Dispatches From the Desert
This year, as in previous years, the Immersive Container 7 team arrived to attend briefings, talk to vendors, and get a glimpse into the state of security – or at least, how the vendors and researchers are showcasing it. Over the next five days, we’ll share our daily highlights, whether it’s our favorite talk, vendor session, or afterparty. You can read all about it over on our Container 7 Blog.New CTI/OT Lab: Norwegian Dam Compromise: Campaign Analysis
We have received reports of a cyber incident that occurred at the Lake Risevatnet Dam, near Svelgen, Norway, in April 2025. A threat actor gained unauthorized access to a web-accessible Human-Machine Interface (HMI) and fully opened a water valve at the facility. This resulted in an excess discharge of 497 liters per second above the mandated minimum water flow. Which persisted for four hours before detection. This attack highlights a dangerous reality: critical OT systems are increasingly exposed to the internet, making them accessible to threat actors. In this case, control over a dam’s valve system was obtained via an insecure web interface, a scenario that could have had even more severe consequences. A recent report by Censys identified over 400 exposed web-based interfaces across U.S. water utilities alone. This dam incident in Norway exemplifies the tangible risks posed by such exposures. In this lab, you will be taken through the attack from an offensive viewpoint, including cracking an HMI and fully opening two valves. Why should our customers care? OT environments, including dams, energy grids, and oil pipelines, are foundational to national security and daily life. These systems cannot be secured using traditional IT playbooks. As OT becomes more connected, tailored security strategies are critical to prevent unauthorized access and catastrophic failures. Who is it for? Incident responders SOC analyst Threat Hunters Red Teamer Penetration Testers OT Engineers Here is the link to the lab: https://immersivelabs.online/v2/labs/norwegian-dam-compromise-campaign-analysisBeyond the Gap: Why Neurodivergent Minds Are Cyber's Future
Neurodiversity advocate and my own personal hero, Chris Packham, recently made a series for the BBC titled Inside Our Minds. It focused on giving a voice to neurodivergent individuals by creating short films to explain how their minds work. During the episode on dyslexia, Chris visited GCHQ to discover why dyslexic people were being actively recruited for their pattern recognition and analytical skills. They discussed how a neurodiverse workforce (made up of both neurodivergent and neurotypical individuals) enabled them to solve more complex and wide-ranging problems. In particular, they highlighted how dyslexic people make ideal “analysts for the modern era”: “Their strengths include pattern recognition when dealing with big data, seeing the bigger picture when considering complex future scenarios, and finding solutions to novel and challenging problems.” – Dyslexic thinking skills are mission-critical for protecting the country, gchq.gov.uk. Identifying as neurodivergent The National Cyber Security Centre (NCSC)’s Decrypting Diversity 2021 report stated that 19% of industry professionals identify as neurodivergent – higher than the estimated 10% of the UK population. Neurodivergence encompasses a range of conditions including, but not limited to: Autism Spectrum Disorder (ASD) Dyspraxia Dyslexia Attention Deficit Hyperactivity Disorder (ADHD) Tourette Syndrome Cybersecurity appears to be a well-suited career path for neurodivergent individuals, due to several cognitive strengths that are valued in the field. These include: High attention to detail Pattern recognition The ability to hyperfocus Persistence Creative and innovative thinking With a much-publicised cybersecurity skills gap, are neurodivergent minds the answer to this? Removing barriers to entry in cybersecurity At Immersive, we partner with charities and organisations that support the neurodivergent community with access to our Cyber Million program. The program provides free access to hands-on cyber exercises for anyone over 16 years old, helping them build the necessary skills for a career in cybersecurity and remove barriers to entry. As an organisation, we also have many neurodivergent employees, including myself. Each person brings a unique skill set and perspective to their role. As a user researcher, seeing patterns in both qualitative and quantitative data, a strong ability to remember details and sequences, and an independent and creative way of thinking, all help me to do my job better. In addition to my day job, I also chair Immersive’s DEI Committee, which focuses on advocacy, education, and safe spaces for all. Many of our DEI events have spotlighted neurodiversity, with both external speakers and panels of Immersers sharing their stories. Get involved While we try our best, we acknowledge that our platform and content will likely pose some obstacles for the neurodivergent community. So, I want to know: Have you encountered any issues? What do you see as something that could be improved? If you see an issue or bug on the platform, you can post in our community Help Forum or contact our Customer Support team. They’ll investigate and get back to you with any feedback or resolution. If you’d like to give more general feedback on your experience of Immersive as (or on behalf of) a neurodivergent individual and have suggestions for improvements, please fill out this survey. I’ll compile this feedback and present it to relevant teams who may use it for feature prioritisation. As a thank you, we’ll provide a £10 (or local currency equivalent) eGift Card for all correctly completed surveys (limited to one per person). In a world that may not have been designed for them, neurodivergent individuals are forging paths in industries such as cybersecurity. Immersive wants to make sure that they’re not only heard and included, but have all the skills and opportunities to lead the way and Be Ready.
