[{"data":1,"prerenderedAt":960},["ShallowReactive",2],{"{\"cv\":1787272322786,\"version\":\"published\"}widgets\u002Fnavigation-bar":3,"{\"cv\":1787272322786,\"resolve_relations\":[\"ResourceFeatureCard.resource\"],\"version\":\"published\"}\u002Fblog\u002Fcisa-s-water-utilities-bulletin-get-plcs-off-the-internet-but-how-":67},{"data":4,"headers":45},{"story":5,"cv":42,"rels":43,"links":44},{"name":6,"created_at":7,"published_at":8,"updated_at":9,"id":10,"uuid":11,"content":12,"slug":32,"full_slug":33,"sort_by_date":22,"position":34,"tag_list":35,"is_startpage":15,"parent_id":36,"meta_data":22,"group_id":37,"first_published_at":38,"release_id":22,"lang":39,"path":40,"alternates":41,"default_full_slug":22,"translated_slugs":22},"Navigation Bar","2026-08-05T05:55:49.585Z","2026-08-07T15:41:09.255Z","2026-08-07T15:41:09.269Z",205700094329908,"be34732b-2155-45e7-8ee2-86e1157a8cb4",{"_uid":13,"component":14,"showMarketingBanner":15,"marketingBannerContent":16},"e7a8d72d-8af8-452e-87b2-de4098162fb9","NavigationBar",false,{"type":17,"content":18},"doc",[19],{"type":20,"attrs":21,"content":23},"paragraph",{"textAlign":22},null,[24],{"text":25,"type":26,"marks":27},"See us at Black Hat booth #7505","text",[28],{"type":29,"attrs":30},"textStyle",{"color":31},"#000000","navigation-bar","widgets\u002Fnavigation-bar",0,[],205696803161001,"e116d2fb-7cac-4697-9dcb-91d9283aecc3","2026-08-05T06:19:33.200Z","default","\u002F",[],1787270785,[],[],{"age":46,"cache-control":47,"connection":48,"content-length":49,"content-type":50,"date":51,"etag":52,"referrer-policy":53,"sb-be-version":54,"server":55,"vary":56,"via":57,"x-amz-cf-id":58,"x-amz-cf-pop":59,"x-cache":60,"x-content-type-options":61,"x-frame-options":62,"x-permitted-cross-domain-policies":63,"x-request-id":64,"x-runtime":65,"x-xss-protection":66},"899","max-age=0, public, s-maxage=604800, stale-if-error=3600","keep-alive","986","application\u002Fjson; charset=utf-8","Fri, 21 Aug 2026 00:17:33 GMT","W\u002F\"564bae298a859ae31d9f789142bd2752\"","strict-origin-when-cross-origin","5.946.1","nginx\u002F1.29.1","Origin","1.1 3553261692b84388f31d013fa1d022f0.cloudfront.net (CloudFront)","q0Ppu9_yKKwGDnE_yLCp5ikiWpyrZsLcmUWGizo2UUPcEfjkNaaWVQ==","CMH68-P4","Hit from cloudfront","nosniff","SAMEORIGIN","none","0182ec40-e8ff-49f7-ae42-33ae62839239","0.024719","0",{"data":68,"headers":949},{"story":69,"cv":42,"rels":684,"links":948},{"name":70,"created_at":71,"published_at":72,"updated_at":73,"id":74,"uuid":75,"content":76,"slug":677,"full_slug":678,"sort_by_date":679,"position":680,"tag_list":681,"is_startpage":15,"parent_id":668,"meta_data":22,"group_id":682,"first_published_at":72,"release_id":22,"lang":39,"path":22,"alternates":683,"default_full_slug":22,"translated_slugs":22},"CISA's Water Utilities Bulletin - Get PLCs Off The Internet but How?","2026-08-20T21:58:45.171Z","2026-08-21T00:06:24.907Z","2026-08-21T00:06:24.922Z",211245159144380,"ccc34414-8345-49ba-82a0-cbecd630d85d",{"Tags":77,"_uid":78,"body":79,"title":80,"content":81,"component":289,"seoOgImage":290,"keyTakeaways":296,"previewImage":334,"previewTitle":336,"relatedContent":337,"seoDescription":675,"previewDescription":676},"","69a52ed9-008b-4441-a3c4-57b32d15254b",[],"CISA Told Water Utilities to Get Their PLCs Off the Internet. Here's What Stands in the Way.",{"type":17,"attrs":82,"content":83},{"backgroundColor":22},[84,93,106,114,122,130,139,147,155,163,172,180,188,196,230,238,246,255,263],{"type":20,"attrs":85,"content":86},{"textAlign":22},[87],{"text":88,"type":26,"marks":89},"On July 30, CISA warned the water and wastewater sector that attackers are actively hunting exposed programmable logic controllers, and it told operators plainly to disconnect those controllers from the internet [LINK]. While that guidance is sound, it is also harder for a lot of utilities to carry out overnight than the alert accounts for.",[90],{"type":29,"attrs":91},{"color":92},"#1A1A1A",{"type":94,"attrs":95,"content":97},"heading",{"level":96,"textAlign":22},3,[98],{"text":99,"type":26,"marks":100},"The Minnesota Incident Shows What This Kind of Exposure Actually