OT Cyber Weekly (04/24): Using AI in OT/ICS that Makes Sense

OT Cyber Weekly (04/24): Using AI in OT/ICS that Makes Sense

by Mike Holcomb

Applied Sciences & Engineering Computing & Cybersecurity UComputing and Information TechnologyURComputer security
🎙 Mike Holcomb 👥 27K 📅 April 25, 2026 ⏱ 61 min 👁 299 📄 expert opinion 🧭 2026-08-16
Available in: English (current) Français

Keywords

OTICSAIcybersecurityGenAI

Summary

In this episode of OT Cyber Weekly, Mike Holcomb discusses the growing role of AI in OT/ICS cybersecurity. He shares his experience creating a TryHackMe room for OT/ICS security, which has already attracted over 4,000 participants. He highlights the importance of understanding OT environments and the threats they face, including real-world attacks like Frosty Goop and Stuxnet. Holcomb analyzes the Zion Siphon malware, which targeted desalination plants in Israel, noting that it was generated by GenAI but was not sophisticated enough to be effective. He also discusses Claude Mythos, a GenAI model designed to find vulnerabilities and write exploits, and debates its potential impact. He emphasizes that AI capabilities are improving rapidly and will soon enable even unskilled attackers to create effective malware. He advises defenders to prepare for this reality by focusing on OT-specific security measures and understanding the differences between IT and OT environments.

146 words

Critical Evaluation

Value of the Information & Strength of the Argument

The video provides valuable insights into the current state of AI in OT/ICS cybersecurity, based on the author’s practical experience. The argumentation is coherent and well-structured, moving from specific examples (TryHackMe, Zion Siphon, Claude Mythos) to broader conclusions about the future of AI in this field. The author effectively argues that AI is a double-edged sword, offering both opportunities for defenders and risks from attackers. He supports his points with concrete examples and logical reasoning, though the lack of formal citations weakens the overall argumentation.

Scientific Rigor, Source Quality, Title Accuracy

The video demonstrates a good level of scientific rigor, as the author references real incidents and tools, but the sources are not formally cited. The title accurately reflects the content, which is focused on practical AI applications in OT/ICS. The author’s expertise is evident, but the informal presentation style and lack of citations reduce the overall rigor. No comments were provided for analysis.

163 words

Title / Content Match

The title accurately reflects the content, which focuses on practical applications of AI in OT/ICS cybersecurity.

Quality & Reliability

7/10

The video is an expert opinion from a practitioner with deep experience in OT/ICS cybersecurity. It discusses real incidents and trends, but lacks formal citations and rigorous verification. The information is credible but presented informally.

Key Moments

Markers derived by PSI from the transcript: the creator did not define chapters.

Cited Sources

  • TryHackMe OT/ICS room — Mentioned as a new educational resource created by the author.
  • Dragos blog on Zion Siphon — Referenced for analysis of the Zion Siphon malware.
  • SecurityWeek article on Zion Siphon — Cited as a general news source on the malware.

Concurring Sources

  • CISA advisory on Frosty Goop — Confirms the details of the Frosty Goop attack mentioned in the video.

Contribution & Novelties

The video offers a practical perspective on integrating AI into OT/ICS security, drawing on the author’s hands-on experience. It highlights the imminent threat of GenAI-generated malware and the need for proactive defense. The discussion of Claude Mythos provides a balanced view of its potential and limitations.

Pour aller plus loin :

  • OT/ICS Cybersecurity — Overview of OT and its security challenges.
  • Stuxnet — Historical example of a sophisticated OT attack.
  • Frosty Goop — CISA advisory on the Frosty Goop malware.

80 words

Radar Profile

The radar profile shows a balanced performance across all dimensions, with slightly higher scores in information quality and reliability, reflecting the author's expertise and practical insights. The lower score in technical depth indicates that the content is accessible to a broader audience.

Reliability 7/10

💬 Sur les 0 commentaires analysés, aucune tendance n'a pu être dégagée.