‘Stranger Things’ emerge when OT security is stuck in the past

The report discusses how legacy OT/ICS environments remain exposed as APTs (e.g., Volt Typhoon, Salt Typhoon) exploit known CVEs and leverage LOTL techniques (RDP/VPN, ACL changes) to gain and sustain access across critical infrastructure, and it urges defenders to follow PERA/IEC 62443 and recent CISA guidance—emphasizing rigorous patch management, network segmentation/isolation, comprehensive asset inventories, and continuous monitoring for IOCs/IOAs to mitigate risks from internet-exposed, insecure protocols and aging systems.