1<!DOCTYPE html> 2<html lang="en"> 3<head>
3<script>(function(w,i,g){w[g]=w[g]||[];if(typeof w[g].push=='function')w[g].push(i)}) 4(window,'G-056TTRR6MC','google_tags_first_party');</script>
4<script async src="/pb0l/"></script>
4 5
5<script> 6 window.dataLayer = window.dataLayer || []; 7 function gtag(){dataLayer.push(arguments);} 8 gtag('js', new Date()); 9 gtag('set', 'developer_id.dY2E1Nz', true); 10 11 </script>
11 12 13<!-- Google Tag Manager -->
14<script>
vendor: 327 bytes, lines 14-18
14(function(w,d,s,l,i){w[l]=w[l]||[];w[l].push({'gtm.start': 15new Date().getTime(),event:'gtm.js'});var f=d.getElementsByTagName(s)[0], 16j=d.createElement(s),dl=l!='dataLayer'?'&l='+l:'';j.async=true;j.src= 17'https://www.googletagmanager.com/gtm.js?id='+i+dl;f.parentNode.insertBefore(j,f); 18})(window,document,'script','dataLayer','
18GTM-TB85VMK5
vendor: 3 bytes, line 18
18');
18</script>
18 19<!-- End Google Tag Manager --> 20<!-- Meta Pixel Code -->
21<script>
vendor: 399 bytes, lines 21-30
21 22!function(f,b,e,v,n,t,s) 23{if(f.fbq)return;n=f.fbq=function(){n.callMethod? 24n.callMethod.apply(n,arguments):n.queue.push(arguments)}; 25if(!f._fbq)f._fbq=n;n.push=n;n.loaded=!0;n.version='2.0'; 26n.queue=[];t=b.createElement(e);t.async=!0; 27t.src=v;s=b.getElementsByTagName(e)[0]; 28s.parentNode.insertBefore(t,s)}(window, document,'script', 29'https://connect.facebook.net/en_US/fbevents.js'); 30fbq('init', '
301490018182303234
vendor: 30 bytes, lines 30-31
30'); 31fbq('track', 'PageView');
32</script>
32 33<noscript><img height="1" width="1" style="display:none" 34src="https://www.facebook.com/tr?id=1490018182303234&ev=PageView&noscript=1" 35/></noscript> 36<!-- End Meta Pixel Code --> 37<meta charset="UTF-8"> 38<meta name="viewport" content="width=device-width,initial-scale=1"> 39<title>Blog | PrOTect IT All</title> 40<meta name="description" content="Articles and insights on OT security, critical infrastructure protection, and cybersecurity from Aaron Crow and the PrOTect IT All team."> 41<meta property="og:title" content="Blog | PrOTect IT All"> 42<meta property="og:description" content="Articles and insights on OT security, critical infrastructure protection, and cybersecurity."> 43<meta property="og:type" content="website"> 44<meta property="og:url" content="https://protectitallpod.com/blog"> 45<meta property="og:image" content="https://episodes.castos.com/65a3de233ee354-30886570/images/podcast/covers/c1a-w52rp-gdqdq96pum57-e3j1pr.png"> 46<meta property="og:site_name" content="PrOTect IT All"> 47<meta name="twitter:card" content="summary_large_image"> 48<meta name="twitter:title" content="Blog | PrOTect IT All"> 49<meta name="twitter:description" content="Articles and insights on OT security, critical infrastructure protection, and cybersecurity."> 50<link rel="canonical" href="https://protectitallpod.com/blog"> 51<link rel="icon" type="image/x-icon" href="/favicon.ico"> 52<link rel="icon" type="image/png" sizes="32x32" href="/favicon-32.png"> 53<link rel="icon" type="image/png" sizes="16x16" href="/favicon-16.png"> 54<link rel="apple-touch-icon" sizes="180x180" href="/apple-touch-icon.png"> 55<link rel="preload" href="/fonts/oswald-500-latin.woff2" as="font" type="font/woff2" crossorigin> 56<link rel="preload" href="/fonts/inter-400-latin.woff2" as="font" type="font/woff2" crossorigin> 57<link rel="stylesheet" href="/fonts.css"> 58<style> 59*{margin:0;padding:0;box-sizing:border-box} 60:root{ 61 --o:#E06000;--og:#ff7a1a;--o-text:#FF7A1A; 62 --black:#000;--near-black:#0a0a0a;--dark:#111; 63 --white:#fff;--off-white:#f5f5f5;--light-gray:#e0e0e0; 64 --mid-gray:#888;--text-gray:#bbb; 65 --heading:'Oswald',sans-serif; 66 --body:'Inter',system-ui,-apple-system,sans-serif; 67 --mono:'IBM Plex Mono',ui-monospace,SFMono-Regular,Menlo,monospace; 68 --max:1180px;--line:#1e1e1e 69} 70body{font-family:var(--body);background:#050505;color:var(--white);-webkit-font-smoothing:antialiased;overflow-x:hidden;position:relative} 71/* Atmosphere: top orange glow + fading blueprint grid */ 72body::before{content:'';position:fixed;inset:0;z-index:-2;background:radial-gradient(130% 65% at 50% -12%,rgba(224,96,0,.13),transparent 58%),#050505} 73body::after{content:'';position:fixed;inset:0;z-index:-1;pointer-events:none; 74 background-image:linear-gradient(rgba(255,255,255,.032) 1px,transparent 1px),linear-gradient(90deg,rgba(255,255,255,.032) 1px,transparent 1px); 75 background-size:46px 46px; 76 -webkit-mask-image:radial-gradient(115% 62% at 50% 0%,#000 32%,transparent 78%); 77 mask-image:radial-gradient(115% 