In early May 2026, a joint investigation by Dragos and Gambit Security revealed a watershed moment for the cybersecurity industry: the first documented real-world case of an adversary using coordinated commercial AI models to navigate and target Operational Technology (OT) infrastructure. The intrusion, which targeted the municipal water utility Servicios de Agua y Drenaje de Monterrey (SADM) in Mexico, provides a technical blueprint of how artificial intelligence has transitioned from a...

On May 4, 2026, the Cybersecurity and Infrastructure Security Agency (CISA), in collaboration with its international partners, released a landmark joint cybersecurity guidance: Careful Adoption of Agentic AI Services. This release marks a pivotal moment in global AI governance, specifically targeting the unique security challenges posed by AI systems that move beyond passive assistance into autonomous action. As organizations across critical infrastructure rush to deploy AI agents to...

For years, the primary concern of industrial cybersecurity has been the initial breach, the moment an adversary gains a foothold in a network. In early 2026, however, the industry must confront a more dangerous reality. According to Dragos’ 2026 OT Cybersecurity Year in Review report, a critical line was crossed in 2025: adversaries have moved beyond simple prepositioning for future attacks to actively mapping control loops. This shift represents the removal of the last practical barrier...