The EmberOT Blog

Looking for additional insight on your security quest? Read timely articles from EmberOT experts on today’s most important industrial security issues. Blog subscribers get a Saturday wrap-up of recent news and activities.

July 30, 2026

The Security Assessment Was the Easy Part (Like Catching a Magikarp)

A security assessment fills a report with findings the way a Pokedex fills with entries. Neither one wins a fight. Here’s...

ot security, Security assessment in OT

Cybersecurity Musings

July 23, 2026

Context is the Missing Layer in OT Security

A CVSS score can tell you how severe a vulnerability looks on paper. It cannot tell you whether that vulnerability is reachable...

Cybersecurity Musings

July 17, 2026

OT Credential Abuse: They Logged In. They Didn’t Break In

The dangerous intruder in OT today isn’t bombing the wall. They walked through the front door with a key that shouldn’t...

Cybersecurity Musings

July 8, 2026

The Transparency Curve: Understanding Statistics, Machine Learning, LLMs, and AI in OT Cybersecurity

The term Artificial Intelligence (AI) often covers everything from a mathematical decision tree written in 2011 to a large...

Cybersecurity Musings

July 1, 2026

Agentic AI in OT: An Army of Helpers You Never Hired

Agentic AI in OT is moving into operational workflows faster than anyone is governing it. Every helpful one is a credential...

Cybersecurity Musings

June 25, 2026

LLMs in OT Security: Translation Layer, Not Detection Layer

If you have sat in a vendor briefing in the last eighteen months, you have heard the pitch: “AI-powered threat...

Cybersecurity Musings

June 11, 2026

Lighting the Map: Mapping INSM in OT

Let’s talk about mapping INSM to what you can actually see across NERC, FERC, NIST, and NIS2. Mapping INSM means documenting...

Cybersecurity Musings

June 4, 2026

OT Segmentation: Why the Framework Matters Less Than the Discipline

Part 2 of 2: Why the quality of your OT segmentation in real industrial environments matters more than the label on the framework...

Cybersecurity Musings

May 28, 2026

The Purdue Model and IEC 62443: Two Frameworks, Different Jobs

Part 1 of a 2-part series detailing what IEC 62443 and the Purdue Model actually do, and why conflating them may cost you...

Graphic for the CIP-015 Compliance on a Budget blog shows a scene inside a warm, bustling fantasy tavern lit by lanterns and fireplaces, where a group of adventurers gathers around a large wooden table covered with maps, notes, dice, and planning tools. One character points at the map while the others study routes and discuss strategy, symbolizing collaborative planning and phased execution. A glowing phoenix perched above the group illuminates the room with EmberOT’s signature orange glow. The tavern is filled with additional travelers, wooden beams, banners, clocks, and intricate fantasy décor, creating the feeling of a central planning hub before a major quest.

Cybersecurity Musings

May 20, 2026

CIP-015 Compliance on a Budget

For this week’s article, I wanted to share a scrappy, starter-gear approach to CIP-015 compliance and internal network...

The EmberOT Blog

Filter By:

Become a Subscriber