News June 26, 2023

High-impact attacks on critical infrastructure climb 140%

4 min read - Prior to the pandemic, cyber-sabotage attacks on manufacturing plants were non-existent. Today, the situation has changed dramatically. As per a recent report, attacks that led to physical consequences in process manufacturing, discrete manufacturing and critical industrial infrastructures impacted over 150…

News April 19, 2023

Pipedream malware can disrupt or destroy industrial systems

4 min read - In the lead-up to the 2021 Super Bowl, a water treatment plant 15 miles away from Raymond James Stadium in Tampa was targeted in a cyberattack. The perpetrator manipulated the water’s sodium hydroxide levels from 100 parts per million to…

Risk Management February 20, 2023

The growing threat to critical infrastructure

5 min read - In August 2022, the threat intelligence and cybersecurity company Cyble found 8,000 virtual network computing (VNC) instances exposed online. Additionally, this research revealed that most of these ports are in the United States, China and Sweden — putting many critical…

Risk Management January 12, 2023

Now you SIEM, now you don’t — six failures of cybersecurity

4 min read - Security information and event management (SIEM) frameworks are essential for enterprises to monitor, manage and mitigate the impact of evolving cyberattacks. As the number of threats and the financial impact of breaches increase, these frameworks are even more crucial. Consider…

Risk Management November 22, 2022

Why operational technology security cannot be avoided

8 min read - Operational technology (OT) includes any hardware and software that directly monitors and controls industrial equipment and all its assets, processes and events to detect or initiate a change. Yet despite occupying a critical role in a large number of essential…

Government July 25, 2022

U.S. Cybersecurity Policy Has Changed Since the Colonial Pipeline Attack

3 min read - More than a year ago, a ransomware attack made the news across the nation. The Colonial Pipeline Company announced on May 7, 2021, that the DarkSide Ransomware-as-a-Service group, based in eastern Europe, had hit it. The FBI has since confirmed…

Energy & Utility July 11, 2022

One Year After the Colonial Pipeline Attack, Regulation Is Still a Problem

3 min read - The Colonial Pipeline cyberattack is still causing ripples. Some of these federal mandates may mark major changes for operational technology (OT) cybersecurity. The privately held Colonial Pipeline company, which provides nearly half of the fuel used by the East Coast…

Malware April 13, 2022

Where Everything Old is New Again: Operational Technology and Ghosts of Malware Past

7 min read - This post was written with contributions from IBM Security X-Force’s Michael Worley. Operational technology (OT) — the networks that control industrial control system processes — face a more complex challenge than their IT counterparts when it comes to updating operating…

Incident Response December 10, 2021

IoT Security: Protecting Food and Agriculture Organizations

3 min read - Ransomware actors are targeting food and agriculture organizations, potentially disrupting business. Luckily, there are already formal structures in place to boost the IoT security defenses they need. Knowing them keeps the lifeblood of industrial farms and food delivery going. Businesses…

Identity & Access December 9, 2021

IAM OT Security Risks Call for Strategic Defenses

5 min read - Today’s technology requires today’s identity and access management (IAM). In the past, operational technology (OT) systems were physically and logically separated from a company’s enterprise corporate business environment and the external world. That served as a control to protect them…