--- title: "#ot-security articles | Hashnode" description: "Explore 14 articles tagged #ot-security on Hashnode. Tutorials, guides, and how-tos from the community." url: "https://hashnode.com/tag/ot-security" --- Tag # #ot-security 14 posts · 0 followers [Cyber Knight](https://hashnode.com/@cyberknight2479) · [2d ago](https://hashnode.com/posts/five-governments-just-warned-you-about-your-freezer/6af170ef164266c5e8a710ad) ### [Five Governments Just Warned You About Your Freezer](https://nulltrace.hashnode.dev/five-governments-just-warned-you-about-your-freezer?utm_source=hashnode&utm_medium=feed) Hackers spent a month warming Europe's supermarkets and blood banks from the internet. On 5 November, five US agencies said out loud what the pattern had been saying all along. 5 min read · [nulltrace.hashnode.dev](https://nulltrace.hashnode.dev/five-governments-just-warned-you-about-your-freezer?utm_source=hashnode&utm_medium=feed) [Preetimant](https://hashnode.com/@preetimant) · [Nov 1](https://hashnode.com/posts/abusing-an-unauthenticated-modbus-memory-write-htb-sneak-peek/6ae7a3af196b4b7530daa3e9) ### [Abusing an Unauthenticated Modbus Memory Write — HTB Sneak peek](https://preetimant.hashnode.dev/abusing-an-unauthenticated-modbus-memory-write-htb-sneak-peek?utm_source=hashnode&utm_medium=feed) From Reading Raw PLC Memory to Overwriting an Authentication Hash 11 min read · [preetimant.hashnode.dev](https://preetimant.hashnode.dev/abusing-an-unauthenticated-modbus-memory-write-htb-sneak-peek?utm_source=hashnode&utm_medium=feed) [Nytcc](https://hashnode.com/@nytcc1) · [Oct 27](https://hashnode.com/posts/gicsp-certification-preparation-study-guide/6ae096d65e3c573240a88b32) ### [GICSP Certification Preparation: Training and Study Guide](https://nytcc.hashnode.dev/gicsp-certification-preparation-study-guide?utm_source=hashnode&utm_medium=feed) Prepare for GICSP with a practical study plan covering ICS/OT security, exam objectives, hands-on practice, and SANS ICS410 training strategies today. 8 min read · [nytcc.hashnode.dev](https://nytcc.hashnode.dev/gicsp-certification-preparation-study-guide?utm_source=hashnode&utm_medium=feed) [404 Founders](https://hashnode.com/@404-founders) · [Oct 13](https://hashnode.com/posts/defrost-mode-how-france-s-supermarket-cold-chain-got-cooked-by-a-year-old-cve/6adc3138be94922925d9df34) ### [Defrost Mode: How France's Supermarket Cold Chain Got Cooked](https://404-founders.com/blog/defrost-mode-how-france-s-supermarket-cold-chain-got-cooked-by-a-year-old-cve?utm_source=hashnode&utm_medium=feed) October 2026 attacks on French supermarket refrigeration systems highlight internet-exposed Danfoss controllers, legacy firmware and OT network isolation. 9 min read · [404-founders.com](https://404-founders.com/blog/defrost-mode-how-france-s-supermarket-cold-chain-got-cooked-by-a-year-old-cve?utm_source=hashnode&utm_medium=feed) [Kazem Mortazavi](https://hashnode.com/@kazem-mortazavi) · [Oct 10](https://hashnode.com/posts/our-plant-network-isn-t-connected-to-the-internet-why-that-sentence-won-t-save-your-production/6ac9a9e05c66d5e709949b3a) ### ["Our plant network isn't connected to the internet" — why that sentence won't save your production](https://securityland.hashnode.dev/our-plant-network-isn-t-connected-to-the-internet-why-that-sentence-won-t-save-your-production?utm_source=hashnode&utm_medium=feed) When I visit industrial sites, I almost always hear the same sentence: "Our control network is separate; it isn't connected to the internet." Then we draw the real map of who talks to whom, and the fo 2 min read · [securityland.hashnode.dev](https://securityland.hashnode.dev/our-plant-network-isn-t-connected-to-the-internet-why-that-sentence-won-t-save-your-production?utm_source=hashnode&utm_medium=feed) [404 