In this presentation, we break down what your OT attack surface really looks like in today’s environments, and why it’s far larger and more complex than the traditional lists of endpoints, networks, and firewalls. Using real-world incidents, we explore three major blind spots most organizations overlook: vulnerabilities hidden in software supply chains and CI/CD pipelines, the explosive growth of Shadow IT/OT assets that bypass governance, and the emerging risks introduced by AI and agentic systems that can take action based on untrusted inputs. Attendees will gain a practical, modern framework for understanding and reducing their true attack surface, with actionable steps to improve visibility and resilience across both IT and OT environments.