Empty Attestations: OT Lacks the Tools for Cryptographic Readiness

A batch of DarkReading stories (early Apr 2026) highlights escalating active threats and systemic gaps: China-backed APT41 targets cloud providers to harvest credentials using typosquatting and stealthy backdoors; multiple zero-days and n-day exploits are being weaponized (FortiClient emergency patch CVE-2026-35616, a Windows local-privilege zero-day dubbed "BlueHammer", React2Shell exploitation); high-velocity ransomware (Storm-1175/Medusa); widespread OT/ICS risk (exposed PLCs, vulnerable industrial controllers) and regulatory pressure for post-quantum cryptographic attestation despite lackl