Founders](https://hashnode.com/@404-founders) · [Sep 5](https://hashnode.com/posts/snap7-ai-siemens-s7-ics-exploitation-aa26-231a/6aa60180a0b69ccb0afe31b3) ### [snap7, AI, and Port 102: How Attackers Are Democratizing Siemens S7 PLC Exploitation](https://404-founders.com/blog/snap7-ai-siemens-s7-ics-exploitation-aa26-231a?utm_source=hashnode&utm_medium=feed) CISA AA26-231A: AI-generated scripts built on python-snap7 target Siemens S7 PLCs via port 102. Technical analysis of S7comm protocol, attack chain, detection engineering. 11 min read · [404-founders.com](https://404-founders.com/blog/snap7-ai-siemens-s7-ics-exploitation-aa26-231a?utm_source=hashnode&utm_medium=feed) [404 Founders](https://hashnode.com/@404-founders) · [Aug 26](https://hashnode.com/posts/private-apn-route-into-ot-cert-polska/6a8f22a7be356a6b0912e468) ### [The Private APN That Became a Route Into OT](https://404-founders.com/blog/private-apn-route-into-ot-cert-polska?utm_source=hashnode&utm_medium=feed) CERT Polska reconstructed an unusual path from a compromised wind-farm network, through a private cellular APN, into a separate CHP plant's OT environment. 7 min read · [404-founders.com](https://404-founders.com/blog/private-apn-route-into-ot-cert-polska?utm_source=hashnode&utm_medium=feed) [404 Founders](https://hashnode.com/@404-founders) · [Aug 21](https://hashnode.com/posts/ai-assisted-attacks-targeting-siemens-s7-plcs/6a8c8915942fec7d35dc25f7) ### [AI-Assisted Attacks Are Targeting Siemens S7 PLCs](https://404-founders.com/blog/ai-assisted-attacks-targeting-siemens-s7-plcs?utm_source=hashnode&utm_medium=feed) U.S. agencies warn that threat actors are scanning exposed Siemens S7 controllers and using AI-assisted Snap7 tooling to probe PLC memory and logic. 6 min read · [404-founders.com](https://404-founders.com/blog/ai-assisted-attacks-targeting-siemens-s7-plcs?utm_source=hashnode&utm_medium=feed) [Satyam Rastogi](https://hashnode.com/@satyamrastogi) · [May 6](https://hashnode.com/posts/uae-critical-infrastructure-under-siege-iran-linked-breach-campaign-analysis/69fb5d5897aa5cb7e9da51a3) ### [UAE Critical Infrastructure Under Siege: Iran-Linked Breach Campaign Analysis](https://satyamrastogi.hashnode.dev/uae-critical-infrastructure-under-siege-iran-linked-breach-campaign-analysis?utm_source=hashnode&utm_medium=feed) Originally published on satyamrastogi.com Iran-linked threat actors escalating cyber operations against UAE critical infrastructure with 3x breach attempt surge. Attack chains target OT environments, supervisory systems, and energy sector. Red team ... 6 min read · [satyamrastogi.hashnode.dev](https://satyamrastogi.hashnode.dev/uae-critical-infrastructure-under-siege-iran-linked-breach-campaign-analysis?utm_source=hashnode&utm_medium=feed) [Satyam Rastogi](https://hashnode.com/@satyamrastogi) · [Apr 12](https://hashnode.com/posts/rockwell-automation-plcs-4000-exposed-devices-iranian-ot-targeting/69dba4cd16dab3b97788d6e0) ### [Rockwell Automation PLCs: 4,000 Exposed Devices & Iranian OT Targeting](https://satyamrastogi.hashnode.dev/rockwell-automation-plcs-4000-exposed-devices-iranian-ot-targeting?utm_source=hashnode&utm_medium=feed) Originally published on satyamrastogi.com Nearly 4,000 internet-exposed Rockwell Automation PLCs identified in active Iranian reconnaissance campaigns. Analysis of OT attack surface, device enumeration tactics, and payload delivery mechanisms target... 5 min read · [satyamrastogi.hashnode.dev](https://satyamrastogi.hashnode.dev/rockwell-automation-plcs-4000-exposed-devices-iranian-ot-targeting?utm_source=hashnode&utm_medium=feed)