IoT & ICS Security

IoT Connected Devices Pose Significant Risk to Organizations
Security flaws in connected devices and the IoT are plaguing the digital landscape, impacting a broad range of industries ...

Insider Indicted for Attempting to Sabotage California Water Plant
Earlier this month, Rambler Gallo pled not guilty to charges that he attempted to sabotage the water treatment facility in Discovery Bay, California. The facility provides treatment for the water and wastewater ...

Russia Expected to Increase Critical Infrastructure Attacks
Russia’s war strategy increasingly involves cybersecurity, with the country expected to ramp up attacks on critical infrastructure in Ukraine and countries that are members of NATO, according to Switzerland’s Federal Intelligence Service ...

Biden Admin Eyes IoT Cybersecurity With Device Labeling Program
The Biden administration unveiled a cybersecurity certification and labeling program that will make it easier for enterprises and consumers to see which smart devices are more secure and less vulnerable to attacks ...

StackRot: Linux Bug so bad Linus Dives Into Code to Fix It
Maple Tree Side Effects: Torvalds feels the pressure, fixes lazy locks ...

Contec SolarView: Critical Bug Unpatched After 14 MONTHS
PV OT: VPN PDQ! 9.8 CVSS known since May 2022—but still exploitable on 400+ net-connected OT/ICS/SCADA systems ...

Enterprises Unprepared to Defend Against MITRE ATT&CK Techniques
Enterprises lack detections for more than three-quarters of all MITRE ATT&CK techniques, while 12% of SIEM rules are broken and will never fire due to data quality issues including misconfigured data sources ...

Critical Infrastructure Security Needs an Overhaul
The security policies underpinning the nation’s critical infrastructure sectors and protecting them from cyberattacks are outdated and require comprehensive overhaul, according to a recent report by the Cyberspace Solarium Commission 2.0. According ...

GDPR FAIL: US Firm ‘Profiles Half the World’ — it’s Max Schrems Again
NYOB accuses TeleSign, Proximus and BICS of misusing phone users’ private data. Reputation scoring = privacy violation? ...