Ministro Pistarini International Airport — EZE, SAEZ — sits 22 kilometres southwest of the city. They call it Ezeiza after the suburb it occupies. Opened April 30, 1949. Handles more than 85% of Argentina's international traffic. At 0340 it is all fluorescent light and the particular silence of people who have been traveling too long. I know this airport the way I know the weight of my bag after three weeks. Automatic. Unremarkable. Home.
I had been in transit for nineteen hours. The last leg was long-haul and I did not sleep. I had been running network architecture assessments across two sites in the Baltic states — the kind of work where you finish and spend the flight back staring at the ceiling of the aircraft replaying every finding, checking your own logic, making sure the report says exactly what you found and nothing more. The work was clean. I was tired.
The subject line said nothing. The body said they were convening a closed technical briefing at an undisclosed embassy in Eastern Europe — one of the member state missions operating under the UN's new Global Mechanism on ICT Security, which held its first substantive session July 20–24, 2026. The Mechanism is the first permanent multilateral body for cybersecurity the UN has ever established. 193 member states. A long time coming. They want people who have actually been inside the systems they are trying to protect.
The topic was what I expected: operational technology infrastructure under sustained attack across Europe — power grids, pipelines, water treatment. The Waterfall Threat Report 2026 documented it plainly: nation-state and hacktivist attacks on critical infrastructure doubled in 2025. The Google Cybersecurity Forecast 2026 confirmed the vector: pro-Russia hacktivist groups targeting OT environments with increasing sophistication — an April 2025 compromise of a Norwegian dam being the most publicly documented case. Energy operators in Germany, Denmark, Finland, and the Baltic states have all confirmed targeting. This is not theoretical. The systems are already accessed. The question the briefing is trying to answer is what to do about it before something physical breaks.
UNIDIR — the UN Institute for Disarmament Research — is the body that routes these invitations. They brief the Security Council. They map the threat landscape. They bring in outside technical voices when the diplomatic process needs someone who has actually run an ICS assessment on a live site rather than read about one. I have sat in those rooms before. The people across the table are serious. The stakes are real. These are not conference panels.
The intersection they are interested in is the one I have been mapping for two years: the supply chain layer underneath the OT layer. It is one thing to harden a SCADA network. It is another thing entirely to understand that the firmware running on the PLC inside the water treatment plant depends on a component built from rare earth elements that China controls 91% of the global processing capacity for. The hardware has a geology. The geology has a geopolitics. The geopolitics has a firmware. Nobody in that room has mapped all three simultaneously. That is why the email arrived.
I will reply this afternoon. The flight back east will be in a few days. The location of the embassy will come in a follow-up message, encrypted, from an address I have seen once before. That is how this works.
Buenos Aires is loud and warm and mine. I will be gone before the week is out.