Hi, what are you looking for?
SecurityWeek
Government
The White House’s new executive order 14420 widens scrutiny of industrial control systems over cyber sabotage concerns.
ICS/OT
The agency has released guidance on reducing internet exposure in the wake of the recent Iran-linked hacker attacks.
ICS/OT
Hands-on Cyber Attack Methods course returns to SecurityWeek’s ICS Cybersecurity Conference, October 6–8 at the W Nashville.
ICS/OT
The attack caused real-world operational disruption and raised concerns about the resilience of Britain’s distributed energy infrastructure and the potential for repeatable attacks.
ICS/OT
Germany-based industrial connectivity solutions provider Weidmueller has released firmware updates for many of its managed industrial Ethernet switches to address critical vulnerabilities.
ICS/OT
Moxa Urges Users to Replace Discontinued Industrial AP Filled With Security Holes
Cybersecurity Funding
Tenable, a cybersecurity firm best known for its vulnerability management solutions, announced on Monday that it has acquired Indegy, a provider of cybersecurity solutions...
ICS/OT
A critical vulnerability affecting some Relion protection devices from ABB can be exploited to take control of a device or cause it to become...
ICS/OT
Kaspersky researchers have identified dozens of vulnerabilities in four popular open source virtual network computing (VNC) systems, but fortunately the majority of them have...
ICS/OT
It took Swiss-based industrial technology solutions provider ABB five years to inform customers of a critical vulnerability affecting one of its products, and the...
ICS/OT
A major exercise whose goal was to test the cyber and physical security of North America’s grid has enabled the energy industry and governments...
ICS/OT
Siemens is working on addressing a vulnerability that can be exploited by a skilled attacker to execute arbitrary code on its SIMATIC S7-1200 programmable...
ICS/OT
American not-for-profit organization MITRE Corporation has announced the launch of a tech foundation focused on strengthening critical infrastructure through partnerships with the private sector.
Cyber Insurance
Swiss insurance company Zurich last week announced new cyber insurance policy endorsements for organizations in the manufacturing industry.Zurich says many manufacturing companies, particularly mid-sized...
Funding/M&A
Consulting giant Accenture on Thursday announced the launch of three cyber ranges designed to help industrial companies practice their cyberattack response plan.
ICS/OT
A graphical user interface (GUI) is now available for Kamerka, the open source reconnaissance tool that allows users to identify internet-exposed industrial control systems...
Cybercrime
More details have emerged on the March denial-of-service (DoS) attack that disrupted firewalls and caused interruptions to electrical system operations at a power utility...
ICS/OT
Two critical authentication-related vulnerabilities have been found in a chiller made by Germany-based Rittal for cooling IT applications.Rittal, a subsidiary of German manufacturing and...
ICS/OT
The increased use of automated control systems to manage drug formulations and product quality (particularly for combination drugs) is creating new security risks for...
ICS/OT
ATLANTA — SECURITYWEEK 2019 ICS CYBER SECURITY CONFERENCE — Some of the recent cybersecurity incidents involving industrial control systems (ICS) have resulted in injury...
Join as speakers examine the various components of ASM strategy, the push to mandate continuous asset visibility and inventory tools, and the use of red-teaming, bug bounties and pen-tests in modern security programs.
RegisterIn this live webinar, learn how to define your minimum viable business, identify the systems it depends on, measure actual recovery time against business requirements, and present the gaps to the board as measurable risk.
RegisterExpert Insights
Security teams must treat autonomous agents as highly privileged identities.
(Etay Maor)
For twenty-five years, "data" in security meant logs and events. But logs are a lossy representation of reality.
(Danelle Au)
Organizations must distinguish identity verification, authentication and threat detection, or risk successfully authenticating the attackers they are trying to stop.
(Torsten George)
Silent patches can become exploit intelligence for attackers while leaving defenders without the context needed to prioritize risk.
(Tod Beardsley)
The skills that get a CISO hired are rarely the skills they are judged on later. Most security leaders are stuck in that gap. Closing it is the real job.
(Sravish Sridhar)