Last updated: April 29, 2026
ICS attacks have public-policy gravity. Each provides defender learning.
The big incidents
- Stuxnet (2010) — Iranian nuclear centrifuges; multi-stage; PLC manipulation
- BlackEnergy / Industroyer (2015-16) — Ukraine power grid; substations
- TRITON / TRISIS (2017) — Saudi petrochemical; targeted safety systems
- Colonial Pipeline (2021) — IT-side ransomware; OT shutdown precautionary
- Pipedream / Incontroller (2022) — modular ICS toolkit; pre-deployment disclosure
Custom team training + practitioner advisory
Beyond the free academy — we run private workshops, vCISO advisory, and red-team exercises tailored to your stack. For Indian SMBs scaling past their first hire.