Petya ransomware spreads by exploiting the EternalBlue vulnerability in Microsoft Windows, the same flaw used by WannaCry weeks earlier. ICS cybersecurity experts, including Dr. Ulrich Lang of ObjectSecurity, Edgard Capdevielle of Nozomi Networks, and Bryan Singer…
Securing Industrial IoT (IIoT) is harder than securing traditional IT systems because IIoT devices, which include Industrial Control Systems (ICS), Operational Technology (OT), building automation, sensors, and embedded systems, follow no single security standard. They often…
CrashOverride, also called Industroyer, is an extensible Industrial Control Systems attack platform that ESET and Dragos reported was used against critical infrastructure in Ukraine. The National Cybersecurity and Communications Integration Center (NCCIC) worked with partners to…
Recently there was a global ransomware cyberattack as never seen before. This single attack affected more than 200 000 computers and wreaked havoc on financial institutions, healthcare organizations and transportation to name just a few. This…
Just about everything is connected: from cell phones and wearable devices to cars, refrigerators and industrial equipment. IT experts have long recognized this global connectivity will only continue to skyrocket. Connectivity adds convenience to our jobs.…
IIoT applications introduce serious ICS security risks to manufacturing, energy, oil and gas, chemical, and transportation industries, according to Dr. Ulrich Lang, Co-founder and CEO of ObjectSecurity. In this interview, Dr. Lang explains that most customers…
WannaCry ransomware, which exploited the Microsoft SMBv1 vulnerability known as MS17-010, posed a severe threat to industrial control systems (ICS). Brad Hegrat, IOActive's Director of Advisory Services, warns that ICS environments are especially vulnerable because NetBIOS…
Sometimes cyberattacks come from a direction you weren’t really expecting. We all know about threats from ransomware, nation-state actors, industrial espionage, or hacker collectives looking for personally-identifiable information (particularly for credit cards). But we probably weren’t…
In a 2017 League of Scholars ranking, wireless sensor networks and cloud computing dominated academic focus among the world's top 500 Internet of Things researchers, at 30% and 27% respectively. This ranking, compiled by co-founder Paul…
Firewalls are not a sufficient security solution for protecting water and wastewater facility SCADA systems from cyberattacks, according to Lior Frenkel, CEO of Waterfall Security Solutions. The primary sources of cyber risk are wide-area networks (WANs)…
A research from the Ponemon Institute finds digitalization in U.S. Oil and Gas operations is seriously outpacing cybersecurity measures and that’s creating an undeniable risk to operational security. In “The State of Cybersecurity in the Oil &…
Most organizations are overwhelmed, understaffed, and/or underfunded when it comes to cybersecurity. These constraints create a critical need to prioritize on the most critical cybersecurity measures. However, often these priorities are unclear or hard to determine,…