OUTSMART Attackers in OT/ICS and Win!

OUTSMART Attackers in OT/ICS and Win!

by Mike Holcomb

Applied Sciences & Engineering Computing & Cybersecurity UComputing and Information TechnologyURComputer security
🎙 Mike Holcomb 👥 27K 📅 August 27, 2025 ⏱ 46 min 👁 490 📄 expert opinion 🧭 2026-08-17
Available in: English (current) Français

Keywords

OT/ICScybersecurityattackersdefenseBASIC

Summary

In this video, Mike Holcomb addresses the growing threat to OT/ICS environments, emphasizing that attackers often find it easy to breach these systems due to poor security practices. He begins by discussing a hacktivist attack on water treatment facilities, highlighting the low impact but high frequency of such incidents. He then contrasts this with state-sponsored attacks, which are rare but can have severe consequences. Holcomb points to the increasing collaboration between hacktivists and state actors, citing the example of Sandworm and the Cyber Army of Russia Reborn. He references the Dragos 2024 Year in Review report, noting that 65% of assessed organizations had insecure remote access and 45% had active SSH connections to the internet. To counter these threats, he proposes five basic controls: Backup and Recovery, Asset Management, Secure Network Architecture, Incident Response Planning, and Vulnerability Management. He stresses the importance of IT and OT collaboration and emphasizes that even small organizations can implement these measures effectively. The video concludes with a call to action for awareness and education in OT security.

173 words

Critical Evaluation

Value of the Information & Strength of the Argument

The video provides valuable insights into the current threat landscape for OT/ICS, supported by real-world examples and industry data. Holcomb’s argumentation is logical and practical, advocating for a risk-based approach that is accessible to organizations of all sizes. He effectively communicates the urgency of the issue while offering actionable steps. However, the argumentation relies heavily on personal experience and anecdotal evidence, which may not be universally applicable. The lack of detailed technical depth might limit its value for advanced practitioners, but it serves as a solid introduction for those new to OT security.

102 words

Title / Content Match

The title is catchy and relevant, promising strategies to outsmart attackers, which the video delivers through practical controls and threat awareness.

Quality & Reliability

7/10

The video provides practical, experience-based advice on OT/ICS security, referencing real incidents and industry reports (Dragos). However, it lacks detailed citations and relies heavily on personal opinion and anecdotal evidence.

Key Moments

Markers derived by PSI from the transcript: the creator did not define chapters.

Cited Sources

Concurring Sources

Contribution & Novelties

The video offers a practical, accessible framework for OT/ICS security, emphasizing that even small organizations can implement effective defenses. It highlights the emerging trend of hacktivist-state collaboration, which is a relatively new concern. The five basic controls provide a clear starting point for organizations new to OT security.

Pour aller plus loin :

97 words

Radar Profile

The radar profile shows a balanced but moderate performance across all dimensions, with slightly higher scores in information quantity and reliability. This suggests the video is informative and trustworthy, though it could benefit from deeper technical detail and more rigorous sourcing.

Reliability 7/10

💬 No comments were provided for analysis.