Control device security

MITRE, partners design Defending OT with ATT&CK, set to bolster security posture across critical installations

Non-profit organization MITRE’s Center for Threat-Informed Defense, in collaboration with AttackIQ, Booz Allen Hamilton, Ensign InfoSecurity, Global Cyber Alliance, and Siemens, has created Defending OT with ATT&CK to identify and defend against adversarial techniques that impact operations on critical infrastructure.…

MITRE seeks contributions for ICS ATT&CK evaluations to enhance emulation

Non-profit organization MITRE announced a call for intelligence contributions for ATT&CK evaluations addressing ICS (industrial control systems) to enrich its emulation. The enhanced insight from contributors enables a more holistic emulation approach that reflects the breadth of adversary behaviors. Round…

Critical vulnerabilities found in Ewon Cosy+ industrial VPN gateways

Security vulnerabilities have been detected in the Ewon Cosy+ industrial VPN gateways that allow unauthenticated attackers to gain root access to the device. With this access and by conducting further analyses, researchers from SySS GmbH found more issues allowing decrypting…

Adopting strategic patch management tactics across ICS environments amid escalating cyber threats

Across the ICS (industrial control system) realm, ensuring security and operational integrity is crucial for organizations in various sectors, amidst the increasing number of cybersecurity threats and attacks. In line with this, the strategies deployed for carrying out patch management…

IEC publishes IEC 62443-2-1:2024, setting security standards for industrial automation and control systems

The IEC (International Electrotechnical Commission) published this week IEC 62443-2-1:2024 addressing security for industrial automation and control systems. The document, Part 2-1: Security Program Requirements for IACS Asset Owners, outlines the necessary policies and procedures for security programs that asset…

Industrial Cyber Experts

Sandeep Lota

OT Security Is Moving to the Endpoint – Where Humans Interact

When asked why he robbed banks, Depression-era bank robber Willie Sutton purportedly replied, “Because that’s where the money is.” If... Read full story

Paul Veeneman

Enhancing national infrastructure security by harmonization of cybersecurity standards in OT/ICS environments

The global cybersecurity framework could significantly benefit from the harmonization of standards for OT (operational technology) and ICS... Read full story

Tony Turner

Intensifying focus on advancing product security in OT and ICS environments amid escalating cyber threats

From a vendor’s perspective, the rising cyber threats and attacks have put a sharp focus on the need... Read full story

Ilan Barda

Analyzing role of C-Level executives, management in enhancing cybersecurity within industrial sectors

Securing C-Level buy-in is becoming increasingly crucial for implementing cybersecurity measures across industrial and operational environments. Support from... Read full story

Experts