62% at 50% 0%,#000 32%,transparent 78%)} 78a{color:inherit;text-decoration:none} 79img{display:block;max-width:100%} 80 81/* Shared kicker (technical mono label) */ 82.kicker{font-family:var(--mono);font-size:12px;font-weight:500;letter-spacing:.08em;color:var(--o-text);text-transform:uppercase;display:inline-flex;align-items:center;gap:8px} 83 84/* PAGE HEADER */ 85.blog-hero{max-width:var(--max);margin:0 auto;padding:72px 32px 34px} 86.blog-hero .kicker{margin-bottom:16px} 87.blog-hero h1{font-family:var(--heading);font-size:clamp(44px,7vw,84px);font-weight:700;text-transform:uppercase;line-height:.98;letter-spacing:-.015em;margin-bottom:16px} 88.blog-hero h1 .amp{color:var(--o)} 89.blog-hero p{font-size:17px;color:var(--text-gray);line-height:1.65;max-width:600px} 90.blog-hero .rule{display:flex;align-items:center;gap:16px;margin-top:26px;color:var(--mid-gray);font-family:var(--mono);font-size:12px;letter-spacing:.06em;text-transform:uppercase} 91.blog-hero .rule::after{content:'';flex:1;height:1px;background:linear-gradient(90deg,var(--line),transparent)} 92 93/* WRAP */ 94.blog-wrap{max-width:var(--max);margin:0 auto;padding:8px 32px 96px} 95 96/* FEATURED (split: image beside copy) */ 97.feat{display:grid;grid-template-columns:1.05fr .95fr;border:1px solid var(--line);overflow:hidden;background:#0c0c0d;margin-bottom:44px;animation:rise .6s cubic-bezier(.2,.7,.2,1) both} 98.feat-media,.feat-ph{position:relative;overflow:hidden;min-height:clamp(300px,33vw,440px);background:#0a0a0a} 99.feat-media::before{content:'';position:absolute;inset:0;background:var(--cover,none) center/cover no-repeat;filter:blur(26px) brightness(.4) saturate(.85);transform:scale(1.2)} 100.feat-media img{position:absolute;inset:0;width:100%;height:100%;object-fit:contain;transition:transform .7s cubic-bezier(.2,.7,.2,1)} 101.feat:hover .feat-media img{transform:scale(1.05)} 102.feat-media::after{content:'';position:absolute;inset:0;background:linear-gradient(90deg,transparent 68%,rgba(12,12,13,.35))} 103.feat-ph{background:radial-gradient(120% 120% at 15% 0%,rgba(224,96,0,.26),transparent 55%),linear-gradient(135deg,#1a1206,#0a0a0a 62%)} 104.feat-ph::before{content:'Pr\00A0OT\00A0ect';position:absolute;inset:0;display:flex;align-items:center;justify-content:center;font-family:var(--heading);font-weight:700;text-transform:uppercase;font-size:34px;letter-spacing:.05em;
104color:rgba(255,255,255,.14)} 105.feat-body{padding:clamp(28px,3.6vw,52px);display:flex;flex-direction:column;justify-content:center;border-left:1px solid var(--line)} 106.feat .kicker{margin-bottom:16px} 107.feat-title{font-family:var(--heading);font-size:clamp(28px,4.4vw,52px);font-weight:700;text-transform:uppercase;line-height:1.02;letter-spacing:-.01em;color:#fff;margin-bottom:12px} 108.feat-sub{font-size:16px;color:var(--o-text);line-height:1.4;margin-bottom:12px;font-weight:500} 109.feat-excerpt{font-size:16px;color:var(--light-gray);line-height:1.65;max-width:640px;margin-bottom:22px;display:-webkit-box;-webkit-line-clamp:2;-webkit-box-orient:vertical;overflow:hidden} 110.feat-cta{display:inline-flex;align-items:center;gap:12px;font-family:var(--mono);font-size:13px;font-weight:600;text-transform:uppercase;letter-spacing:.06em;color:#fff} 111.feat-cta b{color:var(--o-text);font-weight:600} 112.feat-cta i{font-style:normal;color:var(--o);transition:transform .25s} 113.feat:hover .feat-cta i{transform:translateX(6px)} 114 115/* GRID */ 116.blog-grid{display:grid;grid-template-columns:repeat(auto-fill,minmax(330px,1fr));gap:26px} 117.card{display:flex;flex-direction:column;background:#0c0c0d;border:1px solid var(--line);overflow:hidden;transition:border-color .25s,transform .25s,box-shadow .25s;animation:rise .55s cubic-bezier(.2,.7,.2,1) both;animation-delay:calc(var(--i,0)*55ms)} 118.card:hover{border-color:rgba(224,96,0,.55);transform:translateY(-4px);box-shadow:0 18px 44px -22px rgba(224,96,0,.5)} 119.card-media{position:relative;aspect-ratio:16/9;overflow:hidden;background:#0a0a0a;border-bottom:1px solid var(--line)} 120/* blurred backdrop fills the frame; the sharp image sits on top, fully visible */ 121.card-media:not(.card-media--ph)::before{content:'';position:absolute;inset:0;background:var(--cover,none) center/cover no-repeat;filter:blur(22px) brightness(.42) saturate(.85);transform:scale(1.2)} 122.card-media img{position:absolute;inset:0;width:100%;height:100%;object-fit:contain;transition:transform .55s cubic-bezier(.2,.7,.2,1)} 123.card:hover .card-media img{transform:scale(1.05)} 124/* placeholder cover */ 