Session 3a: Pivoting to the Plant: Identity Attacks Across IT and OT.
While attackers continue to exploit weaknesses in on-premises networks, they are increasingly leveraging misconfigurations in identity and access management to move laterally towards operational technology assets. Drawing on real-world engagements across Critical National Infrastructure and Operators of Essential Services, this session will examine how these attack paths develop, the techniques adversaries use to cross IT and OT boundaries, and the risks they create for critical operations.
Attendees will gain practical insight into how defenders can identify potential routes into OT environments, strengthen controls around identities and network access, and detect and disrupt lateral movement before attackers reach critical assets.
