OT Security

Infrastructure breaches show the importance of locking down IoT systems

Ian FergusonFebruary 24, 2021

A few years ago hackers entered an unnamed casino’s data network by exploiting IoT devices in a lobby fish tank. Today’s columnist, Ian Ferguson of Lynx Software Technologies, offers advice on how to lock down IoT systems.

Today’s columnist, Liviu Arsene of Bitdefender, offers some actionable advice to security pros for locking down networks in the work-from-home era.

Security Architecture

Here’s how security pros can lock down their remote networks

Liviu ArseneFebruary 19, 2021

Today’s columnist, Liviu Arsene of Bitdefender, offers some actionable advice to security pros for locking down networks in the work-from-home era.

“North Korea – Flag” The federal government issued an advisory that the Kimsuky APT group tasked by the North Korean regime with a global intelligence-gathering mission. Photo by Roman Harak is licensed under CC BY-SA 2.0

Breach

South Korea claims North Koreans hacked Pfizer for COVID-19 vaccine data

Steve ZurierFebruary 16, 2021

The report comes after attempts late last year by suspected North Korean hackers to steal data from at least nine healthcare companies, such as Johnson & Johnson, Novavax and AstraZeneca.

A wastewater treatment plant outside of Baltimore, Md. Today’s columnist, Andrea Carcano of Nozomi Networks, points out that the attempted attack at the water facility February 5 in Oldsmar, Fla., underscores the vulnerability of similar plants around the country. Carcano offers five takeaways security teams can put to work.

Compliance Management

Five takeaways from the Oldsmar water facility attack

Andrea CarcanoFebruary 15, 2021

Today’s columnist, Andrea Carcano of Nozomi Networks, points out that the attempted attack at the water facility February 5 in Oldsmar, Fla., underscores the vulnerability of similar plants around the country. Carcano offers five takeaways security teams can put to work.

Town of Internet of Things in Hangzhou, China. Forescout found new vulnerabilities in a widely used industrial TCP/IP stack as part of their latest research. (Raysonho @ Open Grid Scheduler/Grid Engine/CC0 1.0)

Security Architecture

Many TCP/IP stacks, used across bevy of IoT devices, found vulnerable to decades old attack

Joe UchillFebruary 10, 2021

Some of the tested stacks, which are also used in industrial equipment and other networked products, have yet to be patched.

Vulnerabilities in ICS products disclosed during the second half of 2020 are most prevalent in the manufacturing, energy, water and wastewater, and commercial facilities industries – all of which are designated as critical infrastructure sectors. (Siemens)

Critical Infrastructure Security

Industrial control system vulnerabilities up 25 percent in 2020

Steve ZurierFebruary 5, 2021

A new research report released Thursday by Claroty said that vendors and industrial organizations must come to grips with these trends and act upon bug reports because the attacks and vulnerabilities will not abate.

A people-counting system made by a FootfallCam competitor tallies patrons at a Silver Spring, MD., supermarket. (Joe Uchill/SC Media)

Security Architecture

A people counter that didn’t add up, and the dangers of the COVID IoT boom

Joe UchillFebruary 5, 2021

COVID-19 created an immediate demand for social distancing, which in turn created demand for devices to ensure compliance. Security concerns and testing, however, might fall to the wayside.

CES attendees move through the show floor during the International Consumer Electronics Show, showcasing the latest in consumer technology and devices. A study finds a correlation between how companies handle security of IoT devices and other aspects of their IT infrastructure. (Justin Sullivan/Getty Images)

Security Architecture

Firms with exposed IoT have a higher concentration of other security problems

Joe UchillJanuary 29, 2021

What does that correlation mean for chief information security officers? SC Media spoke to Kelly White, RiskRecon founder and CEO, to find out.

OT Security

Infrastructure breaches show the importance of locking down IoT systems

Here’s how security pros can lock down their remote networks

South Korea claims North Koreans hacked Pfizer for COVID-19 vaccine data

Five takeaways from the Oldsmar water facility attack

Many TCP/IP stacks, used across bevy of IoT devices, found vulnerable to decades old attack

Industrial control system vulnerabilities up 25 percent in 2020

A people counter that didn’t add up, and the dangers of the COVID IoT boom

Firms with exposed IoT have a higher concentration of other security problems

Fast Five

Selected by the SC Media Editorial team every Tuesday.