Industrial Cyber’s Post

"To enable Congress to conduct objective and independent oversight concerning CISA’s efforts to address these recent cyberattacks, Grassley asked Easterly to provide answers on a couple of questions no later than July 17, 2024." https://lnkd.in/gT-RvkTa #Cybersecurity #CISA #SenatorGrassley #DataProtection #CyberAttack #DigitalSecurity #industrialcyber #icssecurity #ics

"If we equip ourselves with an automated, multi-discipline view, we adjust and adapt as new threats emerge to evolve with the threats over time, and if threats proliferate or transmit in new and innovative ways we on the defensive side know our technical and risk footprint to design new and better defense tools, practices and responses." https://lnkd.in/gwUxYNwF #IndustrialSecurity #OTsecurity #Cybersecurity #CriticalInfrastructure #industrialcyber #icssecurity #ics

"The industrial cybersecurity landscape is ever-changing, with malware and phishing campaigns posing significant challenges and often serving as the initial access point for broader attacks and espionage." https://lnkd.in/gyXazEFx #cybersecurity #threatlandscape #espionage #ransomware #industrialcyber #icssecurity #ics

"During ASD’s ACSC investigations, a common issue that reduces the effectiveness and speed of investigative efforts is a lack of comprehensive and historical logging information across several areas, including web server request logs, Windows event logs, and internet proxy logs." https://lnkd.in/g-8rDrpe #cybersecurity #APT40 #China #cyberattacks #CISA #industrialcyber #icssecurity #ics

"Nozomi Networks Labs has released a report assessing the OT or IoT threat landscape by analyzing the latest ICS CVEs published by the U. S. Cybersecurity and Infrastructure Security Agency CISA, alongside data from anonymized customer telemetry and IoT botnet attacks on its global honeypots." https://lnkd.in/gkRtxK_f #OTsecurity #IoTsecurity #Cybersecurity #IndustrialControlSystems #Regulations #CISOs #NozomiNetworks #industrialcyber #icssecurity #ics

"During the design and development of a software product, developers should take steps to prevent OS command injection vulnerabilities at scale including, but not limited to whenever possible, using built-in library functions that separate commands from their arguments instead of constructing raw strings fed into a general-purpose system command." https://lnkd.in/gwtcD9fS #CISA #FBI #OSCVulnerability #NetworkSecurity #CybersecurityAlert #industrialcyber #icssecurity #ics

"The U. S. National Security Agency NSA released on Wednesday the final set of guidance in its series on the pillars of DoD’s Zero Trust framework — a security model focused on data and services protection through the enforcement of dynamic trust policies." https://lnkd.in/gsN5Br5Q #ZeroTrust #Cybersecurity #NSA #DoD #Automation #Orchestration #LinkedIn #industrialcyber #icssecurity #ics

Is your OT/IoT security keeping pace with evolving threats & regulations? Nozomi Networks reveals key findings in their latest report: - Rising nation-state attacks with destructive goals - Increased regulatory pressure on CISOs - The need to bridge the OT & IT security gap Click to learn more and stay ahead of the curve! https://lnkd.in/gkRtxK_f #OTsecurity #IoTsecurity #Cybersecurity #IndustrialControlSystems #Regulations #CISOs #NozomiNetworks #industrialcyber #icssecurity #ics

CISA and FBI Warn of Critical OS Command Injection Vulnerabilities in Network Devices Attention network security professionals! Cybersecurity and Infrastructure Security Agency and Federal Bureau of Investigation (FBI) have just released a joint alert on critical OS command injection (OSCI) vulnerabilities affecting various network devices. This could allow attackers to remotely take control of your systems. Don't wait to patch these vulnerabilities! Click the link to learn more and stay ahead of the threats. https://lnkd.in/gwtcD9fS #CISA #FBI #OSCVulnerability #NetworkSecurity #CybersecurityAlert #industrialcyber #icssecurity #ics

National Security Agency Releases Final Guidance on Zero-Trust for the DoD: Automation & Orchestration Take Center Stage The NSA has issued its final guidelines on implementing a Zero Trust security framework for the Department of Defense. This long-awaited document emphasizes automation and orchestration as key components for an effective Zero Trust strategy. Is your organization ready to adopt Zero Trust? Click the link to learn more about the NSA's recommendations and ensure your network's security stays ahead of the curve. https://lnkd.in/gsN5Br5Q #ZeroTrust #Cybersecurity #NSA #DoD #Automation #Orchestration #LinkedIn #industrialcyber #icssecurity #ics