ICS (in)security is hiding in plain sight. This presentation will be our first public discussion on unique research on industrial control system software, malware, and the consequences of poor operations security. Our premise for this project is the belief that there is a wealth of information surrounding Industrial Control Systems that is unrecognized by the traditional IT cybersecurity industry. We will walk through our methodology, show real-world findings and conclusions of what this means in our space.