Costs",[101,104],{"type":29,"attrs":102},{"color":103},"#F68D2E",{"type":105},"bold",{"type":20,"attrs":107,"content":108},{"textAlign":22},[109],{"text":110,"type":26,"marks":111},"Let’s back up a short time. Four days before the alert, more than 30 community water systems across Minnesota, including Maple Plain, Braham, South St. Paul, and Plymouth, were hit by a coordinated attack on their PLCs. Attackers changed device IP addresses and reset passwords, locking operators out of the same controllers they use to run treatment and distribution. Utilities lost monitoring and control functionality, some switched to manual operations to keep water moving safely. An FBI alert later confirmed that similar activity had spread to utilities in seven or more states, with pressure loss and flooding reported at some sites.",[112],{"type":29,"attrs":113},{"color":92},{"type":20,"attrs":115,"content":116},{"textAlign":22},[117],{"text":118,"type":26,"marks":119},"The FBI's alert pointed to Rockwell Automation MicroLogix 1100 and 1400 controllers specifically, though it notes that the same weakness runs across other brands as well. In at least one case, attackers went further than locking operators out: they got into the PLC project files themselves and changed the ladder logic, which contains the actual instructions telling the equipment what to do.",[120],{"type":29,"attrs":121},{"color":92},{"type":20,"attrs":123,"content":124},{"textAlign":22},[125],{"text":126,"type":26,"marks":127},"This kind of vulnerability can be found in any number of environments, including other critical infrastructure, utilities, highways, or other industries that have remote equipment.",[128],{"type":29,"attrs":129},{"color":92},{"type":94,"attrs":131,"content":132},{"level":96,"textAlign":22},[133],{"text":134,"type":26,"marks":135},"CISA's Mitigation List Assumes Resources Many Utilities Don't Have",[136,138],{"type":29,"attrs":137},{"color":103},{"type":105},{"type":20,"attrs":140,"content":141},{"textAlign":22},[142],{"text":143,"type":26,"marks":144},"CISA's mitigation list itself is short and reasonable: get PLCs off direct internet access, route remote connections through a VPN or gateway, eliminate default credentials, and keep clean offline backups of PLC firmware.",[145],{"type":29,"attrs":146},{"color":92},{"type":20,"attrs":148,"content":149},{"textAlign":22},[150],{"text":151,"type":26,"marks":152},"What the alert doesn't spell out is that a regional water district or a small municipal utility rarely runs that PLC connection the same way a defense contractor runs its network. Often it's a sole engineer checking pressure and flow from a laptop at home, or a vendor who dials in twice a year for maintenance, and an IT budget that covers a firewall and little else. Telling that utility to disconnect the PLC and put it behind a VPN assumes there's staff and time available to build and maintain that architecture, and for a lot of SLED and critical infrastructure operators, there simply isn't.",[153],{"type":29,"attrs":154},{"color":92},{"type":20,"attrs":156,"content":157},{"textAlign":22},[158],{"text":159,"type":26,"marks":160},"That isn't a knock on those operators. It reflects the actual shape of the problem CISA is asking them to solve, and it deserves to be said plainly rather than assuming the guidance closes the gap on its own.",[161],{"type":29,"attrs":162},{"color":92},{"type":94,"attrs":164,"content":165},{"level":96,"textAlign":22},[166],{"text":167,"type":26,"marks":168},"An Overlay Can Close That Gap Without Adding Headcount or Rebuilding the Network",[169,171],{"type":29,"attrs":170},{"color":103},{"type":105},{"type":20,"attrs":173,"content":174},{"textAlign":22},[175],{"text":176,"type":26,"marks":177},"This is the exact problem Terniion was built to close, and it does so without asking a utility to rip out or reconfigure the PLCs, RTUs, and HMIs already running the plant.",[178],{"type":29,"attrs":179},{"color":92},{"type":20,"attrs":181,"content":182},{"textAlign":22},[183],{"text":184,"type":26,"marks":185},"Terniion allows you to close every inbound port on