ICS/OT
Thinking of Your OT Network as an Extension of Your IT Network Will Give You a Consolidated Picture of Your Technology Infrastructure
Hi, what are you looking for?
SecurityWeek
Government
The White House’s new executive order 14420 widens scrutiny of industrial control systems over cyber sabotage concerns.
ICS/OT
The agency has released guidance on reducing internet exposure in the wake of the recent Iran-linked hacker attacks.
ICS/OT
Hands-on Cyber Attack Methods course returns to SecurityWeek’s ICS Cybersecurity Conference, October 6–8 at the W Nashville.
ICS/OT
The attack caused real-world operational disruption and raised concerns about the resilience of Britain’s distributed energy infrastructure and the potential for repeatable attacks.
ICS/OT
Cisco’s Talos threat intelligence and research group revealed on Wednesday that one of its researchers discovered a critical remote code execution vulnerability in the...
ICS/OT
Researchers have found another vulnerability in software made by Schneider Electric that is similar to the one exploited by the notorious Stuxnet malware.
Cyberwarfare
A new executive order signed on Friday by U.S. President Donald Trump prohibits the acquisition of bulk-power system equipment that could contain intentional backdoors...
Cybercrime
The actions of the hackers who recently targeted water facilities in Israel show their sophistication and prove that they knew exactly what they were...
ICS/OT
Researchers say a critical denial-of-service (DoS) vulnerability they discovered in Inductive Automation’s Ignition Gateway could allow hackers to cause disruption on the plant floor.
Cybercrime
The Israeli government has issued an alert to organizations in the water sector following a series of cyberattacks aimed at water facilities.
ICS/OT
Several serious vulnerabilities have been found in the ABB System 800xA distributed control system (DCS), including flaws that can be exploited for remote code...
ICS/OT
Oil and gas organizations have been targeted in recent spearphishing campaigns using the "Agent Tesla" spyware Trojan, security firm Bitdefender says.
ICS/OT
A potentially serious vulnerability discovered by researchers in Field Programmable Gate Array (FPGA) chips can expose many mission- and safety-critical devices to attacks.
Cybercrime
A threat actor that has been spotted targeting Azerbaijan has shown an interest in the energy sector, specifically SCADA systems related to wind turbines,...
ICS/OT
Advice for CISOs on Bridging the IT-OT Security Gap: Part 1
ICS/OT
Siemens has released six new advisories for its April 2020 Patch Tuesday updates, including three that inform customers about the impact of the SegmentSmack...
Funding/M&A
Accenture Expands OT Security Capabilities With Acquisition of Philadelphia-based Revolution SecurityConsulting giant Accenture announced this week that it has acquired critical infrastructure protection firm Revolutionary...
ICS/OT
Several vulnerabilities found by researchers in B&R Automation’s Automation Studio software make it easier for malicious actors to launch attacks inside operational technology (OT)...
ICS/OT
Researchers demonstrated recently that hackers could launch a Stuxnet-style attack against Schneider Electric’s Modicon programmable logic controllers (PLCs), but it’s believed that products from...
ICS/OT
A global survey of 1,000 security professionals commissioned by industrial cybersecurity company Claroty has revealed that over 70% would rather work in IT enterprise...
ICS/OT
Publicly available hacking tools, many of which have been developed for research and testing purposes, lower the bar for threat actors looking to target...
ICS/OT
Strategies for Evaluating Secure Remote Access Solutions for OT/ICS Networks
Join as speakers examine the various components of ASM strategy, the push to mandate continuous asset visibility and inventory tools, and the use of red-teaming, bug bounties and pen-tests in modern security programs.
RegisterIn this live webinar, learn how to define your minimum viable business, identify the systems it depends on, measure actual recovery time against business requirements, and present the gaps to the board as measurable risk.
RegisterExpert Insights
For twenty-five years, "data" in security meant logs and events. But logs are a lossy representation of reality.
(Danelle Au)
Organizations must distinguish identity verification, authentication and threat detection, or risk successfully authenticating the attackers they are trying to stop.
(Torsten George)
Silent patches can become exploit intelligence for attackers while leaving defenders without the context needed to prioritize risk.
(Tod Beardsley)
The skills that get a CISO hired are rarely the skills they are judged on later. Most security leaders are stuck in that gap. Closing it is the real job.
(Sravish Sridhar)
As AI dramatically shortens the time from vulnerability disclosure to exploitation, enterprises must look beyond patching to reduce application risk.
(Joshua Goldfarb)