Today’s headlines span IT/OT convergence, staffing and access risks in manufacturing, post-quantum cryptography planning, AI-accelerated attack concerns, and a federal-state water-utility monitoring initiative. Together they reinforce operational priorities for OT owners and operators across manufacturing, utilities, critical infrastructure, healthcare, and buildings.
Cognizant and CrowdStrike Expand OT Security Collaboration for Converged IT/OT Environments
Industrial Cyber reported on September 4 that Cognizant and CrowdStrike introduced Cognizant Cybersecurity for Operational Technology, powered by CrowdStrike Falcon for XIoT. The offering combines industrial engineering expertise and managed operations with visibility and protection across XIoT and IT and lists capabilities such as OT asset discovery and visibility, threat detection and response, vulnerability management, attack-surface management, identity and data protection, and governance and compliance. The reported target sectors include manufacturing, energy, and critical infrastructure.
Source: Industrial Cyber
F6: Manufacturing Is a Leading Cyberattack Target as Industrial Security Staffing Gaps Persist
Industrial Cyber reported on September 4 that Russian cybersecurity firm F6 identifies manufacturing as the top cyberattack target in 2026 and says about 80% of companies, including critical-information-infrastructure facilities, face a shortage of qualified information-security personnel. F6 highlights contractor compromise and trusted remote access as key entry paths and recommends unified telemetry, rapid reconstruction of intrusion chains, alert correlation, and dedicated monitoring of contractor sessions. The findings emphasize operational burdens and third-party access risk for manufacturing teams.
Source: Industrial Cyber
G7 and CISA Urge Organizations to Begin Post-Quantum Cryptography Transition
Industrial Cyber reported on September 4 that CISA and the G7 Cyber Security Working Group urge governments and organizations to start transitioning to post-quantum cryptography, using a phased risk-based strategy, inventories of cryptographic assets and dependencies, and a transition plan. The call warns of current store-now-decrypt-later exposure and future risks to authentication mechanisms and device integrity. It also identifies public-private cooperation and procurement as levers to support a coordinated transition.
Source: Industrial Cyber
Booz Allen Warns of Narrowing Critical-Infrastructure Response Windows From AI-Enabled Attacks
Industrial Cyber reported on September 4 on Booz Allen’s Cyber Weapon Index and report The Offensive Frontier: AI as the Attacker, noting that testing of 18 frontier models found growing ability to automate stages of the cyber kill chain and implications for shrinking detection and response windows. The report urges realistic resilience exercises and emphasizes segmentation, least privilege, strong identity controls, and isolation of high-value assets, and states that counter-AI playbooks reduced autonomous-attacker success by more than 95% in its testing. The findings call for faster mitigation and stronger controls across OT estates.
Source: Industrial Cyber
Project Watershed 250 Adds Continuous Monitoring and OT Assessment Support for Water Utilities
In a September 4 release, Forescout announced participation in Project Watershed 250, which it describes as an initiative with the White House, the State of Texas, water utilities, and technology providers. Forescout says it will provide continuous monitoring and asset visibility, adversary-focused assessments, vulnerability prioritization and remediation workflows, network segmentation, and AI-enabled defense, and describes an adversary-path methodology spanning enterprise IT, OT, ICS, SCADA, treatment facilities, pump stations, and remote telemetry. The initiative focuses on distributed utility environments and operational resiliency.
Source: Forescout
Across these items, the operational priorities are consistent: accurate asset visibility, systematic patching and firmware hygiene, strong identity and credential controls, and resilience through exercises and segmentation.
