#1 OT/ICS CYBERSECURITY TRAINING AND MACHINE LEARNING TRAINING IN DELHI NCR AND IN INDIA
#OTCybersecurity #ICSSecurity #IndustrialCybersecuriTY #CriticalInfrastructure #OperationalTechnology #TheEvolvEdge
#IndustrialAutomation #NetworK
visit-www.theevolvedge.com
mail-info@theevolvedge.com
oh no - +917982403420 ,+919311805027

First blog of the year is five general tips for learning about #OTCybersecurity as a student https://tisiphone.net/2026/01/04/my-top-5-recommendations-on-ot-cybersecurity-student-upskilling/

#1 OT/ICS CYBERSECURITY TRAINING IN DELHI NCR AND IN INDIA
#OTCybersecurity #ICSSecurity #IndustrialCybersecuriTY #CriticalInfrastructure #OperationalTechnology #TheEvolvEdge
#IndustrialAutomation #NetworK
visit-www.theevolvedge.com
mail-info@theevolvedge.com
oh no - +917982403420 ,+919311805027

Our CEO, Patrick C. Miller, joins RaptorComply Nov 18 to discuss how utilities can elevate their NERC CIP programs from reactive compliance to strategic resilience.

Don’t miss it:
https://www.raptorcomply.com/resources/events-webinars/from-reactive-to-strategic-how-to-elevate-your-cip-program

#NERC #CIP #CriticalInfrastructure #OTCybersecurity #AmpyxCyber

Our CEO, Patrick C. Miller, joins RaptorComply Nov 18 to discuss how utilities can elevate their NERC CIP programs from reactive compliance to strategic resilience.

Don’t miss it:
https://www.raptorcomply.com/resources/events-webinars/from-reactive-to-strategic-how-to-elevate-your-cip-program

#NERC #CIP #CriticalInfrastructure #OTCybersecurity #AmpyxCyber

🇺🇸 Federal OT networks need security built for them where traditional IT solutions fall short. Claroty Continuous Threat Detection (CTD) provides comprehensive reach to identify your assets across the #Federal government’s variety of #OT, #IoT, #FRCS / BMS, and physical security functions. 💡 Find out more: https://claroty.com/resources/datasheets/on-premise-ot-security-for-federal-networks

#ClarotyFederal #OTcybersecurity #FedOT #JIE #JRSS #Claroty

It's rap time! This year's #S4x25 OT security conf rap riffed on organizer Dale Peterson's keynote re: be an "OT security artist."

References to his talk, Grammy's Song of the Year "Not Like Us" by
Kendrick Lamar w/line "I see dead people" & a Picasso-attributed quote re: wield the rules like a pro, then break them like an artist.

Read the rap straight up in bold & yellow highlight and/or read the reference notes below each line.

#OTSecurity #OTCybersecurity #ICS #ICSSecurity #cybersecurity

💡 On Nexus, The Port Authority of New York & New Jersey OT Cybersecurity Lead John Ballentine writes that risk managers establishing a culture of #OTcybersecurity awareness and risk remediation in their organizations need to establish a formal and measurable program approach. The program must provide a shared vision and a practical roadmap that makes sense because it relates to many of the unique characteristics of their organization, #OT environment, business model, and risk appetite. https://nexusconnect.io/articles/lessons-learned-from-creating-an-ot-cybersecurity-program-in-a-large-slow-moving-government-agency

Dragos’s Robert M. Lee has been selected to present at SXSW 2025! This March, he’ll present a session: “Geopolitical Cyber Threats to Our Water, Electricity & Fuel,” along with other tech and cybersecurity thought leaders from around the globe. Stay tuned for more details including session date and time!

Learn more about his presentation and the event: https://hubs.la/Q02VLSTv0

#icscybersecurity #otcybersecurity #industrialcybersecurity #DragosIntel

Dragos's Technical Director of Incident Response Lesley Carhart shares the latest trends in OT incident response cases that showcase a growing sophistication and awareness in OT cybersecurity. Be sure to catch these valuable insights in their recent blog post: https://www.dragos.com/blog/the-shifting-landscape-of-ot-incident-response

#icscybersecurity #otcybersecurity #industrialcybersecurity #incidentresponse @hacks4pancakes

I know some of you have been waiting patiently: @dragosinc has a Principal Industrial Consultant role open in the US (fully remote with onsite travel). This is a great way for a person who has done vertical or government-specific OT cybersecurity to move into more varied OT consulting and join our team. https://careers.dragos.com/jobs/2118?lang=en-us #otcybersecurity #ICSCybersecurity #industrial_cybersecurity #cybersecurityjobs

I’m not our year in review report, but I’ve definitely noted a fascinating uptick in some specific types of Incident Response in our (all) industrial customers:

1) Structured investigations of already occurred industrial accidents to eliminate or identify computer root cause as part of process.
2) Forensic analyses and clean up of long-term infections and lack of perimeter control of those environments.
3) Follow on investigation of intrusions into IT to eliminate or identify potential overflow to or from OT.

