Gary S Mullen·Jun 18How the Red Team Walks In Through the Front Door of OTIn December 2025, attackers compromised renewable energy plants, a combined heat and power facility, and a manufacturing company in Poland…
Gary S Mullen·Jun 16Monitoring the Extended Perimeter: The CFC and OT Vendor AccessThe average industrial organization gives 77 third-party vendors access to its OT environment. One in four gives that access to more than…
Gary S Mullen·Jun 11Why Legacy Is Every Red Team’s Favorite OT FindingIn an engagement documented in CISA Advisory AA24–326A (published November 2024), a CISA Red Team persisted in a critical infrastructure…
Gary S Mullen·Jun 9The Leadership Layer, Part 7: Owning the Vendor RiskIn November 2023, an Iran-affiliated group calling itself Cyber Av3ngers walked into a booster station of the Municipal Water Authority of…
Gary S Mullen·May 21The Leadership Layer, Part 5: What You Fund Is What You SeeThis is the fifth article in The Leadership Layer series, exploring how the OT vCISO builds cyber-resilient industrial organizations…
Gary S Mullen·Apr 21Charting Your Shadow Current: Speaking Leadership’s LanguageYour security team just spent 90 days analyzing hundreds of vulnerabilities. Your CISO got 30 minutes with the board. Both sides tried to…
Gary S Mullen·Apr 16Who Owns What in OT Security? The CFC Accountability MapWhen a cyber incident hits an industrial facility, one question determines the outcome faster than any technical response: “Who has the…
Gary S Mullen·Apr 14You Fixed the Vulnerability. The Shadow Current Survived.You patched the vulnerability. You closed the ticket. You moved on.
Gary S Mullen·Mar 17Passing the Audit, Failing the Attack Path TestOn Dec. 23, 2015, a Ukrainian electric utility passed every relevant security check it faced. Its VPN access controls were in place. Its…
Gary S Mullen·Mar 10Third-Party Vendor Access: The Shadow Current to Your OTRemote vendor access isn’t a controlled stream — it’s a shadow current with unlimited flow.