the device, then opens an outbound-only connection to exactly the engineer, vendor, or central team that's meant to reach it, and nothing beyond that. The PLC stops being something an attacker can scan, find, or connect to from outside. The operator checking pressure at 2 a.m. can still do it from home, and a vendor dialing in for maintenance can still do it too, but it’s all through a connection scoped to that one task instead of the whole network behind it.",[186],{"type":29,"attrs":187},{"color":92},{"type":20,"attrs":189,"content":190},{"textAlign":22},[191],{"text":192,"type":26,"marks":193},"That kind of scoped access turns disconnecting a PLC from a directive into something a three-person operations team can actually carry out this quarter, without",[194],{"type":29,"attrs":195},{"color":92},{"type":197,"content":198},"bullet_list",[199,210,220],{"type":200,"content":201},"list_item",[202],{"type":20,"attrs":203,"content":204},{"textAlign":22},[205],{"text":206,"type":26,"marks":207},"Firmware changes",[208],{"type":29,"attrs":209},{"color":92},{"type":200,"content":211},[212],{"type":20,"attrs":213,"content":214},{"textAlign":22},[215],{"text":216,"type":26,"marks":217},"A requalification cycle",[218],{"type":29,"attrs":219},{"color":92},{"type":200,"content":221},[222],{"type":20,"attrs":223,"content":224},{"textAlign":22},[225],{"text":226,"type":26,"marks":227},"Network redesign",[228],{"type":29,"attrs":229},{"color":92},{"type":20,"attrs":231,"content":232},{"textAlign":22},[233],{"text":234,"type":26,"marks":235},"That’s because the overlay goes on top of what's already running, one site at a time, starting with whatever's highest-risk.",[236],{"type":29,"attrs":237},{"color":92},{"type":20,"attrs":239,"content":240},{"textAlign":22},[241],{"text":242,"type":26,"marks":243},"Terniion's architecture aligns with NIST CSF 2.0 and CISA's own Cross-Sector Cybersecurity Performance Goals, which is a fancy way of saying it does what this urgent alert is asking utilities to do.",[244],{"type":29,"attrs":245},{"color":92},{"type":94,"attrs":247,"content":248},{"level":96,"textAlign":22},[249],{"text":250,"type":26,"marks":251},"Whether Utilities Can Act on This Guidance Will Matter More Than Whether They Agree With It",[252,254],{"type":29,"attrs":253},{"color":103},{"type":105},{"type":20,"attrs":256,"content":257},{"textAlign":22},[258],{"text":259,"type":26,"marks":260},"Minnesota will not be the last state to receive this kind of alert firsthand, and the utilities that come out ahead of the next one will likely be the ones that found a way to get their PLCs off the internet without needing a bigger budget to do it.",[261],{"type":29,"attrs":262},{"color":92},{"type":20,"attrs":264,"content":265},{"textAlign":22},[266,271,284],{"text":267,"type":26,"marks":268},"See how Terniion secures OT, IIoT, and SCADA environments without touching a device or interrupting a process, then ",[269],{"type":29,"attrs":270},{"color":92},{"text":272,"type":26,"marks":273},"book a demo built around what's actually running in your environment",[274,281],{"type":275,"attrs":276},"link",{"href":277,"uuid":278,"anchor":22,"target":279,"linktype":280},"\u002Fcontact-us","4d2d4690-a1b0-4f7b-b4d6-de0e61171dd8","_self","story",{"type":29,"attrs":282},{"color":283},"#1B5FBF",{"text":285,"type":26,"marks":286},".",[287],{"type":29,"attrs":288},{"color":92},"BlogPost",{"id":291,"alt":77,"name":77,"focus":77,"title":77,"source":77,"filename":292,"copyright":77,"fieldtype":293,"meta_data":294,"is_external_url":15},211275996565505,"https:\u002F\u002Fa.storyblok.com\u002Ff\u002F292462593318313\u002F8192x5464\u002F5fd75631f7\u002Fphoto-automobile-production-line-welding-car-body-modern-car-assembly-plant-auto-industry-interior-hightech-factory-modern-production.jpg","asset",{"size":295},"8000x5336",{"type":17,"attrs":297,"content":298},{"backgroundColor":22},[299],{"type":197,"content":300},[301,312,323],{"type":200,"content":302},[303],{"type":20,"attrs":304,"content":305},{"textAlign":22},[306,310],{"text":307,"type":26,"marks":308},"CISA's July 30 warning came out of an