# Critical infrastructure cybersecurity security gaps > Live situation record from CLSTR: https://clstr.news/situations/critical-infrastructure-cybersecurity-security-gaps > Updated: 2026-08-25T20:30:02.000Z. Sources: 4. Developments: 2. CISA released an advisory following red team engagements that identified significant security gaps within critical infrastructure. A report titled ‘A Tale of Two SOCs’ compared the responses of a Government Services and Facilities Sector entity against a Water and Wastewater Systems Sector entity. In the first case, red team operators utilized phishing and Active Directory misconfigurations to gain elevated domain privileges and access sensitive cloud resources without detection. The second organization’s Security Operations Center (SOC) successfully isolated compromised workstations within 2 to 20 minutes of the initial attack, preventing the intrusion from spreading. Industry analysis accompanying these findings suggests that security teams face a ‘data abundance problem.’ Experts indicate that the primary challenge is a lack of operational technology (OT) context, which makes it difficult for teams to distinguish between routine maintenance and malicious activity. ## Timeline ### 2026-08-25: CISA red team exercises reveal critical infrastructure security gaps CISA red team exercises reveal varying levels of detection capabilities in critical infrastructure, while experts warn that a lack of operational technology context hinders effective threat response. 4 sources. https://clstr.news/cluster/cisa-red-team-exercises-reveal-critical-infrastructure-security-gaps ### 2026-08-12: Cybersecurity methodologies: Red teaming vs penetration testing Penetration testing identifies technical vulnerabilities and aids compliance, while red teaming simulates targeted adversaries to test an organization's detection and response capabilities. 2 sources. https://clstr.news/cluster/cybersecurity-methodologies-red-teaming-vs-penetration-testing --- Cite as: Critical infrastructure cybersecurity security gaps. CLSTR, https://clstr.news/situations/critical-infrastructure-cybersecurity-security-gaps