S4x14 CONFERENCE -- Miami – A well-known and prolific ICS/SCADA vulnerability researcher here today revealed a zero-day flaw in a Web server-based system used for monitoring, controlling, and viewing ...

“The Stuxnet demonstration of how vulnerable ICS/SCADA are opened a completely new area for whitehat and blackhat researchers,” he said via email. “This topic will be in the top list for 2013.” ...

It took only a few hours before attackers started to hammer away at two decoy water utility networks stood up in a recent experiment that resulted in 39 attacks from 14 different nations over a 28-day ...

Actions to Take Today to Protect ICS/SCADA Devices: • Enforce multifactor authentication for all remote access to ICS networks and devices whenever possible. • Change all passwords to ICS/SCADA ...

Hackers have developed custom tools to gain full system access to a number of industrial control system (ICS) and supervisory control and data acquisition (SCADA) devices, according to the US ...

Tiffany Rad, who moderated the ICS security track, talked about the restrictions that laws such as the DMCA can place on security researchers looking at new systems. Tiffany Rad, who moderated the ICS ...

The U.S. currently faces a growing threat from cyber-attacks against its critical infrastructure (CI) vital to our modern society. Many understand this growing threat but don’t know the origins of a ...

Some of the vulnerabilities could allow attackers to access systems with ease. Patches are not available for all the flaws. The US Cybersecurity and Infrastructure Security Agency (CISA) published ...

The Department of Energy (DOE), the Cybersecurity and Infrastructure Security Agency (CISA), the National Security Agency (NSA), and the Federal Bureau of Investigation (FBI) yesterday released this ...

Radiflow, a pioneer developer of ICS/SCADA network security solutions, today introduced the iSID Intrusion Detection System for OT networks. Complementing Radiflow's comprehensive line of network ...

One of the most important and overlooked parts of the cyber threat attribution process is identifying the threat actor’s objective. Threat researchers often look at the intended goal of an attack and ...