active, ongoing attack, not a hypothetical.",[309],{"type":105},{"text":311,"type":26}," More than 30 Minnesota water systems were hit July 26–27 through exposed Rockwell MicroLogix PLCs, with attackers locking operators out by changing IPs and passwords.",{"type":200,"content":313},[314],{"type":20,"attrs":315,"content":316},{"textAlign":22},[317,321],{"text":318,"type":26,"marks":319},"CISA's fix (get PLCs off the internet) is correct but assumes resources a lot of utilities don't have.",[320],{"type":105},{"text":322,"type":26}," For a regional water district running on one engineer, a twice-a-year vendor visit, and a firewall-only IT budget, \"disconnect it and put it behind a VPN\" is a bigger lift than the alert lets on.",{"type":200,"content":324},[325],{"type":20,"attrs":326,"content":327},{"textAlign":22},[328,332],{"text":329,"type":26,"marks":330},"Closing that gap doesn't require a bigger budget or ripping out equipment.",[331],{"type":105},{"text":333,"type":26}," An overlay approach, closing inbound ports and opening scoped outbound-only access for just the people who need it, lets a small operations team actually execute CISA's guidance this quarter instead of needing a network redesign.",{"id":291,"alt":77,"name":77,"focus":77,"title":77,"source":77,"filename":292,"copyright":77,"fieldtype":293,"meta_data":335,"is_external_url":15},{},"CISA's Water Utility PLC Alert: What It Actually Takes",[338],{"_uid":339,"variant":340,"resource":341,"component":673,"hideLabel":15,"background":674},"49e598c0-ecf6-43b5-a6e0-2d4f4d14ccd9","oneThirdLeftPhoto",[342],{"name":343,"created_at":344,"published_at":345,"updated_at":346,"id":347,"uuid":348,"content":349,"slug":663,"full_slug":664,"sort_by_date":665,"position":666,"tag_list":667,"is_startpage":15,"parent_id":668,"meta_data":22,"group_id":669,"first_published_at":670,"release_id":22,"lang":39,"path":22,"alternates":671,"default_full_slug":22,"translated_slugs":22,"_stopResolving":672},"The Security Blind Spot in Long Lifecycle Assets","2026-06-15T22:43:40.090Z","2026-07-29T23:38:30.975Z","2026-07-29T23:38:30.990Z",187899167101880,"29319b49-37e8-4abb-8c43-c70b0a3fc907",{"Tags":77,"_uid":78,"body":350,"title":351,"content":352,"component":289,"seoOgImage":629,"keyTakeaways":633,"previewImage":658,"previewTitle":343,"relatedContent":660,"seoDescription":661,"previewDescription":662},[],"The security blind spot in long lifecycle assets",{"type":17,"content":353},[354,359,364,373,378,401,406,414,449,457,514,522,527,535,570,578,624],{"type":20,"attrs":355,"content":356},{"textAlign":22},[357],{"text":358,"type":26},"Most companies think about cybersecurity in terms of IT infrastructure that gets replaced every few years like laptops, servers, and even cloud workloads. But there’s a whole category of assets that don’t fit that cycle: long lifecycle assets like EV chargers, wind turbines, aircraft, ships, industrial machinery, and medical devices. These systems are expected to last 10, 20, even 30 years. ",{"type":20,"attrs":360,"content":361},{"textAlign":22},[362],{"text":363,"type":26},"This is where the real blind spot lies. While these assets are designed to endure, the security protecting them often isn’t. ",{"type":94,"attrs":365,"content":366},{"level":96,"textAlign":22},[367,371],{"text":368,"type":26,"marks":369},"CPS, IoT, and OT: Overlapping but Distinct",[370],{"type":105},{"text":372,"type":26}," ",{"type":20,"attrs":374,"content":375},{"textAlign":22},[376],{"text":377,"type":26},"More and more people are using the term \"Cyber-Physical Systems\" (CPS) to talk about the area of systems where digital and physical come together. But a lot of companies still talk about Operational Technology (OT) and Internet of Things (IoT) devices: ",{"type":197,"content":379},[380,387,394],{"type":200,"content":381},[382],{"type":20,"attrs":383,"content":384},{"textAlign":22},[385],{"text":386,"type":26},"OT usually means industrial control systems (ICS), SCADA environments, and the technology that manages factories, utilities, and important