ICS/OT
Cyber attacks against supervisory control and data acquisition (SCADA) systems doubled in 2014, according to Dell’s annual threat report, released Monday.
Hi, what are you looking for?
SecurityWeek
Government
The White House’s new executive order 14420 widens scrutiny of industrial control systems over cyber sabotage concerns.
ICS/OT
The agency has released guidance on reducing internet exposure in the wake of the recent Iran-linked hacker attacks.
ICS/OT
Hands-on Cyber Attack Methods course returns to SecurityWeek’s ICS Cybersecurity Conference, October 6–8 at the W Nashville.
ICS/OT
The attack caused real-world operational disruption and raised concerns about the resilience of Britain’s distributed energy infrastructure and the potential for repeatable attacks.
ICS/OT
Intel Security (fomerly McAfee) has announced a security platform designed to protect both new and legacy infrastructure within the electric power grid.
ICS/OT
The European Union Agency for Network and Information Security (ENISA) has published a new study on the challenges of developing certification schemes for cybersecurity...
ICS/OT
Canada-based Trihedral Engineering Ltd. has released software updates to address a security vulnerability that can be leveraged to cause VTScada servers to crash.
ICS/OT
Security researcher Billy Rios has created a database of hundreds of thousands of "known-good" files from makers of supervisory control and data acquisition (SCADA)...
ICS/OT
Vulnerabilities Expose SCADA Systems to Remote AttacksSiemens has released software updates to address two critical vulnerabilities in its SIMATIC WinCC supervisory control and data...
ICS/OT
Hi, I am Nate Kube and I am really pleased to be starting a dialogue with SecurityWeek’s readers. As a founder and CTO of...
ICS/OT
Researchers at Trend Micro say the Sandworm team may have their eyes set on compromising SCADA-based systems.
ICS/OT
In a two-year study of information about critical control systems directly connected to the Internet, researchers found mining equipment, a surprising number of wind...
ICS/OT
A total of three security holes have been identified in Schneider Electric's StruxureWare SCADA Expert ClearSCADA products, ICS-CERT reported this week.
ICS/OT
The computers of the United States Nuclear Regulatory Commission (NRC), the organization responsible for protecting public health and safety related to nuclear energy, have...
ICS/OT
Siemens has released version 7.3 of the SIMATIC WinCC supervisory control and data acquisition (SCADA) system to address several vulnerabilities, most of which can...
Cybersecurity Funding
Israel-based cybersecurity startup CyberX has raised $2 million in an initial funding round led by Glilot Capital Partners, with participation from the Swarth Group,...
ICS/OT
Two security researchers uncovered vulnerabilities affecting a SCADA product that can be potentially used to compromise operations at critical infrastructure companies.
Join as speakers examine the various components of ASM strategy, the push to mandate continuous asset visibility and inventory tools, and the use of red-teaming, bug bounties and pen-tests in modern security programs.
RegisterIn this live webinar, learn how to define your minimum viable business, identify the systems it depends on, measure actual recovery time against business requirements, and present the gaps to the board as measurable risk.
RegisterExpert Insights
For twenty-five years, "data" in security meant logs and events. But logs are a lossy representation of reality.
(Danelle Au)
Organizations must distinguish identity verification, authentication and threat detection, or risk successfully authenticating the attackers they are trying to stop.
(Torsten George)
Silent patches can become exploit intelligence for attackers while leaving defenders without the context needed to prioritize risk.
(Tod Beardsley)
The skills that get a CISO hired are rarely the skills they are judged on later. Most security leaders are stuck in that gap. Closing it is the real job.
(Sravish Sridhar)
As AI dramatically shortens the time from vulnerability disclosure to exploitation, enterprises must look beyond patching to reduce application risk.
(Joshua Goldfarb)