ICS/OT
In the latest edition of “Rising Tides” we talk with Lesley Carhart, Technical Director of Incident Response at Dragos.
Hi, what are you looking for?
SecurityWeek
Government
The White House’s new executive order 14420 widens scrutiny of industrial control systems over cyber sabotage concerns.
ICS/OT
The agency has released guidance on reducing internet exposure in the wake of the recent Iran-linked hacker attacks.
ICS/OT
Hands-on Cyber Attack Methods course returns to SecurityWeek’s ICS Cybersecurity Conference, October 6–8 at the W Nashville.
ICS/OT
The attack caused real-world operational disruption and raised concerns about the resilience of Britain’s distributed energy infrastructure and the potential for repeatable attacks.
ICS/OT
Noteworthy stories that might have slipped under the radar: Google pays $10,000 bug bounty for YouTube vulnerability, Cybereason CEO sues two investors, Otorio launches...
ICS/OT
Industrial giants Schneider Electric and Siemens have released February 2025 Patch Tuesday ICS security advisories.
ICS/OT
A critical vulnerability found in Orthanc servers can pose a serious risk to medical data and healthcare operations.
ICS/OT
Trimble Cityworks is affected by a zero-day vulnerability that has been exploited in attacks involving the delivery of malware.
ICS/OT
Just as OT technology differs from IT technology, the threats, likely adversaries, and potential harm also differ.
ICS/OT
Rockwell Automation has released six new security advisories to inform customers about several critical and high-severity vulnerabilities.
Cybersecurity Funding
Frenos, a company that has developed an autonomous OT security assessment platform, has raised $3.88 million in seed funding.
ICS/OT
Industrial automation protocols continue to be the most targeted in OT attacks, but building automation systems have been increasingly targeted.
ICS/OT
ABB has patched building control product vulnerabilities that can expose many facilities to remote attacks.
ICS/OT
Schneider Electric, Siemens, CISA, and Phoenix Contact have released January 2025 Patch Tuesday ICS security advisories.
ICS/OT
CISA and other Western security agencies have shared guidance for OT owners and operators when procuring products.
ICS/OT
Threat actors are exploiting a command injection vulnerability in Four-Faith industrial routers to deploy a reverse shell.
ICS/OT
Rockwell’s PowerMonitor is affected by critical vulnerabilities that can enable remote access to industrial systems for disruption or further attacks.
ICS/OT
Learn how to develop a holistic solution that provides you and your team the power to mitigate cyber threats effectively within your OT environment.
ICS/OT
EPA and CISA urge organizations in the water and wastewater systems sector to harden remote access to internet-exposed human-machine interfaces (HMIs).
ICS/OT
The Iranian threat group CyberAv3ngers has used custom-built malware named IOCONTROL to target IoT and OT devices in the US and Israel.
ICS/OT
December 2024 ICS Patch Tuesday brings advisories from CISA, as well as several major industrial automation companies.
ICS/OT
Cisco Talos has disclosed the details of apparently unpatched vulnerabilities in MC Technologies industrial routers and the GoCast BGP tool.
ICS/OT
Critical vulnerabilities patched by mySCADA in its myPRO HMI/SCADA product can allow remote and unauthenticated takeover of the system.
Join as speakers examine the various components of ASM strategy, the push to mandate continuous asset visibility and inventory tools, and the use of red-teaming, bug bounties and pen-tests in modern security programs.
RegisterIn this live webinar, learn how to define your minimum viable business, identify the systems it depends on, measure actual recovery time against business requirements, and present the gaps to the board as measurable risk.
RegisterExpert Insights
For twenty-five years, "data" in security meant logs and events. But logs are a lossy representation of reality.
(Danelle Au)
Organizations must distinguish identity verification, authentication and threat detection, or risk successfully authenticating the attackers they are trying to stop.
(Torsten George)
Silent patches can become exploit intelligence for attackers while leaving defenders without the context needed to prioritize risk.
(Tod Beardsley)
The skills that get a CISO hired are rarely the skills they are judged on later. Most security leaders are stuck in that gap. Closing it is the real job.
(Sravish Sridhar)
As AI dramatically shortens the time from vulnerability disclosure to exploitation, enterprises must look beyond patching to reduce application risk.
(Joshua Goldfarb)