Cybercrime
The NSA, FBI and CISA have issued an alert describing the tools and techniques used by advanced persistent threat (APT) actors in an attack...
Hi, what are you looking for?
SecurityWeek
Government
The White House’s new executive order 14420 widens scrutiny of industrial control systems over cyber sabotage concerns.
ICS/OT
The agency has released guidance on reducing internet exposure in the wake of the recent Iran-linked hacker attacks.
ICS/OT
Hands-on Cyber Attack Methods course returns to SecurityWeek’s ICS Cybersecurity Conference, October 6–8 at the W Nashville.
ICS/OT
The attack caused real-world operational disruption and raised concerns about the resilience of Britain’s distributed energy infrastructure and the potential for repeatable attacks.
ICS/OT
Nearly a dozen vulnerabilities have been found in a car parking management system made by Italian company Carlo Gavazzi, which makes electronic control components...
ICS/OT
Schneider Electric in recent months released patches for its EcoStruxure platform and some Modicon programmable logic controllers (PLCs) to address a critical vulnerability that...
Audits
Virginia-based cybersecurity consulting services company GuidePoint Security has announced the launch of new offerings focusing on industrial control systems (ICS) and other operational technology...
ICS/OT
US government agencies have shared a new cybersecurity resource that can help organizations defend critical control systems against threat actors.
ICS/OT
Critical vulnerabilities discovered by researchers in Dataprobe’s iBoot power distribution unit (PDU) can allow malicious actors to remotely hack the product and shut down...
Cybersecurity Funding
Operant Networks has emerged from stealth mode with $3.8 million in seed funding and a secure access service edge (SASE) solution focused on operational...
ICS/OT
A water tank management system used by organizations worldwide is affected by a critical vulnerability that can be exploited remotely and the vendor does...
Cybersecurity Funding
LTE and 5G network security firm OneLayer has announced a $6.5 million equity investment from Koch Disruptive Technologies (KDT), the VC arm of Koch...
ICS/OT
Researchers have discovered two potentially serious vulnerabilities in wireless LAN devices that they say are often used in airplanes.
ICS/OT
Over the last few years, the majority of large enterprises have come a long way in defining their operational technology (OT) governance strategies and...
ICS/OT
Siemens and Schneider Electric have released their Patch Tuesday security advisories to inform customers about dozens of vulnerabilities affecting their industrial products.
ICS/OT
The FBI is warning healthcare facilities of the risks associated with unpatched and outdated medical devices.Security flaws in medical devices could adversely impact the...
Cybercrime
Spyware, ransomware and cryptojacking malware have been increasingly detected on industrial control system (ICS) computers, according to data collected in the first half of...
ICS/OT
Critical KEPServerEX vulnerabilities that impact the products of several major industrial automation vendors can put attackers in a powerful position in OT networks.
ICS/OT
The Anti-Malware Testing Standards Organization (AMTSO) has published guidelines for testers and vendors looking to check the efficiency and functionality of security products designed...
ICS/OT
Software development and security solutions provider JFrog has disclosed the details of several vulnerabilities affecting the OPC UA protocol, including flaws exploited by its...
Data Protection
The US Cybersecurity and Infrastructure Security Agency (CISA) has outlined the steps that critical infrastructure organizations should take to prepare for the migration to...
ICS/OT
Self-disclosures by XIoT vendors have surpassed independent research outfits as the second most prolific vulnerability reporters
Join as speakers examine the various components of ASM strategy, the push to mandate continuous asset visibility and inventory tools, and the use of red-teaming, bug bounties and pen-tests in modern security programs.
RegisterIn this live webinar, learn how to define your minimum viable business, identify the systems it depends on, measure actual recovery time against business requirements, and present the gaps to the board as measurable risk.
RegisterExpert Insights
For twenty-five years, "data" in security meant logs and events. But logs are a lossy representation of reality.
(Danelle Au)
Organizations must distinguish identity verification, authentication and threat detection, or risk successfully authenticating the attackers they are trying to stop.
(Torsten George)
Silent patches can become exploit intelligence for attackers while leaving defenders without the context needed to prioritize risk.
(Tod Beardsley)
The skills that get a CISO hired are rarely the skills they are judged on later. Most security leaders are stuck in that gap. Closing it is the real job.
(Sravish Sridhar)
As AI dramatically shortens the time from vulnerability disclosure to exploitation, enterprises must look beyond patching to reduce application risk.
(Joshua Goldfarb)