Legacy OT is the last unpatched continent. Hospitals, ships, and factories are on it.
The systems holding modern infrastructure together were never meant to be online. They are anyway, and the people defending them are improvising.
Walk into the engine room of a fifteen-year-old cargo ship and you will find a Windows XP machine controlling ballast. Walk into a regional hospital and you will find an MRI scanner running an embedded OS that has not seen a vendor patch since 2018.
These systems are not insecure by accident. They are insecure because the alternative — replacing them — costs more than the operators have, and downtime costs more than a breach.
Defenders in this world do not patch. They segment, monitor, and pray. This piece is about what the good ones do differently.
