Loading story…
The steering committee for the inaugural OTsec India Summit provided key insights on operational technology (OT) security challenges, regulatory imperatives, and innovation in India's critical infrastructure and manufacturing sectors. In a panel discussion hosted by event producers Matt Robertson and Josh Cunningham-Marsh, committee members addressed the cybersecurity landscape for Indian industrial sectors, the impact of regulation and compliance on security practices, and the economic and safety consequences of cyberattacks.
The discussion also covered how market forces are shaping cybersecurity innovation and what the future may hold for OT security in India. The OTsec India Summit, scheduled for November 27-28, 2025, aims to bring together over 200 IT and OT security leaders, merging expertise from the CS4CA and ManuSec summits to foster advanced cybersecurity strategies and high-impact industry connections.
See the actors and campaigns active against you right now.
1 event from the most recent confirmed update back to the earliest known activity.
Initial story creation
See the adversaries and campaigns active against your sector right now, ranked by what they're exploiting.
2 references tracked. Mallory keeps watching after this page renders.
Map indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
Ed Harris, the global director of information security at Mauser Packaging, has emphasized the growing importance of securing operational technology (OT) environments in the manufacturing sector. As manufacturing systems become increasingly connected, the risk profile for OT has expanded, making it a more attractive target for cyber attackers. Harris highlighted that OT security, once a theoretical concern, is now a practical necessity as threat actors actively seek vulnerabilities in these environments. He stressed the need for IT security executives to develop a deep understanding of OT-specific risks, which differ significantly from traditional IT threats. The integration of IT and OT systems introduces new connectivity and security challenges, requiring a careful balance to avoid disrupting essential manufacturing operations. Harris advocates for close collaboration between IT security teams and engineering departments to leverage specialized knowledge and build robust cybersecurity defenses. He pointed out that engineering teams possess critical insights into the operational aspects of OT systems, which are vital for designing effective security controls. The interview also addressed the importance of maintaining operational efficiency while implementing security measures, as excessive restrictions can hinder production processes. Harris’s experience, spanning over 30 years in cybersecurity across various manufacturing companies, informs his approach to managing these complex environments. He noted that the historical separation between IT and OT is no longer viable, and organizations must adopt integrated strategies to protect both domains. The discussion took place in the context of the upcoming ManuSec Summit in Chicago, where over 150 IT and OT security leaders are expected to convene and share best practices. Harris’s insights underscore the urgency for manufacturing organizations to reassess their security postures in light of evolving threats. He also mentioned the need for ongoing education and awareness among both IT and OT personnel to keep pace with the changing threat landscape. The conversation highlighted that regulatory pressures and industry standards are increasingly mandating stronger OT security controls. Harris concluded by encouraging organizations to proactively address OT security challenges before they result in significant operational disruptions. The interview serves as a call to action for manufacturing leaders to prioritize OT security as a core component of their overall risk management strategy. By fostering partnerships between IT and engineering, companies can better safeguard their operations against emerging cyber threats.
Jun 29, 2026
Johnny Xmas, the global head of offensive security for a major U.S. manufacturer, emphasized the growing importance of offensive security practices within operational technology (OT) environments in the manufacturing sector. In a detailed interview ahead of the 10th ManuSec Summit, he highlighted the unique challenges that manufacturing organizations face when implementing red teaming and penetration testing in OT settings. One of the primary hurdles is the inconsistent technology landscape across multiple manufacturing plants, which complicates the standardization of security assessments. Shadow IT, or unauthorized technology deployments, introduces hidden risks that can undermine even well-designed security programs. Xmas stressed the necessity of thorough asset inventory verification from an attacker's perspective, ensuring that all devices and systems present in manufacturing plants are accounted for and authorized. He pointed out that in OT environments, understanding the context of systems and processes is often more critical than focusing solely on technical exploits. Manufacturing organizations frequently encounter two major blind spots: incomplete visibility into their OT assets and a lack of understanding of how those assets interact within the broader operational context. These gaps can leave critical systems exposed to sophisticated attacks. Xmas also discussed the evolving role of security in OT, noting that it is increasingly becoming a core consideration for manufacturing leadership, rather than an afterthought. He advocated for a holistic approach to offensive security, integrating both IT and OT perspectives to maximize operational resilience. The interview underscored the need for specialized skills and methodologies tailored to the unique requirements of OT environments, as traditional IT security approaches may not be directly applicable. Xmas's insights reflect a broader industry trend toward proactive security measures, such as red teaming, to identify and remediate vulnerabilities before they can be exploited by adversaries. He also touched on the future of OT security, predicting that as manufacturing systems become more interconnected, the demand for advanced offensive security capabilities will continue to grow. The discussion provided actionable guidance for manufacturing CISOs, including the importance of cross-functional collaboration and continuous improvement in security practices. By prioritizing offensive security, manufacturers can better defend against emerging threats and ensure the integrity and availability of their critical operations. The interview serves as a call to action for manufacturing organizations to invest in robust red teaming and pentesting programs tailored to the complexities of OT environments. Ultimately, the integration of offensive security into manufacturing operations is positioned as a strategic imperative for safeguarding industrial assets and maintaining competitive advantage in an increasingly digital landscape.
Jun 29, 2026
CISA, the UK **NCSC**, and multiple international partners released **Secure Connectivity Principles for Operational Technology (OT)** guidance aimed at reducing risk created by increased connectivity into industrial environments (e.g., industrial control systems, sensors, and other critical services). The guidance is positioned for operators of essential services facing business and regulatory pressure to enable remote monitoring and management, and it emphasizes that formerly *air-gapped* OT is now more exposed due to expanded remote access and IT/OT convergence. The guidance highlights that insecure or exposed OT connectivity is being targeted by a broad range of adversaries, including **ransomware groups**, **state-backed actors**, and **pro-Russia hacktivists** conducting opportunistic attacks against global critical infrastructure. Recommended defensive themes include **network segmentation**, **strong authentication**, continuous monitoring, and minimizing remote access paths to prevent disruptive incidents with potential real-world safety and service-delivery impacts; CISA also solicited stakeholder feedback via a product survey. Separate opinion pieces discussing AI in critical infrastructure and power redundancy risks in OT, and an industry roundup of Chinese cybersecurity companies, do not provide additional reporting on this specific guidance release.
Jun 29, 2026