infrastructure. ",{"type":200,"content":388},[389],{"type":20,"attrs":390,"content":391},{"textAlign":22},[392],{"text":393,"type":26},"IoT is a term that usually means connected devices and sensors, like smart building systems, consumer wearables, and industrial IoT (IIoT). ",{"type":200,"content":395},[396],{"type":20,"attrs":397,"content":398},{"textAlign":22},[399],{"text":400,"type":26},"CPS includes both, which shows that these systems are closely linked digital and physical settings where problems can have real-world effects. ",{"type":20,"attrs":402,"content":403},{"textAlign":22},[404],{"text":405,"type":26},"Different ideas, but the same problem: systems that last a long time are vulnerable to dangers that change quickly. ",{"type":94,"attrs":407,"content":408},{"level":96,"textAlign":22},[409,413],{"text":410,"type":26,"marks":411},"Why Long Lifecycle = Long-Term Risk",[412],{"type":105},{"text":372,"type":26},{"type":197,"content":415},[416,427,438],{"type":200,"content":417},[418],{"type":20,"attrs":419,"content":420},{"textAlign":22},[421,425],{"text":422,"type":26,"marks":423},"Built to last:",[424],{"type":105},{"text":426,"type":26}," A wind turbine or EV charger put in place in 2025 could still be working in 2040. ",{"type":200,"content":428},[429],{"type":20,"attrs":430,"content":431},{"textAlign":22},[432,436],{"text":433,"type":26,"marks":434},"Too costly to rip-and-replace:",[435],{"type":105},{"text":437,"type":26}," Unlike laptops or servers, these systems can’t just be swapped out every time new vulnerabilities emerge. ",{"type":200,"content":439},[440],{"type":20,"attrs":441,"content":442},{"textAlign":22},[443,447],{"text":444,"type":26,"marks":445},"Threats evolve faster than assets:",[446],{"type":105},{"text":448,"type":26}," Encryption that feels safe now may be broken in 10 years, especially as quantum computing matures. The data in these systems may be particularly vulnerable to Harvest Now Decrypt Later (HNDL) attacks (see below) since critical infrastructure is of special interest to nation-state and private adversaries alike. ",{"type":94,"attrs":450,"content":451},{"level":96,"textAlign":22},[452,456],{"text":453,"type":26,"marks":454},"Common IoT, OT, and CPS Pain Points",[455],{"type":105},{"text":372,"type":26},{"type":197,"content":458},[459,470,481,492,503],{"type":200,"content":460},[461],{"type":20,"attrs":462,"content":463},{"textAlign":22},[464,468],{"text":465,"type":26,"marks":466},"Legacy Protocols (OT):",[467],{"type":105},{"text":469,"type":26}," SCADA, Modbus, and CAN Bus were not built with current encryption or authentication in mind. ",{"type":200,"content":471},[472],{"type":20,"attrs":473,"content":474},{"textAlign":22},[475,479],{"text":476,"type":26,"marks":477},"Device Proliferation (IoT): ",[478],{"type":105},{"text":480,"type":26},"There are millions, if not billions, of small endpoints with weak security measures. ",{"type":200,"content":482},[483],{"type":20,"attrs":484,"content":485},{"textAlign":22},[486,490],{"text":487,"type":26,"marks":488},"Supply Chain Risk (CPS\u002FIoT\u002FOT):",[489],{"type":105},{"text":491,"type":26}," Attackers are most likely to go after firmware and software updates. ",{"type":200,"content":493},[494],{"type":20,"attrs":495,"content":496},{"textAlign":22},[497,501],{"text":498,"type":26,"marks":499},"Remote Exposure:",[500],{"type":105},{"text":502,"type":26}," Assets that are spread out, like electric vehicle chargers or smart sensors, can't hide behind a corporate firewall. ",{"type":200,"content":504},[505],{"type":20,"attrs":506,"content":507},{"textAlign":22},[508,512],{"text":509,"type":26,"marks":510},"Compliance Pressure:",[511],{"type":105},{"text":513,"type":26}," Mandates like NIS2, NERC CIP, and even FDA medical device guidance frequently outpace the capabilities of existing deployments. ",{"type":94,"attrs":515,"content":516},{"level":96,"textAlign":22},[517,521],{"text":518,"type":26,"marks":519},"The Quantum Factor Happening Right Now: Harvest Now, Decrypt Later (HNDL)",[520],{"type":105},{"text":372,"type":26},{"type":20,"attrs":523,"content":524},{"textAlign":22},[525],{"text":526,"type":26},"With HNDL