Oldsmar Incident: When Maintenance Access Becomes the Attack Path

The reported Oldsmar incident brought remote maintenance access and water-treatment control into the same security discussion. Explore how standing trust, operator access and IT/OT convergence create an operational attack path. The episode examines the controls around maintenance authority. Related CUP episodes: OT Remote Access: Securing the Path to Physical Control OT Session Hijacking: Revoking Trusted Engineering Access Control Plane Security: When Network Segmentation Is Rewritten Legacy VPNs in OT: Remote Access and the Cost of Disruption OT Remote Access: Closing the Path When the Work Ends OT Session Theft: When a Token Bypasses the Jump Host OT Emergency Access: Designing Secure Break-Glass Operations Zero Trust in OT: Secure Access Beyond the HMI AiTM Phishing: Why MFA Does Not Prevent Session Theft Oldsmar and OT Remote Access: Questioning Standing Trust