Hi, what are you looking for?
SecurityWeek
Government
The White House’s new executive order 14420 widens scrutiny of industrial control systems over cyber sabotage concerns.
ICS/OT
The agency has released guidance on reducing internet exposure in the wake of the recent Iran-linked hacker attacks.
ICS/OT
Hands-on Cyber Attack Methods course returns to SecurityWeek’s ICS Cybersecurity Conference, October 6–8 at the W Nashville.
ICS/OT
The attack caused real-world operational disruption and raised concerns about the resilience of Britain’s distributed energy infrastructure and the potential for repeatable attacks.
Application Security
Hackers breached the systems of anti-adblocking solutions provider PageFair and used the access to deliver malware via the publishers that rely on the company’s...
ICS/OT
Infinite Automation Systems has released a new version of its Mango Automation product to address a series of vulnerabilities that can be leveraged for...
ICS/OT
New "FrostyURL" Zero-Day in Rockwell Automation PLC Can Shut Down Operational Networks.
ICS/OT
Researchers have uncovered several vulnerabilities in power quality measurement products from Janitza Electronics, a Germany-based company that specializes in the development of energy efficiency...
ICS/OT
Final Agenda Posted for 2015 ICS Cyber Security Conference
ICS/OT
The director of the US National Security Agency on Monday sought allies at an elite technology conference amid lingering distrust about widespread online snooping....
Cyberwarfare
Joe Weiss, founder of the Industrial Control Systems (ICS) Cyber Security Conference, and several leading experts were featured this week in PBS' NOVA. The...
ICS/OT
Energy management giant Schneider Electric has patched a cross-site scripting (XSS) vulnerability on one of its websites.
ICS/OT
The need to protect your infrastructure and services from disruption is a critical priority, especially considering increasing connectivity prevalent in industrial environments. To build...
ICS/OT
The nuclear industry still doesn’t fully understand the risk posed by cyberattacks, according to a new report published on Monday by Chatham House.The report,...
ICS/OT
SecurityWeek is proud to announce that Philip D. Quade, Chief of the NSA Cyber Task Force and Special Assistant to the Director National Security...
ICS/OT
ICS-CERT published advisories this week for a series of vulnerabilities affecting SCADA products from Resource Data Management, IBC Solar and EasyIO.The flaws detailed in...
ICS/OT
James Clapper, Director of National Intelligence, testifies alongside CIA Director John Brennan, during a US House Committee on Intelligence hearing on Capitol Hill in...
ICS/OT
The Industrial Control Systems Computer Emergency Response Team (ICS-CERT) has published a total of six advisories to warn organizations about a series of Supervisory...
ICS/OT
Industrial cybersecurity startup CyberX has launched its Industrial Threat Intelligence Platform, which the company says can help utilities identify cyber security threats in operational...
ICS/OT
Longest Running ICS Cyber Security Conference Opens Call for Presentations for 2015 Event
ICS/OT
Honeywell released a security update for the company’s Falcon XLWeb controller several months ago, but only a small number of organizations have applied the...
ICS/OT
Manufacturing supply chains are vital to the development and fulfillment of any modern technology—they change rapidly as sectors overlap, products evolve, and global locations...
ICS/OT
UK-based Darktrace, a cyber security startup that leverages machine learning and mathematics to detect threats, has launched a new solution designed to detect threats...
Join as speakers examine the various components of ASM strategy, the push to mandate continuous asset visibility and inventory tools, and the use of red-teaming, bug bounties and pen-tests in modern security programs.
RegisterIn this live webinar, learn how to define your minimum viable business, identify the systems it depends on, measure actual recovery time against business requirements, and present the gaps to the board as measurable risk.
RegisterExpert Insights
For twenty-five years, "data" in security meant logs and events. But logs are a lossy representation of reality.
(Danelle Au)
Organizations must distinguish identity verification, authentication and threat detection, or risk successfully authenticating the attackers they are trying to stop.
(Torsten George)
Silent patches can become exploit intelligence for attackers while leaving defenders without the context needed to prioritize risk.
(Tod Beardsley)
The skills that get a CISO hired are rarely the skills they are judged on later. Most security leaders are stuck in that gap. Closing it is the real job.
(Sravish Sridhar)
As AI dramatically shortens the time from vulnerability disclosure to exploitation, enterprises must look beyond patching to reduce application risk.
(Joshua Goldfarb)