125.card-media--ph{display:flex;align-items:center;justify-content:center;background:radial-gradient(130% 120% at 20% 0%,rgba(224,96,0,.22),transparent 52%),linear-gradient(135deg,#161009,#0a0a0a 60%)} 126.card-media--ph::before{content:'';position:absolute;inset:0;background-image:linear-gradient(rgba(255,255,255,.04) 1px,transparent 1px),linear-gradient(90deg,rgba(255,255,255,.04) 1px,transparent 1px);background-size:26px 26px;opacity:.6} 127.ph-mark{position:relative;font-family:var(--heading);font-weight:700;text-transform:uppercase;font-size:26px;letter-spacing:.04em;color:rgba(255,255,255,.28);line-height:1;text-align:center} 128.ph-mark b{color:rgba(224,96,0,.6);font-weight:700} 129.card-body{padding:22px 22px 24px;display:flex;flex-direction:column;flex:1} 130.card-meta{font-family:var(--mono);font-size:11.5px;letter-spacing:.05em;text-transform:uppercase;color:var(--mid-gray);margin-bottom:12px;display:flex;align-items:center;gap:9px} 131.card-meta .dot{color:var(--o)} 132.card-title{font-family:var(--heading);font-size:21px;font-weight:700;text-transform:uppercase;line-height:1.12;letter-spacing:-.005em;color:#fff;margin-bottom:10px} 133.card:hover .card-title{color:var(--og)} 134.card-title{transition:color .2s} 135.card-sub{font-size:13.5px;color:var(--o-text);line-height:1.4;margin-bottom:9px} 136.card-excerpt{font-size:14px;color:var(--text-gray);line-height:1.62;margin-bottom:18px;display:-webkit-box;-webkit-line-clamp:2;-webkit-box-orient:vertical;overflow:hidden} 137.card-read{margin-top:auto;font-family:var(--mono);font-size:12px;font-weight:600;text-transform:uppercase;letter-spacing:.06em;color:var(--o-text);display:inline-flex;align-items:center;gap:8px} 138.card-read i{font-style:normal;transition:transform .25s} 139.card:hover .card-read i{transform:translateX(5px)} 140 141@keyframes rise{from{opacity:0;transform:translateY(18px)}to{opacity:1;transform:none}} 142@media (prefers-reduced-motion:reduce){.card,.feat{animation:none}} 143 144/* LEAD CAPTURE */ 145.lead{max-width:var(--max);margin:0 auto;padding:8px 32px 20px} 146.lead-card{position:relative;border:1px solid var(--line);background:linear-gradient(180deg,#0c0c0d,#080808);padding:clamp(28px,4vw,44px);text-align:center;overflow:hidden} 147.lead-card::before{content:'';position:absolute;inset:0;background:radial-gradient(90% 120% at 50% -20%,rgba(224,96,0,.14),transparent 60%);pointer-events:none} 148.lead-card>*{position:relative} 149.lead-card .kicker{margin-bottom:12px} 150.lead-card h2{font-family:var(--heading);font-size:clamp(24px,3.4vw,34px);font-weight:700;text-transform:uppercase;line-height:1.05;margin-bottom:10px} 151.lead-card p{color:var(--text-gray);font-size:15px;line-height:1.6;max-width:520px;margin:0 auto 24px} 152.lead-form{max-width:560px;margin:0 auto;background:#0a0a0a;border:1px solid var(--line);overflow:hidden} 153.lead-form iframe{width:100%;height:520px;border:none;display:block} 154 155/* FOOTER */ 156footer{padding:52px 32px;border-top:1px solid var(--line);text-align:center} 157footer .footer-logo{font-family:var(--heading);font-size:16px;font-weight:700;text-transform:uppercase;margin-bottom:6px} 158footer .footer-links{font-size:12px;
158color:var(--mid-gray);margin-bottom:8px} 159footer .footer-links a{color:var(--o)} 160footer .footer-copy{font-size:11px;color:#777;font-family:var(--mono)} 161 162@media(max-width:768px){ 163 .blog-hero{padding:52px 20px 28px} 164 .blog-wrap{padding:6px 20px 72px} 165 .feat{grid-template-columns:1fr} 166 .feat-media,.feat-ph{min-height:210px} 167 .feat-body{border-left:none;border-top:1px solid var(--line)} 168 .blog-grid{grid-template-columns:1fr;gap:22px} 169 .lead{padding:6px 20px 16px} 170} 171</style> 172</head> 173<body> 174<!-- Google Tag Manager (noscript) -->
vendor: 68 bytes, lines 174-175
174 175<noscript><iframe src="https://www.googletagmanager.com/ns.html?id=
175GTM-TB85VMK5
vendor: 83 bytes, lines 175-176
175" 176height="0" width="0" style="display:none;visibility:hidden"></iframe></noscript>
