Four Ideas to Carry

1. A plant has more than one network. The wired control network is the one everyone draws. Cellular, radio and vendor links are the ones attackers look for.

2. Private is a setting, and settings can be wrong. A private mobile network can still let every device on it talk to every other device. In Poland, that one setting connected a wind farm to a power plant.

3. Attacks are loud on the plant side. Before a turbine stops, controllers start doing new things and strangers start talking to them. Someone has to be listening.

4. Close the path. Keep the plant running. Prove both. A fix that stops the attacker and also stops the heat has failed. Every response needs a security check and a service check.