Biggest Threat to Critical Infrastructure? Lack of Imagination

The article summarizes an ICS-CERT warning about a multi-year malware campaign targeting HMI systems in industrial control networks, highlighting common weaknesses such as Internet-exposed systems and default or weak credentials. It relays security expert Ralph Langner’s critique that infrastructure operators lack systematic threat modeling and imagination, and warns that proposed regulatory changes for nuclear operators could perpetuate inadequate risk assessment.