techniques, enemies can harvest data now and use quantum computing to decrypt it later. That means that sensitive data is at risk from Day One of deployment for OT, IoT, and CPS assets that last a long time. ",{"type":94,"attrs":528,"content":529},{"level":96,"textAlign":22},[530,534],{"text":531,"type":26,"marks":532},"Why Traditional Security Falls Short",[533],{"type":105},{"text":372,"type":26},{"type":197,"content":536},[537,548,559],{"type":200,"content":538},[539],{"type":20,"attrs":540,"content":541},{"textAlign":22},[542,546],{"text":543,"type":26,"marks":544},"VPNs:",[545],{"type":105},{"text":547,"type":26}," Create static entry points that persist whether in use or not, forming a massive attack surface. ",{"type":200,"content":549},[550],{"type":20,"attrs":551,"content":552},{"textAlign":22},[553,557],{"text":554,"type":26,"marks":555},"Firewalls & Detection Tools:",[556],{"type":105},{"text":558,"type":26}," Focus on alerting after compromise, not preventing it. ",{"type":200,"content":560},[561],{"type":20,"attrs":562,"content":563},{"textAlign":22},[564,568],{"text":565,"type":26,"marks":566},"One-Size-Fits-All IT Security:",[567],{"type":105},{"text":569,"type":26}," Doesn't take into consideration the fact that CPS\u002FOT\u002FIoT can be spread out, have limited resources, or last for decades. ",{"type":94,"attrs":571,"content":572},{"level":96,"textAlign":22},[573,577],{"text":574,"type":26,"marks":575},"A New Model: Security That Matches the Asset Lifecycle",[576],{"type":105},{"text":372,"type":26},{"type":197,"content":579},[580,591,602,613],{"type":200,"content":581},[582],{"type":20,"attrs":583,"content":584},{"textAlign":22},[585,589],{"text":586,"type":26,"marks":587},"No Attack Surface:",[588],{"type":105},{"text":590,"type":26}," No public IPs, no inbound ports, nothing discoverable. ",{"type":200,"content":592},[593],{"type":20,"attrs":594,"content":595},{"textAlign":22},[596,600],{"text":597,"type":26,"marks":598},"Ephemeral Tunnels:",[599],{"type":105},{"text":601,"type":26}," Connections only exist when workloads are active — and vanish when idle. ",{"type":200,"content":603},[604],{"type":20,"attrs":605,"content":606},{"textAlign":22},[607,611],{"text":608,"type":26,"marks":609},"Post-Quantum Encryption: ",[610],{"type":105},{"text":612,"type":26},"Triple-layer security that’s resistant even to future quantum threats. ",{"type":200,"content":614},[615],{"type":20,"attrs":616,"content":617},{"textAlign":22},[618,622],{"text":619,"type":26,"marks":620},"Invisible Infrastructure:",[621],{"type":105},{"text":623,"type":26}," Critical assets can’t be scanned, attacked, or used for lateral movement. ",{"type":20,"attrs":625,"content":626},{"textAlign":22},[627],{"text":628,"type":26},"Whether you call them IoT, OT, or CPS, these systems share one critical trait: they will outlive today’s encryption and security models. Your security needs to survive as long as your infrastructure does. ",{"id":630,"alt":77,"name":77,"focus":77,"title":77,"source":77,"filename":631,"copyright":77,"fieldtype":293,"meta_data":632,"is_external_url":15},187900465733163,"https:\u002F\u002Fa.storyblok.com\u002Ff\u002F292462593318313\u002F5888x3312\u002Fc6c8be17c5\u002Fman-unplugging-electric-charger-from-dock-charge-station.jpg",{},{"type":17,"content":634},[635],{"type":197,"content":636},[637,644,651],{"type":200,"content":638},[639],{"type":20,"attrs":640,"content":641},{"textAlign":22},[642],{"text":643,"type":26},"OT, IIoT, and SCADA systems have operational lifespans of 10–30 years, meaning they can't be patched or replaced on normal security timelines.",{"type":200,"content":645},[646],{"type":20,"attrs":647,"content":648},{"textAlign":22},[649],{"text":650,"type":26},"Traditional network security assumes devices can be updated; long-lifecycle assets often run end-of-life software with known, unpatched CVEs.",{"type":200,"content":652},[653],{"type":20,"attrs":654,"content":655},{"textAlign":22},[656],{"text":657,"type":26},"Securing these environments requires isolating exposure at the network layer instead of patching the device, which