ICS/OT
Volt Typhoon and two other threat groups that emerged in 2023 can pose a serious threat to ICS/OT, according to industrial cybersecurity firm Dragos.
Hi, what are you looking for?
SecurityWeek
ICS/OT
The industrial automation giant has fixed security holes in Logix, CompactLogix, Flex, RSLinx, and FactoryTalk products.
ICS/OT
California Water Service says there is no indication of operational disruptions to its water and wastewater systems.
ICS/OT
The hackers published 5GB of data, including customer personal information and credentials for the RTKBase platform.
ICS/OT
A PowerShell script included in patch files appears to be triggering false positives by multiple security engines.
ICS/OT
February 2024 ICS Patch Tuesday: Siemens and Schneider Electric release a total of 18 new security advisories.
ICS/OT
Critical and high-severity Mitsubishi Electric Factory Automation vulnerabilities can allow privileged access to engineering workstations.
ICS/OT
A new ICS security report from TXOne Networks says many OT security incidents involved ransomware and vulnerability exploitation.
ICS/OT
SecurityWeek interviews Del Rodillas, Senior Director of Product Management at Palo Alto Networks, about the integration of IT and OT in the ICS threat landscape.
ICS/OT
CISA informs organizations that Westermo Lynx switches are affected by eight vulnerabilities and some devices are reportedly exposed to the internet.
ICS/OT
Nozomi Networks extends its offering with Guardian Air, a security sensor designed to help organizations detect wireless threats in OT and IoT.
Government
CISA, FBI and EPA document aims to help water and wastewater organizations improve their cyber resilience and incident response.
ICS/OT
Seven vulnerabilities found in Rapid SCADA could be exploited to gain access to sensitive industrial systems, but they remain unpatched.
ICS/OT
Industrial giants Siemens and Schneider Electric publish a total of 7 new security advisories addressing 22 vulnerabilities.
ICS/OT
Hackers can take complete control of Bosch Rexroth nutrunners, installing ransomware or altering settings to cause financial impact and brand damage.
ICS/OT
The hacking of a municipal water plant is prompting new warnings from U.S. security officials at a time when governments are wrestling with how...
ICS/OT
CISA is advising device makers to stop relying on customers to change default passwords following attacks targeting water sector ICS.
ICS/OT
MITRE and partners unveil EMB3D, a new threat model designed for critical infrastructure embedded devices.
ICS/OT
ICS Patch Tuesday: Siemens and Schneider Electric address dozens of vulnerabilities affecting their industrial products.
Cyberwarfare
A Gigantic New ICBM Will Take US Nuclear Missiles Out of the Cold War-Era but Add 21st-Century Risks
New "Sentinel" nuclear missiles will operate within a closed network but have additional security measures at the boundary and inside the network, enabling effective...
ICS/OT
Critical vulnerabilities in a Delta OT monitoring product can allow hackers to hide their destructive activities from the victim.
Funding/M&A
French startup ProvenRun raises €15 million investment to build secure software for connected vehicles and IoT devices.
ICS/OT
Hackers launched a cyberattack on an Irish water utility, causing disruption and leaving people without water for two days.
ICS/OT
Ransomware attacks aimed at industrial organizations are increasingly impacting OT systems, according to a Claroty report.
Today’s attackers are no longer breaking in — they’re logging in. Join this live webinar as we break down the modern identity attack chain and examine how recent breaches exploited weaknesses in authentication, identity verification, and access management processes.
RegisterAI has accelerated both sides of the fight. Adversaries are weaponizing vulnerabilities faster, while defenders are racing to ship detections and configurations. Join this live webinar as we explore how to prove your controls actually hold against new threats, map your security maturity, and unite breach simulation with automated pentesting into a single, coordinated program.
RegisterExpert Insights
Security teams need more than visibility into AI applications, they need a repeatable framework for monitoring, investigating, and defending them in production.
(Joshua Goldfarb)
AI-driven development is not something organizations can or should block. But it must be governed.
(Danelle Au)
AI can help attackers generate malware, create malicious payloads, bypass simple security checks, and convert vague malicious intent into functional code.
(Etay Maor)
CISOs are now facing machine-speed attacks and asking, “How do I agent?” The industry must provide remediation at scale.
(Nadir Izrael)
As enterprises rush AI projects into production, security teams are increasingly being forced into reactive mode.
(Joshua Goldfarb)