177<!-- End Google Tag Manager (noscript) --> 178 179 180<!-- Shared nav --> 181<nav class="pia-nav" role="navigation" aria-label="Main navigation"> 182<style> 183:root{--pia-nav-h:64px} 184.pia-nav{position:sticky;top:0;z-index:100;background:#000;border-bottom:1px solid #222;box-sizing:border-box} 185.pia-nav *{box-sizing:border-box} 186.pia-nav a{text-decoration:none} 187.pia-nav-inner{max-width:1100px;margin:0 auto;padding:0 32px;height:64px;display:flex;align-items:center;justify-content:space-between;gap:24px} 188.pia-nav-logo{display:flex;align-items:center;gap:10px;flex-shrink:0;color:#fff} 189.pia-nav-logo img{width:32px;height:32px;border-radius:6px;display:block} 190.pia-nav-logo span{font-family:'Oswald',sans-serif;font-size:20px;font-weight:700;text-transform:uppercase;letter-spacing:.02em;color:#fff;white-space:nowrap} 191.pia-nav-logo b{color:#E06000;font-weight:700} 192.pia-nav-scroll{position:relative;min-width:0} 193.pia-nav-links{display:flex;align-items:center;gap:22px} 194.pia-nav-links>a{flex:0 0 auto;font-family:'Inter',system-ui,-apple-system,sans-serif;font-size:14px;font-weight:600;color:#8a8a8a;white-space:nowrap;transition:color .2s} 195.pia-nav-links>a:hover{color:#fff} 196.pia-nav-links>a[aria-current="page"]{color:#fff} 197.pia-nav-links>a.pia-nav-cta{background:#E06000;color:#fff;padding:7px 15px;border-radius:999px;font-weight:700;transition:background .2s,transform .15s} 198.pia-nav-links>a.pia-nav-cta:hover{background:#ff7a1a;color:#fff;transform:translateY(-1px)} 199.pia-nav-links>a.pia-nav-cta[aria-current="page"]{background:#ff7a1a;color:#fff} 200/* Seven items plus the wordmark stop fitting one bar well before phone width. 201 Below 900px the logo keeps its own row and the links get their own bar that 202 swipes sideways, so the page itself never scrolls horizontally. */ 203@media(max-width:900px){ 204 :root{--pia-nav-h:109px} 205 .pia-nav-inner{flex-direction:column;align-items:stretch;height:auto;padding:0;gap:0} 206 .pia-nav-logo{height:54px;padding:0 20px} 207 .pia-nav-scroll{overflow:hidden;border-top:1px solid #171717} 208 .pia-nav-links{gap:18px;padding:11px 20px;overflow-x:auto;-webkit-overflow-scrolling:touch;scrollbar-width:none;-ms-overflow-style:none} 209 .pia-nav-links::-webkit-scrollbar{display:none} 210 .pia-nav-scroll::after{content:'';position:absolute;top:0;right:0;bottom:0;width:36px;pointer-events:none;background:linear-gradient(90deg,rgba(0,0,0,0),#000 75%)} 211} 212@media(max-width:700px){ 213 .pia-nav-logo{height:50px} 214 .pia-nav-logo img{width:28px;height:28px} 215 .pia-nav-logo span{font-size:17px} 216 .pia-nav-links{gap:15px;padding:9px 20px} 217 .pia-nav-links>a{font-size:13px} 218 .pia-nav-links>a.pia-nav-cta{padding:6px 13px} 219} 220</style> 221 <div class="pia-nav-inner"> 222 <a href="/" class="pia-nav-logo"> 223 <img src="https://episodes.castos.com/65a3de233ee354-30886570/images/podcast/covers/c1a-w52rp-gdqdq96pum57-e3j1pr.png" alt="PrOTect IT All"> 224 <span>Pr<b>OT</b>ect <b>IT</b> All</span> 225 </a> 226 <div class="pia-nav-scroll"> 227 <div class="pia-nav-links"> 228 <a href="/episodes/">Episodes</a> 229 <a href="/blog" aria-current="page">Blog</a> 230 <a href="/about/">About</a> 231 <a href="/book/">Book</a> 232 <a href="/ot-community/">Community</a> 233 <a href="/work/">Work with Aaron</a> 234 <a href="/sponsor/" class="pia-nav-cta">Sponsor</a> 235 </div> 236 </div> 237 </div> 238</nav> 239 240 241<!-- PAGE HEADER --> 242<header class="blog-hero"> 243 <div class="kicker">// Analysis & field notes</div> 244 <h1>The Brief</h1> 245 <p>Straight talk on OT security, critical infrastructure, AI, and the human side of defending the systems we all depend on.</p> 246 <div class="rule">17 articles</div> 247</header> 248 249<!-- CONTENT --> 250<main class="blog-wrap"> 251 <a href="/blog/april-it-was-rockwell-now-its-siemens" class="feat" style="--cover:url('/blog-assets/april-it-was-rockwell-now-its-siemens/cover.jpg')"> 252 <div class="feat-media"><img src="/blog-assets/april-it-was-rockwell-now-its-siemens/cover.jpg" alt="April It Was Rockwell. Now It's Siemens."></div> 253 <div class="feat-body"> 254 <span class="kicker">Latest · Aug 21, 2026 · 11 min read</span> 255 <h2 class="feat-title">April It Was Rockwell. Now It's Siemens.</h2> 256 <p class="feat-sub">The third advisory in five months. Same door, different box. And this time the tool that opened it was written with help from AI.</p> 257 <p class="feat-excerpt">In April it was Rockwell. A federal advisory, AA26-097A, described Iranian-affiliated actors going after Allen-Bradley PLCs, hiding logic where nobody...</p>
