Attack Pathways to Power and Cooling
An OT attack is a campaign with stages: enterprise foothold, pivot across the IT/OT seam, quiet discovery of the plant, a tailored manipulation, and finally action on the physical world. Every stage is a chokepoint, and the pivot is the decisive one. The public record already hands us the templates: controllers reprogrammed while operators are blinded, grid controls driven at machine speed, safety systems attacked to remove the backstop, and ransomware that takes OT down as collateral for an IT breach. The last is the likeliest to hit a data center. Defense is layered because the threat crosses layers; no single control contains a campaign that spans IT, OT, and the physical plant.
Knowledge check
Across the historical OT attack templates, which single boundary is most decisive for a data center, and what is the most probable real-world attack scenario?
Show the answer
The IT/OT pivot boundary is most decisive, because a campaign that cannot cross from the enterprise into the control network never becomes physical. The most probable scenario is not a bespoke controller attack but a commodity IT compromise, often ransomware, that takes OT down as collateral when a shared IT dependency fails or operators lose visibility, which is why OT must be able to run islanded from compromised IT.