[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fkFAp7gVxVu26yVYVuhqGsP8S0og6lSRNUFRirhY5-7U":3},{"article":4,"iocs":43,"watch_terms":44,"solutions":45,"lesson":135},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"url":11,"image_url":12,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":25,"category":26,"article_tags":30},"259f69d0-ffce-4d38-8e20-5fb8760a5004","AI Agents Navigate Unfamiliar OT Systems and Move Equipment in Minutes, Booz Allen Finds","ai-agents-navigate-unfamiliar-ot-systems-and-move-equipment-in-minutes-booz-alle-b33a7b","In Booz Allen’s isolated OT lab, AI models met every objective across eight scenarios and reached an industrial control network from a perimeter compromise in just over 16 minutes. The post AI Agents Navigate Unfamiliar OT Systems and Move Equipment in Minutes, Booz Allen Finds appeared first on SecurityWeek.","Booz Allen's research demonstrates that advanced AI agents can quickly infiltrate and manipulate unfamiliar Operational Technology (OT) systems, achieving objectives in minutes. In tests, AI models moved from perimeter compromise to actions within an industrial control network in just over 16 minutes, and even manipulated physical equipment like robotic arms. The study highlights the convergence of cyber and physical security, warning that autonomous agents operating at speeds beyond human intervention pose a significant threat to OT environments.","AI agents navigated unfamiliar OT systems and moved physical equipment in minutes, Booz Allen finds.","https:\u002F\u002Fwww.securityweek.com\u002Fai-agents-navigate-unfamiliar-ot-systems-and-move-equipment-in-minutes-booz-allen-finds\u002F","https:\u002F\u002Fwww.securityweek.com\u002Fwp-content\u002Fuploads\u002F2025\u002F12\u002Findustrial-AI-OT-security.jpeg","2026-10-14T16:00:00+00:00","2026-10-14T18:00:11.295278+00:00",8,[17,20,23],{"name":18,"type":19},"Booz Allen","vendor",{"name":21,"type":22},"AI","technology",{"name":24,"type":22},"OT","d6f63bb8-0801-486a-be7f-171400700454",{"id":25,"icon":27,"name":28,"slug":29},null,"IoT\u002FOT","iot-ot",[31,36,38],{"category":32},{"id":33,"icon":27,"name":34,"slug":35},"839da5c1-3c34-47e2-9499-f7201640e3ac","AI Security","ai-security",{"category":37},{"id":25,"icon":27,"name":28,"slug":29},{"category":39},{"id":40,"icon":27,"name":41,"slug":42},"e7b231c8-5f79-4465-8d38-1ef13aea5a14","Threat Intelligence","threat-intelligence",[],[18],{"controls":46,"vendors":134},[47,76,105],{"slug":48,"name":49,"problem":50,"products":51},"endpoint-detection-response","Endpoint detection and response (EDR and XDR)","Malware and hands-on-keyboard attackers on laptops and servers get spotted and stopped.",[52,60,68],{"vendor_slug":53,"vendor_name":54,"vendor_logo":55,"product_slug":56,"product_name":57,"url":58,"description":59},"withsecure","WithSecure","\u002Fvendor-logos\u002Fwithsecure.png","elements-xdr","WithSecure Elements XDR","https:\u002F\u002Fwww.withsecure.com\u002Fen\u002Ffor-business\u002Fplatform\u002Fxdr\u002F","Endpoint detection and response with extended detection, on the Elements cloud platform.",{"vendor_slug":61,"vendor_name":62,"vendor_logo":63,"product_slug":64,"product_name":65,"url":66,"description":67},"microsoft","Microsoft","\u002Fvendor-logos\u002Fmicrosoft.png","defender-for-endpoint","Microsoft Defender for Endpoint","https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fsecurity\u002Fbusiness\u002Fendpoint-security\u002Fmicrosoft-defender-endpoint","Endpoint detection and response for Windows, macOS, Linux and mobile devices.",{"vendor_slug":69,"vendor_name":70,"vendor_logo":71,"product_slug":72,"product_name":73,"url":74,"description":75},"crowdstrike","CrowdStrike","\u002Fvendor-logos\u002Fcrowdstrike.png","falcon-insight-xdr","Falcon Insight XDR","https:\u002F\u002Fwww.crowdstrike.com\u002Fen-us\u002Fplatform\u002Fendpoint-security\u002Ffalcon-insight-xdr\u002F","Endpoint detection and response with extended detection across other security tools.",{"slug":77,"name":78,"problem":79,"products":80},"network-segmentation","Network segmentation and microsegmentation","One compromised machine can no longer reach everything