258 <span class="feat-cta">Read the article <i>→</i></span> 259 </div> 260 </a> 261 <section class="blog-grid"> 262 <a href="/blog/the-airline-is-gone-the-emails-are-not" class="card" style="--i:0;--cover:url('/blog-assets/the-airline-is-gone-the-emails-are-not/cover.jpg')"> 263 <div class="card-media"><img src="/blog-assets/the-airline-is-gone-the-emails-are-not/cover.jpg" alt="The Airline Is Gone. The Emails Are Not." loading="lazy"></div> 264 <div class="card-body"> 265 <div class="card-meta">Aug 20, 2026 <span class="dot">/</span> 8 min read</div> 266 <h3 class="card-title">The Airline Is Gone. The Emails Are Not.</h3> 267 <p class="card-sub">Spirit stopped flying in May. The most valuable thing left in the estate turned out to be the file server. Here is the question that raises for everyone in critical infrastructure.</p> 268 <p class="card-excerpt">Picture the end of an airline. Not the headline version, the physical version. 269The planes go back to the lessors. The gates go dark.</p> 270 <span class="card-read">Read <i>→</i></span> 271 </div> 272 </a> 273 <a href="/blog/three-days-later-minnesota" class="card" style="--i:1;--cover:url('/blog-assets/three-days-later-minnesota/cover.jpg')"> 274 <div class="card-media"><img src="/blog-assets/three-days-later-minnesota/cover.jpg" alt="Three Days Later, Minnesota" loading="lazy"></div> 275 <div class="card-body"> 276 <div class="card-meta">Jul 31, 2026 <span class="dot">/</span> 12 min read</div> 277 <h3 class="card-title">Three Days Later, Minnesota</h3> 278 <p class="card-sub">More than 30 water systems got hit at once. The water stayed safe because people knew what to do after the bang, not just before it.</p> 279 <p class="card-excerpt">Three days. 280That is how long it took between me writing about advisory AA26-097A and more than 30 Minnesota community water systems finding out what that...</p> 281 <span class="card-read">Read <i>→</i></span> 282 </div> 283 </a> 284 <a href="/blog/the-hmi-said-everything-was-fine" class="card" style="--i:2;--cover:url('/blog-assets/the-hmi-said-everything-was-fine/cover.jpg')"> 285 <div class="card-media"><img src="/blog-assets/the-hmi-said-everything-was-fine/cover.jpg" alt="The HMI Said Everything Was Fine" loading="lazy"></div> 286 <div class="card-body"> 287 <div class="card-meta">Jul 24, 2026 <span class="dot">/</span> 7 min read</div> 288 <h3 class="card-title">The HMI Said Everything Was Fine</h3> 289 <p class="card-sub">The July 22 update to joint advisory AA26-097A has one part we have all heard before, and one part that should change what you do this week.</p> 290 <p class="card-excerpt">Picture a night shift operator. The coffee has gone cold. The HMI in front of them is green across the board.</p> 291 <span class="card-read">Read <i>→</i></span> 292 </div> 293 </a> 294 <a href="/blog/part-2-the-price-what-ai-can-do-to-us-if-we-re-not-paying-attention" class="card" style="--i:3;--cover:url('/blog-assets/part-2-the-price-what-ai-can-do-to-us-if-we-re-not-paying-attention/hero.png')"> 295 <div class="card-media"><img src="/blog-assets/part-2-the-price-what-ai-can-do-to-us-if-we-re-not-paying-attention/hero.png" alt="Part 2: The Price. What AI Can Do To Us If Weâre Not Paying Attention" loading="lazy"></div> 296 <div class="card-body"> 297 <div class="card-meta">May 31, 2026 <span class="dot">/</span> 23 min read</div> 298 <h3 class="card-title">Part 2: The Price. What AI Can Do To Us If Weâre Not Paying Attention</h3> 299 300 <p class="card-excerpt">The same renaissance, the other wayIâm going to open with the line I closed Part 1 with, because itâs the load-bearing premise of everything that...</p> 301 <span class="card-read">Read <i>→</i></span> 302 </div> 303 </a> 304 <a href="/blog/part-1-the-promise-what-ai-can-do-for-cyber-ot-and-the-world-we-re-building" class="card" style="--i:4;--cover:url('/blog-assets/part-1-the-promise-what-ai-can-do-for-cyber-ot-and-the-world-we-re-building/hero.png')"> 305 <div class="card-media"><img src="/blog-assets/part-1-the-promise-what-ai-can-do-for-cyber-ot-and-the-world-we-re-building/hero.png" alt="Part 1: The Promise. What AI Can Do For Cyber, OT, and the World Weâre Building" loading="lazy"></div> 306 <div class="card-body"> 307 <div class="card-meta">May 26, 2026 <span class="dot">/</span> 18 min read</div> 308 <h3 class="card-title">Part 1: The Promise. What AI Can Do For Cyber, OT, and the World Weâre Building</h3> 309 310 <p class="card-excerpt">The defenderâs curse, finally tiltingFor most of my career in OT cybersecurity, the defenders have been outgunned. Small teams.</p>
