OT Vulnerabilities and Legacy Systems

In this episode of the Microsoft Threat Intelligence Podcast, host⁠ ⁠⁠Sherrod DeGrippo is joined by Matt Duncan, Vice President of Security Operations and Intelligence at the North American Electric Reliability Corporation’s E-ISAC, to explore the cyber threats targeting the North American power grid. Matt breaks down why the grid remains resilient despite increasing pressure from nation-states, cybercriminals, and hacktivists, how AI is lowering the barrier of entry for attackers, and why OT systems and interconnected devices present unique risks.  

He also highlights real success stories, the value of large-scale grid exercises, and how strong collaboration and a focus on foundational security practices help defenders keep power flowing safely and reliably. 

In this episode you’ll learn:      

• How severe weather events trigger heightened cyber-readiness across utilities 

• What motivates hacktivist groups and how their tactics differ from other threat actors 

• Why outdated equipment and legacy systems remain such attractive targets 

Some questions we ask:     

• Are you seeing more educated and capable OT-focused adversaries now? 

• How do you work with policymakers to help them understand these threats? 

• If you could eliminate one misconception about securing the grid, what would it be? 

Resources:  

View Matt Duncan on LinkedIn  

View Sherrod DeGrippo on LinkedIn  

Learn more about E-ISAC 

Related Microsoft Podcasts:                   

• Afternoon Cyber Tea with Ann Johnson 

• The BlueHat Podcast 

• Uncovering Hidden Risks     

Discover and follow other Microsoft podcasts at microsoft.com/podcasts  

Get the latest threat intelligence insights and guidance at Microsoft Security Insider 

The Microsoft Threat Intelligence Podcast is produced by Microsoft, Hangar Studios and distributed as part of N2K media network.