ICS/SCADA - Security Ticks

Global OT cyber risk could top $329 billion, new report warns

critical infrastructure, cyber risk, cybersecurity, Don't miss, Dragos, ICS/SCADA, Marsh McLennan, News, report, Risk Management / SecurityTicks

Global OT cyber risk could top $329 billion, new report warns 2025-08-13 at 07:36 By Anamarija Pogorelec A new study from Dragos and Marsh McLennan puts hard numbers on the global financial risk tied to OT cyber incidents. The 2025 OT Security Financial Risk Report estimates that the most extreme scenarios could place more than […]

React to this headline:

Global OT cyber risk could top $329 billion, new report warns Read More »

Ransomware and USB attacks are hammering OT systems

CISO, critical infrastructure, cybersecurity, Don't miss, Honeywell, ICS/SCADA, News, report / SecurityTicks

Ransomware and USB attacks are hammering OT systems 2025-06-06 at 08:02 By Mirko Zorz Ransomware, trojans, and malware delivered through USB devices are putting growing pressure on industrial systems, according to the Honeywell 2025 Cyber Threat Report, which draws on data from monitoring tools deployed across industrial sites around the world. The findings highlight persistent

React to this headline:

Ransomware and USB attacks are hammering OT systems Read More »

UNIDIR Intrusion Path: New framework to analyze ICT environment activities

critical infrastructure, framework, ICS/SCADA, News / SecurityTicks

UNIDIR Intrusion Path: New framework to analyze ICT environment activities 2025-05-13 at 07:37 By Help Net Security Malicious activity in the ICT environment is growing. However, a non-technical audience often struggle to understand these threats, either because technical explanations are too complex or because media coverage oversimplifies the issues. To help understand and analyze these

React to this headline:

UNIDIR Intrusion Path: New framework to analyze ICT environment activities Read More »

Review: Hands-On Industrial Internet of Things

books, critical infrastructure, Don't miss, ICS/SCADA, Internet of Things, News, Review, Reviews / SecurityTicks

Review: Hands-On Industrial Internet of Things 2025-04-17 at 07:10 By Mirko Zorz Hands-On Industrial Internet of Things is a practical guide designed specifically for professionals building and securing industrial IoT (IIoT) systems. About the authors Giacomo Veneri brings deep expertise in telecommunications and AI, shaped by over 25 years in IoT and AI applications within

React to this headline:

Review: Hands-On Industrial Internet of Things Read More »

OT/ICS cyber threats escalate as geopolitical conflicts intensify

critical infrastructure, Dragos, ICS/SCADA, News, report / SecurityTicks

OT/ICS cyber threats escalate as geopolitical conflicts intensify 2025-02-28 at 17:03 By Help Net Security Ransomware attacks against industrial organizations surged by 87% over the past year, while new malware families designed specifically for OT environments emerged. These findings highlight a troubling trend: OT systems are increasingly becoming mainstream targets, and even sophisticated threat actors

React to this headline:

OT/ICS cyber threats escalate as geopolitical conflicts intensify Read More »

The role of compromised cyber-physical devices in modern cyberattacks

Don't miss, Features, Hot stuff, ICS/SCADA, IIoT, IoT, News, OT, router, security cameras, smart building, smart grid, smart home, supply chain compromise, Trend Micro / SecurityTicks

The role of compromised cyber-physical devices in modern cyberattacks 2024-10-17 at 11:46 By Zeljka Zorz Cyber-physical devices are increasingly getting compromised and leveraged by criminal groups and state-sponsored threat actors. Fyodor Yarochkin, Senior Threat Solution Architect with Trend Micro, believes that getting a better understanding of attackers’ infrastructure leads to a better understanding of the

React to this headline:

The role of compromised cyber-physical devices in modern cyberattacks Read More »

Geopolitical tensions escalate OT cyber attacks

attacks, CISO, critical infrastructure, cybersecurity, Don't miss, Features, GISEC, Government, Hot stuff, ICS/SCADA, News, opinion, Ransomware, strategy, threats / SecurityTicks

Geopolitical tensions escalate OT cyber attacks 2024-04-15 at 07:31 By Mirko Zorz In this Help Net Security interview, Andrew Ginter, VP of Industrial Security at Waterfall Security, discusses operational technology (OT) cyber attacks and their 2024 Threat Report. He examines how global geopolitical tensions and evolving ransomware tactics are reshaping industrial cybersecurity. He sheds light

React to this headline:

Geopolitical tensions escalate OT cyber attacks Read More »

Web-based PLC malware: A new potential threat to critical infrastructure

Don't miss, Hot stuff, ICS/SCADA, Malware, News, PLC, research, web application security / SecurityTicks

Web-based PLC malware: A new potential threat to critical infrastructure 2024-03-07 at 13:47 By Zeljka Zorz A group of researchers from Georgia Tech’s College of Engineering have developed web-based programmable logic controller (PLC) malware able to target most PLCs produced by major manufacturers. “Our Web-Based (WB) PLC malware resides in PLC memory, but ultimately gets

React to this headline:

Web-based PLC malware: A new potential threat to critical infrastructure Read More »