311 <span class="card-read">Read <i>→</i></span> 312 </div> 313 </a> 314 <a href="/blog/ransomware-is-coming-for-your-facilities-not-just-your-files" class="card" style="--i:5"> 315 <div class="card-media card-media--ph"><span class="ph-mark">Pr<b>OT</b>ect<br>IT All</span></div> 316 <div class="card-body"> 317 <div class="card-meta">May 13, 2026 <span class="dot">/</span> 13 min read</div> 318 <h3 class="card-title">Ransomware Is Coming For Your Facilities, Not Just Your Files</h3> 319 320 <p class="card-excerpt">Look, here is the thing. Foxconn got hit again. On May 11, the Nitrogen ransomware group dropped them on its leak site, claiming 8 terabytes of data and...</p> 321 <span class="card-read">Read <i>→</i></span> 322 </div> 323 </a> 324 <a href="/blog/we-built-a-working-ot-network-on-a-wall" class="card" style="--i:6;--cover:url('/blog-assets/we-built-a-working-ot-network-on-a-wall/7.png')"> 325 <div class="card-media"><img src="/blog-assets/we-built-a-working-ot-network-on-a-wall/7.png" alt="We Built a Working OT Network on a Wall." loading="lazy"></div> 326 <div class="card-body"> 327 <div class="card-meta">Apr 30, 2026 <span class="dot">/</span> 19 min read</div> 328 <h3 class="card-title">We Built a Working OT Network on a Wall.</h3> 329 330 <p class="card-excerpt">Look, here&#39;s the thing about OT cybersecurity. Most of the people who need to understand it have never seen it. They&#39;ve heard the acronyms.</p> 331 <span class="card-read">Read <i>→</i></span> 332 </div> 333 </a> 334 <a href="/blog/claude-mythos-and-the-ai-vulnerability-storm" class="card" style="--i:7;--cover:url('/blog-assets/claude-mythos-and-the-ai-vulnerability-storm/Claude-Ai-Cyber-Risk.png')"> 335 <div class="card-media"><img src="/blog-assets/claude-mythos-and-the-ai-vulnerability-storm/Claude-Ai-Cyber-Risk.png" alt="Claude Mythos And The AI Vulnerability Storm" loading="lazy"></div> 336 <div class="card-body"> 337 <div class="card-meta">Apr 16, 2026 <span class="dot">/</span> 12 min read</div> 338 <h3 class="card-title">Claude Mythos And The AI Vulnerability Storm</h3> 339 340 <p class="card-excerpt">Claude Mythos is the moment the industryâs biggest lie gets exposed. We never had a finding problem.</p> 341 <span class="card-read">Read <i>→</i></span> 342 </div> 343 </a> 344 <a href="/blog/ot-risk-management-that-actually-works" class="card" style="--i:8;--cover:url('/blog-assets/ot-risk-management-that-actually-works/article-OT-Risk-Management.png')"> 345 <div class="card-media"><img src="/blog-assets/ot-risk-management-that-actually-works/article-OT-Risk-Management.png" alt="OT Risk Management That Actually Works" loading="lazy"></div> 346 <div class="card-body"> 347 <div class="card-meta">Apr 14, 2026 <span class="dot">/</span> 8 min read</div> 348 <h3 class="card-title">OT Risk Management That Actually Works</h3> 349 350 <p class="card-excerpt">You cannot manage risk you cannot measure, and you cannot measure what you cannot see.</p> 351 <span class="card-read">Read <i>→</i></span> 352 </div> 353 </a> 354 <a href="/blog/critical-infrastructure-under-attack" class="card" style="--i:9;--cover:url('/blog-assets/critical-infrastructure-under-attack/article-05-infrastructure-attacks.png')"> 355 <div class="card-media"><img src="/blog-assets/critical-infrastructure-under-attack/article-05-infrastructure-attacks.png" alt="Critical Infrastructure Under Attack" loading="lazy"></div> 356 <div class="card-body"> 357 <div class="card-meta">Apr 13, 2026 <span class="dot">/</span> 2 min read</div> 358 <h3 class="card-title">Critical Infrastructure Under Attack</h3> 359 360 <p class="card-excerpt">Nation-state attacks on critical infrastructure are no longer theoretical.</p> 361 <span class="card-read">Read <i>→</i></span> 362 </div> 363 </a> 364 <a href="/blog/tabletop-exercises-and-incident-response" class="card" style="--i:10;--cover:url('/blog-assets/tabletop-exercises-and-incident-response/article-04-tabletop-ir.png')"> 365 <div class="card-media"><img src="/blog-assets/tabletop-exercises-and-incident-response/article-04-tabletop-ir.png" alt="Tabletop Exercises and Incident Response" loading="lazy"></div> 366 <div class="card-body"> 367 <div class="card-meta">Apr 11, 2026 <span class="dot">/</span> 6 min read</div> 368 <h3 class="card-title">Tabletop Exercises and Incident Response</h3> 369 370 <p class="card-excerpt">
