How to shut down a plant remotely in 3 seconds. 3…2…1… and boom! In my hand, I have a remote trigger that can fry the motherboard of any workstation, laptop, server, router, switch, monitor, IP phone, cell phone, firewall, etc. from up to 100 meters away. We can also schedule a date and time when…
Managing Negative PR Implications After a Cyberattack on Critical Infrastructure Guidelines for Effective Crisis Response Cyberattacks on critical infrastructure can have devastating consequences, including negative PR implications for the organization responsible for maintaining the infrastructure. In addition to the immediate risks to public safety, a hack can damage the organization’s reputation, leading to loss of…
Breaking the Illusion: How some CEOs’ Perceptions of Hacking Differ from Reality Hollywood has given us an unrealistic (with the exception of Mr. Robot) and exaggerated portrayal of hacking in movies and TV shows. From the fast typing and flashy graphics to the unrealistic speed and ease of breaking into secure systems, the depiction of…
Why IT Security Companies are Not the Best Choice for Securing Operational Technology IT Security Company vs OT Security Company: Why IT Security Companies are Not the Best Choice for Securing Operational Technology As industrial organisations increasingly rely on connected devices and digital systems to manage critical operations, the importance of industrial cybersecurity has become…
I’m Going to Get Hacked Anyway In his book The Road Less Stupid, Keith Cunningham makes this correct observation about succeeding in business: “I don’t need to do more smart things. I just need to do fewer dumb things.” When it comes to cyber security, I see a lot of dumb decisions made by smart…
OT Attack Surface Management The attack surface of an operational technology (OT) system refers to the total exposure of the system to potential security threats. It encompasses all the entry points and attack vectors that an attacker can use to gain access to or compromise the system. The attack surface includes a wide range of…
Common Mistakes IT Security Staff Make in an OT Environment 1 ) Our ICS network is absolutely air-gapped. Throughout the years, we have heard this statement over and over again, specifically from IT department, but in practice and during our assessments, we discovered some sort of connectivity to internet either through the network or some…
10 Most Common OT Attack Vectors An attack vector is the method or path that an attacker uses to access the active target of the attack, that is, the steps that the attacker follows to materialise the threat, it is known that each attacker follows his own “strategy” to be able to consummate Its objective,…
Vulnerability Assessment : Active Scanning vs. Passive Scanning For quite some time, OT engineers and asset owners were horrified by the sound of the “active scan” and quite frankly, they were partially right. No one would dare to scan an OT network the way IT network scans were performed. An active scan could shut down…
How to Build a Defensible OT Network 1. Assessment Although vulnerability assessment and risk assessment are commonly used interchangeably, but they are two different approaches, and both are needed as part of a comprehensive security assessment. Another misconception is that security assessment is a network anomaly detection tool like Nozomi Networks, Claroty or Tenable. Any…