Government
The US is offering up to $10 million for Iranian individuals accused of hacking water utility industrial control systems last year.
Hi, what are you looking for?
SecurityWeek
Government
The White House’s new executive order 14420 widens scrutiny of industrial control systems over cyber sabotage concerns.
ICS/OT
The agency has released guidance on reducing internet exposure in the wake of the recent Iran-linked hacker attacks.
ICS/OT
Hands-on Cyber Attack Methods course returns to SecurityWeek’s ICS Cybersecurity Conference, October 6–8 at the W Nashville.
ICS/OT
The attack caused real-world operational disruption and raised concerns about the resilience of Britain’s distributed energy infrastructure and the potential for repeatable attacks.
ICS/OT
Vulnerabilities found in solar power systems could have been exploited by hackers to cause disruption and possibly blackouts.
ICS/OT
Censys has found more than 40,000 internet-exposed ICS devices in the US, and notifying owners is in many cases impossible.
ICS/OT
A high-severity security bypass vulnerability tracked as CVE-2024-6242 has been found and fixed in Rockwell Automation Logix controllers.
ICS/OT
Cisco has published its inaugural State of Industrial Networking report, based on a survey of 1,000 individuals.
ICS/OT
Progress Software calls attention to a critical remote code execution flaw in the Telerik Report Server product.
ICS/OT
Siemens has released out-of-band updates to patch two potentially serious vulnerabilities in products used in energy supply.
ICS/OT
The FrostyGoop ICS malware was used recently in an attack against a Ukrainian energy firm that resulted in loss of heating for many buildings.
ICS/OT
Several ICS vendors released advisories on Tuesday to inform customers about vulnerabilities found in industrial and OT products.
ICS/OT
PTC has patched a critical vulnerability in the Creo Elements/Direct License Server that can be exploited for unauthenticated command execution.
ICS/OT
Critical vulnerabilities have been found in an Emerson gas chromatograph and Claroty warns that attacks could have a serious impact.
ICS/OT
Several vulnerabilities patched recently in Siemens Sicam products could be exploited in attacks aimed at the energy sector.
ICS/OT
CISA has notified RAD after finding a PoC exploit targeting a high-severity vulnerability in an outdated industrial switch.
ICS/OT
Rockwell Automation has patched three high-severity vulnerabilities in its FactoryTalk View SE HMI software.
ICS/OT
Without tuning your approach to fit your sector, amongst other variables, you’ll be faced with an unmanageable amount of noise.
ICS/OT
Analysis and insights on the prevalence and impact of password exposure vulnerabilities in ICS and other OT products.
ICS/OT
Several ICS vendors released advisories on Tuesday to inform customers about vulnerabilities found in their industrial and OT products.
Cybersecurity Funding
OT zero trust user access platform provider Xona has raised $18 million, which brings its total investment to $32 million.
ICS/OT
Cisco Talos researchers have found over a dozen vulnerabilities in AutomationDirect PLCs, including flaws that could be valuable to attackers.
ICS/OT
Backdoored JAVS courtroom recording and management software installer puts thousands at risk of complete takeover.
Join as speakers examine the various components of ASM strategy, the push to mandate continuous asset visibility and inventory tools, and the use of red-teaming, bug bounties and pen-tests in modern security programs.
RegisterIn this live webinar, learn how to define your minimum viable business, identify the systems it depends on, measure actual recovery time against business requirements, and present the gaps to the board as measurable risk.
RegisterExpert Insights
For twenty-five years, "data" in security meant logs and events. But logs are a lossy representation of reality.
(Danelle Au)
Organizations must distinguish identity verification, authentication and threat detection, or risk successfully authenticating the attackers they are trying to stop.
(Torsten George)
Silent patches can become exploit intelligence for attackers while leaving defenders without the context needed to prioritize risk.
(Tod Beardsley)
The skills that get a CISO hired are rarely the skills they are judged on later. Most security leaders are stuck in that gap. Closing it is the real job.
(Sravish Sridhar)
As AI dramatically shortens the time from vulnerability disclosure to exploitation, enterprises must look beyond patching to reduce application risk.
(Joshua Goldfarb)