November 10, 2023 at 07:51AM Russian hackers Sandworm targeted a Ukrainian electrical substation, causing a brief power outage in October 2022. The attack involved using OT-level living-off-the-land techniques and a variant of CaddyWiper malware. The exact initial vector remains unclear, but the incident highlights Sandworm’s ongoing efforts to disrupt Ukraine’s power grid. Asset owners globally … Read more
November 9, 2023 at 04:15AM In October, Russia’s “Sandworm” hackers carried out two previously undocumented attacks on operational technology (OT), causing a power outage and coinciding with missile strikes on critical infrastructure in Ukraine, according to cybersecurity firm Mandiant. The attacks targeted a control system called MicroSCADA and used a “novel technique” to impact industrial … Read more
November 1, 2023 at 04:44AM Industrial control systems are increasingly being targeted by cyberattacks, which can have severe consequences such as manufacturing disruptions and data breaches. To address these challenges, UK soft drinks producer Britvic will be discussing their approach to strengthening operational resilience in an upcoming webinar on November 8. Sign up to watch … Read more
October 26, 2023 at 10:39AM Insights from the ICS Cybersecurity Conference highlighted the value of applying cybersecurity techniques and penetration testing used in weapons systems to secure industrial control systems (ICS) and operational technology (OT). Vulnerabilities such as poorly secured connectivity and outdated software were identified during penetration testing on weapons systems. Cybersecurity techniques for … Read more
October 18, 2023 at 02:02PM The EPA has withdrawn its rules requiring cybersecurity assessments for water utilities due to legal challenges. Experts warn that this leaves the water sector vulnerable to cyberattacks, which could have serious public health and safety consequences. The EPA is now encouraging utilities to voluntarily conduct risk assessments and provide user … Read more
October 10, 2023 at 09:54AM SecurityWeek will host the 2023 Industrial Control Systems (ICS) Cybersecurity Conference from October 23-26, 2023, in Atlanta. The event, now in its 22nd year, focuses on cybersecurity for industrial control systems and operational technology. The conference will feature over 75 sessions, including technical and strategy sessions, and will address various … Read more