ICS Cybersecurity Conference Brings Back Hands-On Industrial Attack Training
A practical course on attacking and defending industrial control systems returns to Nashville this October, giving security professionals rare access to live hardware scenarios.
Key points
- SecurityWeek's ICS Cybersecurity Conference runs 6 to 8 October 2026 at the W Nashville.
- The Cyber Attack Methods course gives attendees hands-on practice against industrial control systems in a controlled setting.
- Industrial control systems, often called ICS, are the computerised systems that run power grids, water treatment plants and factory floors.
- The course returns after previous successful runs at the conference.
What is this conference and who is it for?
It's a specialist security event aimed at engineers and security staff who protect the physical infrastructure ordinary people depend on every day.
SecurityWeek's ICS Cybersecurity Conference is one of the few events focused specifically on industrial control systems. These aren't ordinary office computers. They're specialised machines that keep valves open, turbines spinning, and production lines moving. When they fail or get attacked, the consequences can be physical, not just digital.
The returning Cyber Attack Methods course sits inside that conference. Attendees get to practise real attack techniques against actual industrial hardware in a safe, supervised environment. Most security training uses simulated software environments. Practising on real kit exposes weaknesses that simulations miss.
Why does industrial system security matter to ordinary people?
A breach of a corporate network might expose personal data. Compromising an industrial control system can cut power or stop medicine production entirely.
Criminals and state-sponsored hackers have shown growing interest in industrial targets. The 2021 incident in Oldsmar, Florida, where an attacker briefly changed chemical levels in a water treatment plant, is one well-documented example of how exposed these systems can be. That risk hasn't faded. We reported on 4 August that hackers hit more than 30 small water utilities in two days, and in some cases may have left with the only complete copy of the operators' own control logic.
Defenders who've seen how an attack unfolds from the attacker's side are better placed to stop one.
When and where is it happening?
| Detail | Information |
|---|---|
| Event | ICS Cybersecurity Conference |
| Dates | 6 to 8 October 2026 |
| Venue | W Nashville, Nashville, Tennessee |
| Training format | Hands-on, live hardware |
| Organiser | SecurityWeek |
No registration pricing was included in the available information.
For security teams responsible for operational technology, meaning the hardware and software controlling physical processes, this kind of training is increasingly scarce. Industrial systems use different protocols and face different attack paths than corporate IT networks.
Should you worry if your organisation runs physical infrastructure?
Yes, and not just if you run a power grid. Building management systems and manufacturing lines are exposed too. Sending staff to training that covers real industrial attack methods builds the situational awareness that makes a team harder to catch off guard. It's not a cure, but it's a practical start.
What matters most here isn't the course itself: it's what the demand for it signals. Defenders are clearly no longer willing to train on theory alone, and that shift is overdue.