is what outbound-only architecture delivers.",{"id":630,"alt":77,"name":77,"focus":77,"title":77,"source":77,"filename":631,"copyright":77,"fieldtype":293,"meta_data":659,"is_external_url":15},{},[],"Protect long-lived assets from evolving cyber threats with Xiid’s quantum-safe, unaddressable security built for decades-long lifecycles.","There’s a whole category of IoT\u002FOT\u002FCPS assets with long lifecycles like EV chargers, wind turbines, aircraft, ships, industrial machinery, and medical devices whose systems last a long time and are vulnerable to dangers that change quickly.","security-blind-spot-in-long-lifecycle-assets","blog\u002Fsecurity-blind-spot-in-long-lifecycle-assets","2025-09-24",110,[],193139877037850,"c679c71c-46f1-40cc-8495-6545acb2e883","2026-09-24T09:35:00.000Z",[],true,"ResourceFeatureCard","white","CISA told water utilities to get their PLCs off the internet after attacks hit 30+ Minnesota systems. Here's what closes that gap without a bigger budget.","CISA just told water and wastewater utilities to get their PLCs off the internet after attackers hit more than 30 Minnesota water systems. This piece looks at why that guidance is harder to execute than it sounds for small municipal utilities, and what closes the gap without a bigger budget.","cisa-s-water-utilities-bulletin-get-plcs-off-the-internet-but-how-","blog\u002Fcisa-s-water-utilities-bulletin-get-plcs-off-the-internet-but-how-","2026-03-26",70,[],"4de7d684-8ab7-4ecf-9035-aee2d90c5717",[],[685],{"name":343,"created_at":344,"published_at":345,"updated_at":346,"id":347,"uuid":348,"content":686,"slug":663,"full_slug":664,"sort_by_date":665,"position":666,"tag_list":946,"is_startpage":15,"parent_id":668,"meta_data":22,"group_id":669,"first_published_at":670,"release_id":22,"lang":39,"path":22,"alternates":947,"default_full_slug":22,"translated_slugs":22},{"Tags":77,"_uid":78,"body":687,"title":351,"content":688,"component":289,"seoOgImage":919,"keyTakeaways":921,"previewImage":943,"previewTitle":343,"relatedContent":945,"seoDescription":661,"previewDescription":662},[],{"type":17,"content":689},[690,694,698,705,709,729,733,740,769,776,823,830,834,841,870,877,915],{"type":20,"attrs":691,"content":692},{"textAlign":22},[693],{"text":358,"type":26},{"type":20,"attrs":695,"content":696},{"textAlign":22},[697],{"text":363,"type":26},{"type":94,"attrs":699,"content":700},{"level":96,"textAlign":22},[701,704],{"text":368,"type":26,"marks":702},[703],{"type":105},{"text":372,"type":26},{"type":20,"attrs":706,"content":707},{"textAlign":22},[708],{"text":377,"type":26},{"type":197,"content":710},[711,717,723],{"type":200,"content":712},[713],{"type":20,"attrs":714,"content":715},{"textAlign":22},[716],{"text":386,"type":26},{"type":200,"content":718},[719],{"type":20,"attrs":720,"content":721},{"textAlign":22},[722],{"text":393,"type":26},{"type":200,"content":724},[725],{"type":20,"attrs":726,"content":727},{"textAlign":22},[728],{"text":400,"type":26},{"type":20,"attrs":730,"content":731},{"textAlign":22},[732],{"text":405,"type":26},{"type":94,"attrs":734,"content":735},{"level":96,"textAlign":22},[736,739],{"text":410,"type":26,"marks":737},[738],{"type":105},{"text":372,"type":26},{"type":197,"content":741},[742,751,760],{"type":200,"content":743},[744],{"type":20,"attrs":745,"content":746},{"textAlign":22},[747,750],{"text":422,"type":26,"marks":748},[749],{"type":105},{"text":426,"type":26},{"type":200,"content":752},[753],{"type":20,"attrs":754,"content":755},{"textAlign":22},[756,759],{"text":433,"type":26,"marks":757},[758],{"type":105},{"text":437,"type":26},{"type":200,"content":761},[762],{"type":20,"attrs":763,"content":764},{"textAlign":22},[765,768],{"text":444,"type":26,"marks":766},[767],{"type":105},{"text":448,"type":26},{"type":94,"attrs":770,"content":771},{"level":96,"textAlign":22},[772,775],{"text":453,"type":26,"marks":773},[774],{"type":105},{"text":372,"type":26},{"type":197,"content":777},[778,787,796,805,814],{"type":200,"content":779},[780],{"type":20,"attrs":781,"content":782},{"textAlign":22},[783,786],{"text":465,"type":26,"marks":784},[785],{"