ICS/OT
The number of participants in the cyber and physical grid security exercise increased by nearly 50% compared to two years ago.
Hi, what are you looking for?
SecurityWeek
Government
The White House’s new executive order 14420 widens scrutiny of industrial control systems over cyber sabotage concerns.
ICS/OT
The agency has released guidance on reducing internet exposure in the wake of the recent Iran-linked hacker attacks.
ICS/OT
Hands-on Cyber Attack Methods course returns to SecurityWeek’s ICS Cybersecurity Conference, October 6–8 at the W Nashville.
ICS/OT
The attack caused real-world operational disruption and raised concerns about the resilience of Britain’s distributed energy infrastructure and the potential for repeatable attacks.
ICS/OT
Join us as speakers from Cisco outline important steps industrial organizations can take to safeguard operations, achieve compliance, and enable sustainable growth.
ICS/OT
An Aveva vulnerability also impacts Schneider Electric products and both vendors have published advisories.
ICS/OT
The 130-page document covers several important aspects and it’s available in both Japanese and English.
ICS/OT
The Canadian Centre for Cyber Security has warned CISOs that hacktivists are increasingly targeting internet-exposed ICS.
ICS/OT
Two DELMIA Apriso flaws can be chained together to gain privileged access to the application and execute arbitrary code remotely.
Data Breaches
Data allegedly stolen from the companies has been made available for download on the Cl0p ransomware leak website.
ICS/OT
An attacker can exploit the flaws to put devices into a permanent DoS condition that prevents remote restoration.
ICS/OT
Fuji Electric has released patches and Japan’s JPCERT has informed organizations about the vulnerabilities.
ICS/OT
Premier industrial cybersecurity conference Offers 70+ sessions, five training courses, and and ICS Village CTF competition.
ICS/OT
Over 20 advisories have been published by industrial giants this Patch Tuesday.
ICS/OT
Radiflow360 provides enhanced visibility, risk management, and incident response capabilities for mid-sized industrial enterprises.
ICS/OT
ENISA has published its 2025 Threat Landscape report, highlighting some of the attacks aimed at OT systems.
ICS/OT
NIST Special Publication 1334 focuses on reducing cybersecurity risks associated with the use of removable media devices in OT environments.
ICS/OT
Agencies in several countries have created guidance titled ‘Creating and Maintaining a Definitive View of Your OT Architecture’.
ICS/OT
Cognex is advising customers to transition to newer versions of its machine vision products.
ICS/OT
Novakon HMIs are affected by remote code execution and information exposure vulnerabilities.
ICS/OT
A deserialization of untrusted data in the MOM software allows attackers to achieve remote code execution.
ICS/OT
Advisories have also been published by Siemens, Schneider Electric, Phoenix Contact and CISA.
Government
From hacked satellites to nuclear threats in orbit, the battle for dominance beyond Earth is redefining modern warfare and national security.
Join as speakers examine the various components of ASM strategy, the push to mandate continuous asset visibility and inventory tools, and the use of red-teaming, bug bounties and pen-tests in modern security programs.
RegisterIn this live webinar, learn how to define your minimum viable business, identify the systems it depends on, measure actual recovery time against business requirements, and present the gaps to the board as measurable risk.
RegisterExpert Insights
For twenty-five years, "data" in security meant logs and events. But logs are a lossy representation of reality.
(Danelle Au)
Organizations must distinguish identity verification, authentication and threat detection, or risk successfully authenticating the attackers they are trying to stop.
(Torsten George)
Silent patches can become exploit intelligence for attackers while leaving defenders without the context needed to prioritize risk.
(Tod Beardsley)
The skills that get a CISO hired are rarely the skills they are judged on later. Most security leaders are stuck in that gap. Closing it is the real job.
(Sravish Sridhar)
As AI dramatically shortens the time from vulnerability disclosure to exploitation, enterprises must look beyond patching to reduce application risk.
(Joshua Goldfarb)