Review: Engineering-grade OT security: A manager’s guide

critical infrastructure, cyber risk, cyberattack, Don't miss, Hot stuff, ICS/SCADA, News, Review, Reviews, Waterfall Security Solutions / SecurityTicks

Review: Engineering-grade OT security: A manager’s guide 2024-01-08 at 08:01 By Helga Labus Andrew Ginter is a widely-read author on industrial security and a trusted advisor for industrial enterprises. He holds a BSc. in Applied Mathematics and an MSc. in Computer Science from the University of Calgary. He developed control system software products for Hewlett

React to this headline:

Review: Engineering-grade OT security: A manager’s guide Read More »

Why cyber war readiness is critical for democracies

conferences, critical infrastructure, cyber war, cybersecurity, Cyberwarfare, Don't miss, Features, Forescout, ICS/SCADA, IRISSCON, News, opinion, Russian Federation, Ukraine / SecurityTicks

Why cyber war readiness is critical for democracies 17/11/2023 at 14:02 By Zeljka Zorz Once the war in Ukraine ends, Russia’s offensive cyber capabilities will be directed towards other targets, Rik Ferguson, VP Security Intelligence for Forescout, predicted at IRISSCON on Thursday. Rik Ferguson on stage at IRISSCON 2023 The skills employed, the hacktivists and

React to this headline:

Why cyber war readiness is critical for democracies Read More »

Sandworm hackers incapacitated Ukrainian power grid amid missile strike

APT, critical infrastructure, Don't miss, Hot stuff, ICS/SCADA, Malware, Mandiant, News, Russian Federation / SecurityTicks

Sandworm hackers incapacitated Ukrainian power grid amid missile strike 09/11/2023 at 19:17 By Helga Labus Russia-backed ATP group Sandworm is behind the cyberattack that caused disruption of parts of the Ukrainian power grid in late 2022, according to Mandiant. About Sandworm “Sandworm is a threat actor that has carried out cyber operations in support of

React to this headline:

Sandworm hackers incapacitated Ukrainian power grid amid missile strike Read More »

ELITEWOLF: NSA’s repository of signatures and analytics to secure OT

cybersecurity, GitHub, Government, ICS/SCADA, News, NSA / SecurityTicks

ELITEWOLF: NSA’s repository of signatures and analytics to secure OT 17/10/2023 at 05:02 By Help Net Security Cyber entities continue to show a persistent interest in targeting critical infrastructure by taking advantage of vulnerable OT assets. To counter this threat, NSA has released a repository for OT Intrusion Detection Signatures and Analytics to the NSA

React to this headline:

ELITEWOLF: NSA’s repository of signatures and analytics to secure OT Read More »

Unnamed APT eyes vulnerabilities in Rockwell Automation industrial contollers (CVE-2023-3595 CVE-2023-3596)

critical infrastructure, Don't miss, Dragos, energy sector, firmware, Hot stuff, ICS/SCADA, manufacturing sector, News, PLC, Rockwell Automation, security update, vulnerability / SecurityTicks

Unnamed APT eyes vulnerabilities in Rockwell Automation industrial contollers (CVE-2023-3595 CVE-2023-3596) 13/07/2023 at 15:46 By Zeljka Zorz Rockwell Automation has fixed two vulnerabilities (CVE-2023-3595, CVE-2023-3596) in the communication modules of its ControlLogix industrial programmable logic controllers (PLCs), ahead of expected (and likely) in-the-wild exploitation. “An unreleased exploit capability leveraging these vulnerabilities is associated with an

React to this headline:

Unnamed APT eyes vulnerabilities in Rockwell Automation industrial contollers (CVE-2023-3595 CVE-2023-3596) Read More »

Security Gaps in Green Energy Sector: Unveiling the Hidden Dangers of Public-Facing PV Measuring and Diagnostics Solutions

Exposure, Green Energy, ICS, ICS/SCADA, Operational Technology, Photovoltaic, PV Plant attacks, Renewable Energy / SecurityTicks

Security Gaps in Green Energy Sector: Unveiling the Hidden Dangers of Public-Facing PV Measuring and Diagnostics Solutions 05/07/2023 at 13:16 By cybleinc Cyble analyses the threat to Photovoltaic systems via 130k Photovoltaic Monitoring & Diagnostic solutions exposed over the internet. The post Security Gaps in Green Energy Sector: Unveiling the Hidden Dangers of Public-Facing PV

React to this headline:

Security Gaps in Green Energy Sector: Unveiling the Hidden Dangers of Public-Facing PV Measuring and Diagnostics Solutions Read More »

How cybercriminals target energy companies

CISO, critical infrastructure, cybersecurity, Don't miss, energy sector, Hot stuff, ICS/SCADA, Searchlight Cyber, strategy, tips, Video / SecurityTicks

How cybercriminals target energy companies 15/06/2023 at 07:34 By Help Net Security In this Help Net Security video, Jim Simpson, Director of Threat Intelligence at Searchlight Cyber, discusses how cybercriminals employ specialized strategies when targeting energy companies. This is primarily due to the sensitive and valuable information these organizations hold and their critical role in

React to this headline:

How cybercriminals target energy companies Read More »