370When a cyberattack hits an environment, there is no time to figure out who calls whom, where the playbooks are, or whether your response team has ever...</p> 371 <span class="card-read">Read <i>→</i></span> 372 </div> 373 </a> 374 <a href="/blog/the-streaming-box-that-was-hunting-scada-systems" class="card" style="--i:11;--cover:url('/blog-assets/the-streaming-box-that-was-hunting-scada-systems/article-superbox-badbox.png')"> 375 <div class="card-media"><img src="/blog-assets/the-streaming-box-that-was-hunting-scada-systems/article-superbox-badbox.png" alt="The Streaming Box That Was Hunting SCADA Systems" loading="lazy"></div> 376 <div class="card-body"> 377 <div class="card-meta">Apr 10, 2026 <span class="dot">/</span> 6 min read</div> 378 <h3 class="card-title">The Streaming Box That Was Hunting SCADA Systems</h3> 379 380 <p class="card-excerpt">Issue: SuperBox / BadBox 2.0Â |Â Source: Darknet Diaries Episode 172The most dangerous device in your house might not be your phone or your laptop.</p> 381 <span class="card-read">Read <i>→</i></span> 382 </div> 383 </a> 384 <a href="/blog/compliance-vs-security" class="card" style="--i:12"> 385 <div class="card-media card-media--ph"><span class="ph-mark">Pr<b>OT</b>ect<br>IT All</span></div> 386 <div class="card-body"> 387 <div class="card-meta">Apr 10, 2026 <span class="dot">/</span> 2 min read</div> 388 <h3 class="card-title">Compliance vs Security</h3> 389 390 <p class="card-excerpt">Compliance gives you a checklist. Security gives you protection.</p> 391 <span class="card-read">Read <i>→</i></span> 392 </div> 393 </a> 394 <a href="/blog/ai-in-cybersecurity" class="card" style="--i:13;--cover:url('/blog-assets/ai-in-cybersecurity/article-02-ai-cybersecurity.png')"> 395 <div class="card-media"><img src="/blog-assets/ai-in-cybersecurity/article-02-ai-cybersecurity.png" alt="AI in Cybersecurity" loading="lazy"></div> 396 <div class="card-body"> 397 <div class="card-meta">Apr 9, 2026 <span class="dot">/</span> 2 min read</div> 398 <h3 class="card-title">AI in Cybersecurity</h3> 399 400 <p class="card-excerpt">Everyone is adding AI to their security stack right now, often without a clear answer to the question "what problem does this solve?" The gap between AI...</p> 401 <span class="card-read">Read <i>→</i></span> 402 </div> 403 </a> 404 <a href="/blog/ot-remote-access-and-network-security" class="card" style="--i:14;--cover:url('/blog-assets/ot-remote-access-and-network-security/ot-sra.png')"> 405 <div class="card-media"><img src="/blog-assets/ot-remote-access-and-network-security/ot-sra.png" alt="OT Remote Access and Network Security" loading="lazy"></div> 406 <div class="card-body"> 407 <div class="card-meta">Apr 9, 2026 <span class="dot">/</span> 7 min read</div> 408 <h3 class="card-title">OT Remote Access and Network Security</h3> 409 410 <p class="card-excerpt">Remote access into OT environments exploded during COVID, and most organizations never stopped to ask whether they got it right.IT style VPNs, shared...</p> 411 <span class="card-read">Read <i>→</i></span> 412 </div> 413 </a> 414 <a href="/blog/protect-it-all-security-brief" class="card" style="--i:15"> 415 <div class="card-media card-media--ph"><span class="ph-mark">Pr<b>OT</b>ect<br>IT All</span></div> 416 <div class="card-body"> 417 <div class="card-meta">Apr 9, 2026 <span class="dot">/</span> 4 min read</div> 418 <h3 class="card-title">PrOTect It All Security Brief</h3> 419 420 <p class="card-excerpt">After more than 100 conversations about real-world cybersecurity, OT, and AI, the PrOTect IT All Podcast finally has a home base and a new hive.This...</p> 421 <span class="card-read">Read <i>→</i></span> 422 </div> 423 </a> 424 425 </section> 426</main> 427 428<!-- Four-action strip --> 429 430<!-- Action strip --> 431<section class="pia-act"> 432<style> 433.pia-act{background:#000;border-top:1px solid #1c1c1c;border-bottom:1px solid #1c1c1c;padding:56px 0;box-sizing:border-box} 434.pia-act *{box-sizing:border-box} 435.pia-act-inner{max-width:1100px;margin:0 auto;padding:0 32px} 436.pia-act-eyebrow{font-family:'IBM Plex Mono',ui-monospace,SFMono-Regular,monospace;font-size:11px;font-weight:600;letter-spacing:.18em;text-transform:uppercase;color:#FF7A1A;margin:0 0 20px} 437.pia-act-grid{display:grid;grid-template-columns:repeat(4,minmax(0,1fr));gap:12px} 438.pia-act-card{display:flex;flex-direction:column;background:#0a0a0a;border:1px solid #1f1f1f;border-radius:10px;padding:22px 20px 24px;color:#fff;text-decoration:none;transition:border-color .18s,background .18s,transform .18s} 439.pia-act-card:hover{border-color:#E06000;background:#0f0f0f;transform:translateY(-2px)} 440.pia-act-n{font-family:'IBM Plex Mono',ui-monospace,SFMono-Regular,monospace;font-size:12px;font-weight:600;letter-spacing:.1em;color:#E06000}
