage additions are on track for a record 24 gigawatts in 2026, nearly double last year's pace. Energy defenders and cloud architects alike have concrete, specific findings to act on this week. ...

Episode Description FERC Orders All Six Grid Operators to Justify Load Rules On June 18, 2026, the Federal Energy Regulatory Commission simultaneously issued Section 206 show cause orders to all six major U.S. regional grid operators — PJM, MISO, CAISO, NYISO, ISO New England, and SPP — requiring them to justify or reform their large-load interconnection rules in response to surging data center and AI campus electricity demand. Section 206 shifts the evidentiary burden to the operators, and gives FERC authority to impose replacement terms if their tariffs cannot be shown to be just and reasonable. Also this week, Deloitte argues that AI hardware efficiency gains may drive more compute demand rather than less, citing the Jevons paradox, and a cyberattack on smart meter vendor Itron puts AMI supply chain security in focus. If you develop, site, or finance large electrical loads anywhere in the country, the federal timeline for interconnection rules is now moving faster than any single region's schedule. ...

Episode Description Iran-Linked Attack Shuts Down UK Power Plant Iran-linked actors caused an operational shutdown at a small UK power plant following a cyberattack disclosed August 23–24, with The Guardian framing the incident as emblematic of vulnerabilities across smaller UK generating facilities. Confirmed physical operational impact is rare in public reporting, and the attack signals geographic expansion beyond the U.S.-focused advisories most operators have relied on. Separately, supply chain attacks now account for 25 percent of significant cloud incidents — up from roughly 10 percent in the second half of 2025 — with a single compromise of the LiteLLM library affecting an estimated 434,000 CI/CD pipelines. Battery storage is breaking deployment records globally while Wood Mackenzie warns the U.S. grid-scale market could contract by nearly 29 percent in 2026 due to tariffs and policy uncertainty. Generation operators should verify PLC and engineering workstation exposure now, and procurement teams should pressure-test storage timelines against near-term policy risk. ...

Episode Description Google Builds a Managed Home for Enterprise AI Agents Google debuted the Gemini Enterprise Agent Platform at Cloud Next 2026, a full-stack managed environment designed to make agentic AI a first-class cloud workload rather than an improvised collection of model APIs. The platform pairs a Managed Agents API with a Cloud Data Agent Kit that integrates directly into the Model Context Protocol ecosystem and an AI Edge Portal covering benchmarking across more than 120 Android devices. Also this week, the EU AI Act's Article 50 transparency obligations took binding effect on August 2, requiring AI disclosure labels and deepfake markings, even as only 8 of 27 member states had designated national enforcement contacts. A coordinated cyberattack simultaneously disrupted more than 30 Minnesota water utilities, underscoring how sector fragmentation can be exploited at scale. Teams evaluating agent platforms or EU market exposure need current assessments on both fronts. ...

Episode Description GPT-5.5 Replaces GPT-5.3 as ChatGPT's Default Model OpenAI made GPT-5.5 the new default in ChatGPT, rolling it out as GPT-5.5 Instant to replace GPT-5.3 Instant, with cited gains in accuracy, image understanding, STEM, and web behavior. The GPT-5.2 family was retired on June twelfth — less than three months after its own launch — a pace that signals model version is now a first-class operational dependency requiring automated evaluation and prompt migration plans. Also this week, FERC issued show-cause orders to six major grid operators and committed to national large-load interconnection rules by June 2026, and CISA's advisory coverage of OT vulnerabilities dropped to just twenty-two percent in 2025, leaving compliance programs that rely on those advisories potentially blind to most known exposures. ...

Mythos and the Utility Industry: Detection Without a Patch Path Special edition — June 6, 2026 Anthropic has built a frontier model that can find and chain industrial-grade vulnerabilities, and stood up Project Glasswing — now around one hundred fifty organizations across critical infrastructure — to gate its use. The detectors and hyperscalers are inside the consortium. The equipment OEMs whose firmware is the actual attack surface for the bulk electric system — SEL, ABB, Siemens, Schneider Electric, GE Vernova — are, with a single Hitachi-shaped exception, conspicuously silent. This episode argues the load-bearing question for the grid is not who has access to Mythos; it is what happens between a Mythos finding and a patched protective relay, and the corpus says that pipeline has not been built. ...

Episode Description CISA redefines zero trust for industrial networks CISA just delivered a definitive zero trust roadmap engineered specifically for operational technology that abandons disruptive IT playbooks in favor of passive discovery. This guidance arrives as utilities execute massive risk mitigation efforts, such as PG and E locking in a nearly nineteen billion dollar wildfire plan after reporting a seventy-five percent reduction in reportable ignitions. In response to compounding industry threats, federal energy regulators are simultaneously stepping up enforcement by attaching heavy disgorgement orders to standard compliance penalties. You must master these new architectural standards to secure critical infrastructure without tripping physical safety systems or facing substantial financial clawbacks. ...

Episode Description Congress unveils energy cyber bill as grid attacks surge Congress advanced the Energy Threat Analysis Center Act to explicitly combat threat actors like Volt Typhoon targeting American power grids. This legislation follows a 70 percent surge in utility cyberattacks, with over 3,300 industrial organizations compromised last year and average recovery costs surpassing $3.12 million. In response, the Department of Defense issued specialized Zero Trust guidance, while utilities like PG and E launched multibillion-dollar, AI-driven mitigation plans to harden infrastructure. Because hardware procurement and grid upgrades lock in your risk profile for decades, integrating these defenses now is a strict financial imperative to prevent costly operational downtime. ...

Episode Description PG and E unveils massive grid overhaul as AI demand surges Pacific Gas and Electric unveils a seventy-three billion dollar capital plan to overhaul its grid as hyperscale AI data center demand surges. United States utility load forecasts jumped five-fold to one hundred twenty gigawatts in just three years, compounding severe vulnerabilities where ninety-six percent of industrial cyber incidents now originate from IT networks. In a major industry response, tier-one operators are actively replacing legacy control systems while cloud providers deploy hardware-verified workload isolation. Enterprise leaders scaling agentic AI must immediately audit their power availability and zero-trust security architectures to avoid costly operational downtime as physical and digital constraints collide. ...