It’s really great to see now’s companies taking these on procedurally and with an understanding of how different IR is in these spaces. #OTcybersecurity #ICSCybersecurity

GAO Reports – Week of 3-2-24 – CISA and OT Cybersecurity – https://tinyurl.com/ytvcw7r9 #CISA #otCybersecurity

Originally planned as a 1U OPNsense build from last August...currently using as a Proxmox server for my OT cyber security lab with a full simulated enterprise OT/ICS environment (Virtual OPNsense, Enterprise Active Directory w/simulated users, OpenPLC, Scada-LTS, Factory.io)

-Intel H61 Mini-ITX, i5 3470T
-8x2 GB DDR3
-Noctua NF-A4x20 Fans
-HP NC364T Quad NIC
-2X 128GB SSD
-Rackchoice 1U Case
-DEVMO PCI-E 4X Riser Cable
#opnsense #proxmox #homelab #cybersecurity #OTcybersecurity #icssecurity

🔎 In this case study, find out how one Eastern European energy & petrochemical company partnered with @Claroty to significantly enhance their resilience and security across various OT environments. https://claroty.com/resources/case-studies/securing-critical-oil-and-gas-infrastructure

#assetmanagement #vulnerabilitymanagement #otcybersecurity

Happy New Year! Here are the ICS Advisory Project 2023 Annual Summary Slides for CISA ICS Advisories and this week's Other CERT & Vendor vulnerability advisories weekly summary for 25 – 29 December 2023. Attached are 2023's Annual summary slides.

Link to ICS Advisory Project Annual Summary Slides: https://drive.google.com/file/d/1HYDE_rD1dvJb30r7CuoJuXEYSPNs7MxU/view

This past week, CISA did not release any new ICS Advisories. In its place, the ICS[AP] provided a high-level summary of the 380 CISA ICS Advisories released in 2023. Within this summary, you will find a high-level review of the following:

- Total Number of vendors reported in ICS Advisories ranked by country
- Vendors with a high number of critical severity vulnerabilities
- Overview of Vendor & products Affected Global Distribution & Updated CISA Advisories in 2023
- Overview of 2023 CISA ICS Advisories CVE CVSS Vectors by Severity
- Top 10 CWEs identified on MITRE's 2023 CWE Top 25 Most Dangerous Software Weaknesses (MDSW).
- Most reported impacted Critical Infrastructure sectors and by Vendor
- ICS Asset Type metrics
- Total number of CISA ICS Advisories correlated to CISA KEV Catalog
- Mitigation statics based on CISA ICS Advisories recommendations
- Top Independent Vulnerability Researchers and Research Organizations for 2023

ICS[AP] identified 12 new other CERT and vendor products security advisories were released this week for vulnerabilities in the following Vendor products: Moxa (LTE Wireless Gateway & Ethernet remote I/O with 2-port Ethernet switch), Buffalo (Router), Weintek (HMI), and Gallagher (Access Control System). See Weekly Summary of Other Vendor & CERT Advisories for potentially impacted CI sectors.

View the summary details of other CERT & Vendor product advisories identified last week (25 – 29 December 2023) at: https://drive.google.com/file/d/1wBofoXVnP9m9wAKxx2VCSFeS9tTlNMmg/view?usp=sharing

No updates were added to the CISA KEV Catalog this week.

Visit the ICS[AP] CISA KEV Catalog Dashboards: https://www.icsadvisoryproject.com/ics-advisory-dashboards/cisa-kev-for-cisa-ics-advisories

View previous ICS Advisory Project annual and weekly summaries: https://www.icsadvisoryproject.com/ics-advisory-summaries

To view the updated ICS Advisory Project Dashboards, visit: icsadvisoryproject.com

We appreciate everyone's comments & support. Have a great week!

#CISA #ot #ics #otcybersecurity #otsecurity #icscybersecurity
#cybersecurity #cybersecuritythreats #cybersecurityawareness

New on #ControlLoop, how cyber insurance works in the OT space with Gerry Glombicki of Fitch Ratings. In the Learning Lab, Dragos's Kyle O'Meara and Michael Gardner for part II of their discussion on #threathunting, hosted by Mark Urban.

Listen here: https://hubs.la/Q01S6Z7Y0

#icscybersecurity #otcybersecurity #industrialcybersecurity #cyberinsurance

In my last post, I mentioned some cool things to come in 2023... so let's gooo! 🙌

In my research analyst role at SANS, I'm running a survey through March 28 on OT/ICS visibility-- and I want to hear from the community! We're looking for experts to share their perspective on IT and OT visibility, #industrial organizations and their SOCs, as well as detection capabilities across IT and OT networks. We'll share the findings in a public report released later this year so everyone can leverage the insights to help improve their OT visibility program.

Link to survey ➡ https://sans.org/u/1pqp

If driving our industry's detection capabilities is not enough incentive for you, don't worry, there's more! All respondents will be entered for a chance to win a $250 Amazon gift card for participating!

#otcybersecurity #otsecurity #ICSCybersecurity #soc #detection

I'm pleased to announce our new paper has been published! This work discusses a technique, and subsequently presents a proof of concept, for scanning for vulnerabilities within PLC control logic. As I've mentioned through numerous talks and work recently, traditional enterprise focused reconnaissance, enumeration, and vulnerability scanning techniques are inadequate against OT and provide very little information on OT-specific vulnerabilities. This tool goes further than typical network scanning to understand where the control logic itself may have vulnerabilities. Read the paper here:

https://www.sciencedirect.com/science/article/pii/S0167404823000263

We hope this work is just the first step in tooling to improve the state of in-PLC vulnerabilities and PLC programming practices, greatly reducing the exploitability of OT moving forward.

#otcybersecurity #icscybersecurity #icssecurity #plcprogramming #cybersecurity

The march to secure critical infrastructure continues. Read the https://twitter.com/IndustCybersec article on the https://twitter.com/USGAO report about #IOT and #OT #security https://industrialcyber.co/reports/gao-report-identifies-need-to-better-secure-iot-and-ot-devices-across-critical-infrastructure/ https://twitter.com/annaribeiro

#infrastructure #iotsecurity #otcybersecurity