Critical Infrastructure Security, Incident Response, Network Security, TDR

ICS-CERT: Manufacturing sees greater share of 2015 critical infrastructure attacks

January 19, 2016

The U.S. Department of Homeland Security's IndustrialControl Systems Cybersecurity Emergency Response Team (ICS-CERT) detected arise in reported cyberattacks against critical manufacturing organizations in2015, according a newICS-CERT report.

During ICS-CERT's previous fiscal year, which ended in September 2015,there were 295 reported cyberattack incidents involving U.S. criticalinfrastructure. Of those, 97 incidents, or 33 percent, affected the criticalmanufacturing sector. By contrast, critical manufacturing represented only 27percent of cyberattacks in FY 2014 (65 incidents). The report ascribed thisincrease to a pervasive spear phishing campaign in 2015 that focused primarilyon manufacturers.

The report also stated many of the 295 reported attacks exploited “insufficientlyarchitected networks such as ICS networks being directly connected to the Internetor to corporate networks.” Spear phishing accounted for 37 percent of the totalincidents.

An In-Depth Guide to Network Security

Get essential knowledge and practical strategies to fortify your network security.

Learn More

Bradley Barth

As director of multimedia content strategy at CyberRisk Alliance, Bradley Barth develops content for online conferences, webcasts, podcasts video/multimedia projects — often serving as moderator or host. For nearly six years, he wrote and reported for SC Media as deputy editor and, before that, senior reporter. He was previously a program executive with the tech-focused PR firm Voxus. Past journalistic experience includes stints as business editor at Executive Technology, a staff writer at New York Sportscene and a freelance journalist covering travel and entertainment. In his spare time, Bradley also writes screenplays.

Supply chain

US moves to prohibit Chinese, Russian vehicle tech

SC StaffJanuary 15, 2025

Aside from banning the inclusion of Vehicle Connectivity System software and hardware, as well as Automated Driving System software developed by Chinese and Russian vendors in vehicles sold in the U.S., both China- and Russia-linked automobile manufacturers have also been barred from selling cars with such tech within the country.

Flags of Russia and Ukraine. No war. Peace. Relationship between Ukraine and Russia.

Critical Infrastructure Security

Pro-Ukraine hackers target major Russian state procurement platform

SC StaffJanuary 15, 2025

Despite Yellow Drift's claims that the electronic trading operator had lost 550 TB of data as a result of the intrusion, Roseltorg emphasized the complete recovery of all impacted data and infrastructure while it still works on restoring its trading systems' operations.

Cloud Security

Redefining third-party governance and identity for the cloud-first era

Bill BrennerJanuary 13, 2025

Organizations are struggling to enforce security policies outside of traditional office environments, particularly concerning identity and access management, which is further complicated by the use of unsecured home networks and personal devices.

Get daily email updates

SC Media's daily must-read of the most current and pressing daily news