Closing the Identity Gaps in Critical Infrastructure Security

The report warns that critical infrastructure remains highly attractive to attackers and highlights past impactful incidents (Colonial Pipeline) and reported PRC-linked persistent access campaigns (Volt Typhoon); it describes common attacker TTPs—stolen credentials, compromised VPNs/edge devices, living-off-the-land techniques—and urges adoption of zero trust workforce access controls, device-binding and continuous device posture checks, while promoting Specops Device Trust as a mitigation.