type":105},{"text":469,"type":26},{"type":200,"content":788},[789],{"type":20,"attrs":790,"content":791},{"textAlign":22},[792,795],{"text":476,"type":26,"marks":793},[794],{"type":105},{"text":480,"type":26},{"type":200,"content":797},[798],{"type":20,"attrs":799,"content":800},{"textAlign":22},[801,804],{"text":487,"type":26,"marks":802},[803],{"type":105},{"text":491,"type":26},{"type":200,"content":806},[807],{"type":20,"attrs":808,"content":809},{"textAlign":22},[810,813],{"text":498,"type":26,"marks":811},[812],{"type":105},{"text":502,"type":26},{"type":200,"content":815},[816],{"type":20,"attrs":817,"content":818},{"textAlign":22},[819,822],{"text":509,"type":26,"marks":820},[821],{"type":105},{"text":513,"type":26},{"type":94,"attrs":824,"content":825},{"level":96,"textAlign":22},[826,829],{"text":518,"type":26,"marks":827},[828],{"type":105},{"text":372,"type":26},{"type":20,"attrs":831,"content":832},{"textAlign":22},[833],{"text":526,"type":26},{"type":94,"attrs":835,"content":836},{"level":96,"textAlign":22},[837,840],{"text":531,"type":26,"marks":838},[839],{"type":105},{"text":372,"type":26},{"type":197,"content":842},[843,852,861],{"type":200,"content":844},[845],{"type":20,"attrs":846,"content":847},{"textAlign":22},[848,851],{"text":543,"type":26,"marks":849},[850],{"type":105},{"text":547,"type":26},{"type":200,"content":853},[854],{"type":20,"attrs":855,"content":856},{"textAlign":22},[857,860],{"text":554,"type":26,"marks":858},[859],{"type":105},{"text":558,"type":26},{"type":200,"content":862},[863],{"type":20,"attrs":864,"content":865},{"textAlign":22},[866,869],{"text":565,"type":26,"marks":867},[868],{"type":105},{"text":569,"type":26},{"type":94,"attrs":871,"content":872},{"level":96,"textAlign":22},[873,876],{"text":574,"type":26,"marks":874},[875],{"type":105},{"text":372,"type":26},{"type":197,"content":878},[879,888,897,906],{"type":200,"content":880},[881],{"type":20,"attrs":882,"content":883},{"textAlign":22},[884,887],{"text":586,"type":26,"marks":885},[886],{"type":105},{"text":590,"type":26},{"type":200,"content":889},[890],{"type":20,"attrs":891,"content":892},{"textAlign":22},[893,896],{"text":597,"type":26,"marks":894},[895],{"type":105},{"text":601,"type":26},{"type":200,"content":898},[899],{"type":20,"attrs":900,"content":901},{"textAlign":22},[902,905],{"text":608,"type":26,"marks":903},[904],{"type":105},{"text":612,"type":26},{"type":200,"content":907},[908],{"type":20,"attrs":909,"content":910},{"textAlign":22},[911,914],{"text":619,"type":26,"marks":912},[913],{"type":105},{"text":623,"type":26},{"type":20,"attrs":916,"content":917},{"textAlign":22},[918],{"text":628,"type":26},{"id":630,"alt":77,"name":77,"focus":77,"title":77,"source":77,"filename":631,"copyright":77,"fieldtype":293,"meta_data":920,"is_external_url":15},{},{"type":17,"content":922},[923],{"type":197,"content":924},[925,931,937],{"type":200,"content":926},[927],{"type":20,"attrs":928,"content":929},{"textAlign":22},[930],{"text":643,"type":26},{"type":200,"content":932},[933],{"type":20,"attrs":934,"content":935},{"textAlign":22},[936],{"text":650,"type":26},{"type":200,"content":938},[939],{"type":20,"attrs":940,"content":941},{"textAlign":22},[942],{"text":657,"type":26},{"id":630,"alt":77,"name":77,"focus":77,"title":77,"source":77,"filename":631,"copyright":77,"fieldtype":293,"meta_data":944,"is_external_url":15},{},[],[],[],[],{"age":950,"cache-control":47,"connection":48,"content-encoding":951,"content-type":50,"date":952,"etag":953,"referrer-policy":53,"sb-be-version":54,"server":55,"transfer-encoding":954,"vary":955,"via":956,"x-amz-cf-id":957,"x-amz-cf-pop":59,"x-cache":60,"x-content-type-options":61,"x-frame-options":62,"x-permitted-cross-domain-policies":63,"x-request-id":958,"x-runtime":959,"x-xss-protection":66},"898","gzip","Fri, 21 Aug 2026 00:17:36 GMT","W\u002F\"a6f0fc1525ec3557695cc8b291223835\"","chunked","Origin,Accept-Encoding","1.1 ae830955a4e25d8301abbde4cfd80dec.cloudfront.net (CloudFront)","svAHuCdBZ4v5ZFzIGqgsObii3Vf0jhltWUeSv0kpSabfD8Zqx915KA==","43ea4ae5-c354-4fa4-a158-101c964da1c9","0.037667",1787272354230]