Loading story…
Luis Contasti Aguirre, Merck's global OT security lead, highlights the importance of asset visibility and a strong cyber risk culture in securing operational technology (OT) environments. He advocates for using standards like ISO 6443 and CISA guidelines, and stresses collaboration with OT teams to reduce false positives and improve incident response. Aguirre underscores that technology alone is insufficient without organizational awareness and disciplined security practices.
Mallory correlates global threat intelligence with your attack surface — know if you’re exposed before adversaries strike.
1 event from the most recent confirmed update back to the earliest known activity.
Initial story creation
2 references tracked. Mallory keeps watching after this page renders.
Map indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
Ed Harris, the global director of information security at Mauser Packaging, has emphasized the growing importance of securing operational technology (OT) environments in the manufacturing sector. As manufacturing systems become increasingly connected, the risk profile for OT has expanded, making it a more attractive target for cyber attackers. Harris highlighted that OT security, once a theoretical concern, is now a practical necessity as threat actors actively seek vulnerabilities in these environments. He stressed the need for IT security executives to develop a deep understanding of OT-specific risks, which differ significantly from traditional IT threats. The integration of IT and OT systems introduces new connectivity and security challenges, requiring a careful balance to avoid disrupting essential manufacturing operations. Harris advocates for close collaboration between IT security teams and engineering departments to leverage specialized knowledge and build robust cybersecurity defenses. He pointed out that engineering teams possess critical insights into the operational aspects of OT systems, which are vital for designing effective security controls. The interview also addressed the importance of maintaining operational efficiency while implementing security measures, as excessive restrictions can hinder production processes. Harris’s experience, spanning over 30 years in cybersecurity across various manufacturing companies, informs his approach to managing these complex environments. He noted that the historical separation between IT and OT is no longer viable, and organizations must adopt integrated strategies to protect both domains. The discussion took place in the context of the upcoming ManuSec Summit in Chicago, where over 150 IT and OT security leaders are expected to convene and share best practices. Harris’s insights underscore the urgency for manufacturing organizations to reassess their security postures in light of evolving threats. He also mentioned the need for ongoing education and awareness among both IT and OT personnel to keep pace with the changing threat landscape. The conversation highlighted that regulatory pressures and industry standards are increasingly mandating stronger OT security controls. Harris concluded by encouraging organizations to proactively address OT security challenges before they result in significant operational disruptions. The interview serves as a call to action for manufacturing leaders to prioritize OT security as a core component of their overall risk management strategy. By fostering partnerships between IT and engineering, companies can better safeguard their operations against emerging cyber threats.
Jun 29, 2026
Security leaders warned that extending **IT-centric cybersecurity frameworks** into **operational technology (OT)** and laboratory environments without adaptation can create hidden risk, because core IT assumptions (disposability, reversibility, and recoverability) often do not hold. Rich Kellen (CISO, IFF) emphasized that in labs “the system is the experiment,” where restoring from backups may not restore scientific validity; factors like calibration drift, temperature curves, and timing windows can invalidate results even if systems are brought back online, making “available but wrong” potentially more damaging than downtime. In healthcare environments, Mohamed Waqas (CTO, *Armis*) described similar risk drivers arising from **unclear ownership and accountability** across IT, facilities/OT teams, and healthcare technology management for network-connected medical and facilities devices. He noted that devices are frequently deployed outside cybersecurity visibility, with an expectation that IT/security or vendors will respond only after incidents, while security teams may identify vulnerabilities without being positioned to remediate them—leaving asset owners responsible for fixes they may not be equipped to execute. Both accounts frame the issue as a **safety and integrity** problem (patient care and scientific outcomes), not just a compliance or “cyber exercise,” and stress governance and cross-functional collaboration to reduce operational risk.
Jun 29, 2026
Global cybersecurity agencies have issued a joint call for critical infrastructure operators to conduct comprehensive mapping of their operational technology (OT) environments. The guidance, supported by the United Kingdom's National Cyber Security Centre, the U.S. Cybersecurity and Infrastructure Security Agency, and other allied partners, emphasizes the urgent need for exhaustive OT inventories to combat evolving cyber-physical threats. Operators of essential services such as power grids, water systems, and manufacturing plants are being instructed to catalogue all assets by their criticality, ensuring that every component of their OT environment is accounted for. The framework outlined by these agencies includes documenting system connectivity, validating and maintaining records through structured change management, and rigorously managing third-party access and contractual risks. Security experts highlight that while creating a definitive record of OT assets is both feasible and necessary, it presents significant challenges, particularly for organizations with sprawling, decades-old networks. Legacy systems often lack the real-time visibility required for effective inventory, making the process complex and resource-intensive. Despite these obstacles, the increasing sophistication of cyber-physical threats means that organizations can no longer afford to operate with blind spots in their OT environments. The guidance stresses the importance of asset visibility as a foundational element of OT security, enabling organizations to identify vulnerabilities and respond more effectively to incidents. Agencies recommend that operators implement structured change management processes to ensure that asset records remain accurate and up to date. The guidance also calls for robust management of third-party access, recognizing that supply chain and contractor relationships can introduce additional risks. By following the principles-based framework, critical infrastructure operators can reduce the likelihood of undetected vulnerabilities and improve their overall security posture. The agencies warn that failure to maintain comprehensive OT inventories could leave organizations exposed to major cyber incidents. The call to action reflects a growing consensus among global cyber authorities that asset management is a critical defense against increasingly complex threats targeting industrial control systems. The guidance is intended to drive a cultural shift in how OT operators approach security, moving from reactive measures to proactive risk management. Experts agree that while the task is daunting, the benefits of improved visibility and control far outweigh the challenges. The initiative underscores the need for ongoing collaboration between government agencies, industry stakeholders, and security professionals to protect critical infrastructure from cyber threats. Ultimately, the guidance aims to ensure that operators are not caught off guard by attacks that exploit unknown or unmanaged assets within their OT environments.
Jun 29, 2026