# Exposed OT Controllers and Foreign Telecoms Pose Persistent Security Risks

*Published August 10, 2026*
*Source: [https://www.sans.org/newsletters/newsbites/xxviii-58](https://www.sans.org/newsletters/newsbites/xxviii-58)*

## Executive Summary

Security assessments reveal more than 4,000 exposed OT controllers in the U.S., highlighting persistent vulnerabilities exacerbated by foreign telecom presence. The OSAA proposes the SAFE initiative to enhance threat intelligence sharing using AI, aiming to strengthen collective cybersecurity efforts.

## Article

Recent security assessments have highlighted significant vulnerabilities in U.S. critical infrastructure, specifically regarding exposed operational technology (OT) controllers and the ongoing presence of Chinese telecommunications companies. These findings come in the aftermath of targeted water system attacks, revealing over 4,000 OT controllers still vulnerable to potential exploitation. Despite efforts to mitigate these risks, the challenge remains formidable due to the complexity and scale of legacy systems involved. Organizations must first gain a comprehensive understanding of their infrastructure to effectively address these vulnerabilities. The persistence of foreign-controlled infrastructure within the U.S. underscores the importance of visibility and control over technical assets. Decommissioning outdated hardware and services is a complex process that requires time and careful planning, often hindered by the existence of technical debt and outdated interconnections.

In an effort to enhance collaborative security measures, the Operational Security Association of America (OSAA) has proposed the Shared Findings AI Exchange, or SAFE. This initiative aims to facilitate the sharing of security findings among organizations, leveraging artificial intelligence to improve threat detection and response capabilities. SAFE represents a proactive approach to cybersecurity, encouraging organizations to collaborate and share critical threat intelligence to bolster defenses across the board.