Now we know what people really care about

from here

I'm not going to claim a ransomware attack on critical infrastructure isn't serious, but if we can brush off ransomware attacks on hospitals then I think it's fair to ask why an attack on a pipeline is so much more serious that even unrelated ransomware operators are taking cover.

Well that makes it all better

from here

I have a tough time believing Russians, of all people, wouldn't know the societal consequences of an attack on a pipeline. As if they haven't been on the receiving end before.

Can't let powerline munching squirrels have all the fun

from here and here

If your critical infrastructure is disrupted or damaged it MIGHT be a nation state attacking you, or it might just be one toothy boi.

Sharing isn't caring when it comes to passwords

from here

If I had to guess what the one key failure in the recent water treatment plant intrusion was, it would be that there was just one password shared by everyone. It wasn't the out of date operating system that let them remotely access the system, nor the lack of a firewall. There was and is a legitimate need to be able to monitor and control the system remotely and by all indications the perpetrator simply logged in with the same password as a legitimate user, which means it could be an actual employee or ex-employee, but the shared password makes it difficult to determine who and also difficult to revoke access when people leave because you have to inform everyone of the new shared password.