Critical infrastructure’s long, undefended tail exposed by UK energy attack

A cyberattack that forced a small British electricity generator offline for four days caused no power outage, threatened no part of the national grid, and may not even have been carried out by the Iran-linked hackers initially blamed. But the incident illustrates a consequential weakness in Western critical infrastructure. Thousands of small generators, water systems, and other industrial sites have aging operational technology — exposed programmable logic controllers, cellular modems, remote ma