441.pia-act-label{font-family:'Oswald',sans-serif;font-size:18px;font-weight:700;text-transform:uppercase;line-height:1.2;letter-spacing:.01em;color:#fff;margin:10px 0 8px} 442.pia-act-sub{font-family:'Inter',system-ui,-apple-system,sans-serif;font-size:13.5px;line-height:1.6;color:#8a8a8a} 443@media(max-width:900px){.pia-act-grid{grid-template-columns:repeat(2,minmax(0,1fr))}} 444@media(max-width:560px){.pia-act{padding:44px 0}.pia-act-inner{padding:0 20px}.pia-act-grid{grid-template-columns:minmax(0,1fr)}} 445</style> 446 <div class="pia-act-inner"> 447 <div class="pia-act-eyebrow">// Where to next</div> 448 <div class="pia-act-grid"> 449 <a class="pia-act-card" href="/starter-kit/?src=site"> 450 <span class="pia-act-n">01</span> 451 <span class="pia-act-label">Get the Starter Kit</span> 452 <span class="pia-act-sub">Ten things to do before you spend a dollar on a tool. Free.</span> 453 </a> 454 <a class="pia-act-card" href="/book/?src=site"> 455 <span class="pia-act-n">02</span> 456 <span class="pia-act-label">Buy the book</span> 457 <span class="pia-act-sub">PrOTect IT All. Hardcover, paperback, ebook.</span> 458 </a> 459 <a class="pia-act-card" href="/work/?src=site"> 460 <span class="pia-act-n">03</span> 461 <span class="pia-act-label">Work with Aaron</span> 462 <span class="pia-act-sub">A second opinion, a talk, or something adjacent.</span> 463 </a> 464 <a class="pia-act-card" href="/sponsor/?src=site"> 465 <span class="pia-act-n">04</span> 466 <span class="pia-act-label">Sponsor the show</span> 467 <span class="pia-act-sub">Reach the people defending critical infrastructure.</span> 468 </a> 469 </div> 470 </div> 471</section> 472 473 474<!-- LEAD CAPTURE (GHL) --> 475<section class="lead"> 476 <div class="lead-card"> 477 <div class="kicker">Free field guide</div> 478 <h2>Get the OT Security Starter Kit</h2> 479 <p>Ten things to do before you spend a dollar on a tool. The PDF lands in your inbox, plus new episodes and field notes. Unsubscribe any time.</p> 480 <div class="lead-form"> 481 <iframe src="https://api.blackorchid.ai/widget/form/2hFi6ayJHEDCVoXYOD5M" id="inline-2hFi6ayJHEDCVoXYOD5M" data-layout="{'id':'INLINE'}" data-form-id="2hFi6ayJHEDCVoXYOD5M" data-form-name="Website Contact Form" title="Sign up for the list"></iframe> 482 </div> 483 </div> 484</section> 485 486<!-- FOOTER --> 487<footer> 488 <div class="footer-logo">Pr<span style="color:var(--o)">OT</span>ect <span style="color:var(--o)">IT</span> All</div> 489 <div class="footer-links">Hosted by Aaron Crow · <a href="https://protectitallpod.com">protectitallpod.com</a> · <a href="/cdn-cgi/l/email-protection#ddb4b3bbb29dadafb2a9b8bea9b4a9bcb1b1adb2b9f3beb2b0"><span class="__cf_email__" data-cfemail="4920272f2609393b263d2c2a3d203d28252539262d672a2624">[email protected]</span></a> · <a href="/privacy" style="color:var(--mid-gray)">Privacy</a></div> 490 <div class="footer-copy">© 2024-2026 PrOTect IT All. All rights reserved.</div> 491</footer>
vendor: 110 bytes, lines 491-493
491 492 493<script data-cfasync="false" src="/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js"></script>
493<script src="https://api.blackorchid.ai/js/form_embed.js"></script>
vendor: 1 bytes, line 493
493
494<script src="https://widgets.leadconnectorhq.com/loader.js" data-resources-url="https://widgets.leadconnectorhq.com/chat-widget/loader.js" data-widget-id="6ab718798615594d9a115fc8"></script>
494<script>(function(){function c(){var b=a.contentDocument||(a.contentWindow&&a.contentWindow.document);if(b){var d=b.createElement('script');d.innerHTML="window.__CF$cv$params={r:'a48110c3f81aeaf8',t:'MTc5MTU4NzQ5Nw=='};var a=document.createElement('script');a.src='/cdn-cgi/challenge-platform/scripts/jsd/main.js';document.getElementsByTagName('head')[0].appendChild(a);";b.getElementsByTagName('head')[0].appendChild(d)}}if(document.body){var a=document.createElement('iframe');a.height=1;a.width=1;a.style.position='absolute';a.style.top=0;a.style.left=0;a.style.border='none';a.style.visibility='hidden';document.body.appendChild(a);if('loading'!==document.readyState)c();else if(window.addEventListener)document.addEventListener('DOMContentLoaded',c);else{var e=document.onreadystatechange||function(){};document.onreadystatechange=function(b){e(b);'loading'!==document.readyState&&(document.onreadystatechange=e,c())}}}})();</script>
494<script type="module" src="https://static.cloudflareinsights.com/beacon.min.js/v4bc70e2c01a94c73b74392e4234840661791215815920" integrity="sha512-L0ha0OXavK/8okipN9F8BtP84dg9DUhPERbBXzwI6dgTA55d2+yweo3pn5CSFYs45/r8md2+xvUPtTdvTNRfjA==" data-cf-beacon='{"version":"2024.11.0","token":"1d760b74bd214f6dac275718fcb40157","r":1,"spa":2}' crossorigin="anonymous"></script>
494 495</body> 496</html>
Line numbers count LF bytes from the start of the resource, as the search results do. Vendor segments are library code the classifier recognised; they are stored but not indexed. Bytes are shown as Latin1 characters, one per byte.