US Critical Infrastructure Still Struggles With OT Security

Panelists at RSAC Conference 2025 warned that US critical infrastructure remains vulnerable to high-end cyber threats — citing ransomware incidents like Colonial Pipeline and persistent nation-state actors (Salt Typhoon, Volt Typhoon, pro‑Iranian groups) targeting utilities, telecoms and water systems. The discussion emphasized weak Sector Risk Management Agencies, federal workforce cuts, and slow intelligence-sharing, and urged stronger basic cyber hygiene, tabletop exercises, and faster declassification and public-private information sharing to improve preparedness.