# Researchers Expose Water and Energy Cyber Risk

University of British Columbia (UBC) researchers described a technique that analyzes patterns in encrypted communications to identify critical moments in water and energy network operations, then selectively blocks a small fraction of messages. The discussion highlights the difficulty of patching SCADA and industrial control system (ICS) environments and the value of separating operational technology (OT) from business networks. Commenters also questioned how much additional risk the technique creates if an attacker has already compromised the network carrying OT traffic. The signal identifies no specific procurement, contract, vendor, or government agency.

- Water and energy operators and their procurement teams can use this threat scenario when evaluating OT security, network segmentation, and monitoring capabilities; the signal does not establish a new mandate or a specific product requirement.
- Because patching SCADA/ICS environments can be operationally difficult, organizations evaluating security solutions should account for OT constraints and potential operational impacts, rather than assuming conventional IT patching practices apply.
- The discussion suggests assessing defenses against disruption of operational messages alongside controls that limit access between business and OT networks. No named solution, solicitation, or purchasing opportunity is provided.

**Jurisdictions:** international
**Industries:** Energy & Utilities, Information Technology
**Topics:** Cybersecurity
**Published:** October 17, 2026

### Key Quotes
> the new technique uses patterns in encrypted communications to predict critical moments and selectively block a small fraction of messages.
> — Original poster

> By the time they've compromised the IT network handling the OT traffic, the game was already over.
> — Community commenter (username not provided)

### Sources
- [UBC researchers uncover new cyber threat to water and energy networks](https://www.reddit.com/r/cybersecurity/comments/1x8lz8g/ubc_researchers_uncover_new_cyber_threat_to_water) - reddit-cybersecurity