else.",[81,89,97],{"vendor_slug":82,"vendor_name":83,"vendor_logo":84,"product_slug":85,"product_name":86,"url":87,"description":88},"akamai","Akamai","\u002Fvendor-logos\u002Fakamai.png","guardicore-segmentation","Akamai Guardicore Segmentation","https:\u002F\u002Fwww.akamai.com\u002Fproducts\u002Fakamai-guardicore-segmentation","Software-based microsegmentation with traffic visibility.",{"vendor_slug":90,"vendor_name":91,"vendor_logo":92,"product_slug":93,"product_name":94,"url":95,"description":96},"threatlocker","ThreatLocker","\u002Fvendor-logos\u002Fthreatlocker.png","zero-trust-endpoint-firewall","Zero Trust Endpoint Firewall","https:\u002F\u002Fwww.threatlocker.com\u002Fcapabilities\u002Fzero-trust-endpoint-firewall","Centrally managed host firewall with device-level and dynamic access rules, to limit which machines can talk to each other.",{"vendor_slug":98,"vendor_name":99,"vendor_logo":100,"product_slug":101,"product_name":102,"url":103,"description":104},"illumio","Illumio","\u002Fvendor-logos\u002Fillumio.png","illumio-segmentation","Illumio Segmentation","https:\u002F\u002Fwww.illumio.com\u002Fillumio-segmentation","Maps traffic between workloads and enforces segmentation across data centre, cloud and endpoints.",{"slug":106,"name":107,"problem":108,"products":109},"ot-security","OT and industrial control system security","Factory, building and utility control systems get visibility and protection.",[110,118,126],{"vendor_slug":111,"vendor_name":112,"vendor_logo":113,"product_slug":114,"product_name":115,"url":116,"description":117},"nozomi-networks","Nozomi Networks","\u002Fvendor-logos\u002Fnozomi-networks.png","guardian","Nozomi Networks Guardian","https:\u002F\u002Fwww.nozominetworks.com\u002Fplatform\u002Fguardian","Passive monitoring, asset inventory and threat detection for OT and IoT networks.",{"vendor_slug":119,"vendor_name":120,"vendor_logo":121,"product_slug":122,"product_name":123,"url":124,"description":125},"claroty","Claroty","\u002Fvendor-logos\u002Fclaroty.png","xdome","Claroty xDome","https:\u002F\u002Fclaroty.com\u002Findustrial-cybersecurity\u002Fxdome","Asset inventory, vulnerability management and threat detection for industrial networks.",{"vendor_slug":127,"vendor_name":128,"vendor_logo":129,"product_slug":130,"product_name":131,"url":132,"description":133},"tenable","Tenable","\u002Fvendor-logos\u002Ftenable.png","tenable-ot-security","Tenable OT Security","https:\u002F\u002Fwww.tenable.com\u002Fproducts\u002Fot-security","Asset inventory, vulnerability and threat detection for industrial networks.",[],{"slug":136,"title":137,"body":138,"framework_refs":139,"framework_notes":151},"ai-agents-can-compromise-ot-systems-and-move-physical-equipment-in-under-17-minutes","AI Agents Can Compromise OT Systems and Move Physical Equipment in Under 17 Minutes","Booz Allen's research reveals that advanced AI agents can autonomously navigate unfamiliar Operational Technology (OT) environments and achieve physical impact — such as manipulating robotic arms — in just over 16 minutes after a perimeter breach. The core problem is that OT systems were largely designed for availability and reliability, not adversarial AI-speed attacks, leaving them structurally unprepared for autonomous threat actors that operate faster than human defenders can respond. This convergence of cyber and physical risk means a successful attack could cause real-world harm — equipment damage, production shutdowns, or safety incidents — not just data loss. The threat is compounded by flat or poorly segmented OT networks that give attackers lateral movement opportunities once inside the perimeter.",[140,141,142,143,144,145,146,147,148,149,150],"NIST SP 800-82 Rev. 3 (Guide to OT Security)","NIST CSF 2.0 — DE.CM (Continuous Monitoring)","NIST CSF 2.0 — PR.AC (Identity Management & Access Control)","CIS Control 12: Network Infrastructure Management","CIS Control 13: Network Monitoring and Defense","CIS Control 17: Incident Response Management","IEC 62443-3-3: OT Network Segmentation Requirements","NERC CIP-005: Electronic Security Perimeters","NERC CIP-007: Systems Security Management","MITRE ATT&CK for ICS — Lateral Movement (TA0109)","MITRE ATT&CK for ICS — Impair Process Control (TA0106)",{}]