ICS cyber security blog guest post: Outage at a Baltavia substation: case study from Idaho National Lab on cyberattacks on power systems March 13, 2021 – icscybersec Today’s post will be relatively short. I recently came across a case study of CCE (Consequence-driven Cyber-informed Engineering) by Idaho National Lab, which describes an attack on a […]

Guest post from the ICS cyber security blog: SANS ICS Security Summit 2021 06 March 2021 – icscybersec Every spring, SANS organizes a major ICS-themed event, usually 6-8 days long, traditionally in Florida. This year, due to COViD-19, this was an unconventional event and like the other SANS Security Summits 2021, the ICS Security Summit

Guest post from the ICS cyber security blog: Cyber attacks against India’s critical infrastructure March 04, 2021 – icscybersec I’ve previously written about the cyber attack on the Kudankulam Nuclear Power Plant (KKNPP) in India, but in the early hours of March 1, the threat intelligence provider Recorded Future released this report detailing their analysis

Guest post from the ICS cyber security blog: Snort rules to control protocol 104 27 February 2021 – icscybersec Protocol 104 (more formally known as IEC 60870-5-104) is a communication protocol primarily used in the European power system domain, and Snort is the basis for most traditional network or host-IDS/IPS solutions. I recently found a

A guest post from the ICS cyber security blog: Guest Post II: A post that has no cybersecurity relevance. Or maybe it does. 20 February 2021 – icscybersec One of the most serious operational security events in recent times, the January 8th rupture of the European electricity system into two parts, has prompted another post

Guest post from the ICS cyber security blog: More ICS security incidents: cyber attack on a small Florida town’s water system Wednesday, February 20, 2018: 13 February 2021 – icscybersec A Florida cybercrime attack has hit a Florida water utility in a recent incident, while ransomware attacks have also hit packaging materials company WestRock and

Guest post from the ICS cyber security blog: Another DARPA exercise on Plum Island 06 February 2021 – icscybersec Last year, I wrote about how the US Armed Forces, led by the US Armed Forces, have for years been conducting exercises to test the effects of cyber attacks on the US power system and possible

Guest post from the ICS cyber security blog: Lessons from the SolarWinds incident in Hungary 30 January 2021 – icscybersec It’s been more than a month since we have been aware of the true gravity of the SolarWinds incident. Unfortunately, this time does not seem to have been enough for domestic critical infrastructure companies and

Guest post from the ICS cyber security blog: Ransomware attacks against production management systems – A TrendMicro survey 23 January 2021 – icscybersec Ransomware attacks against various companies using production management systems have proliferated at an unprecedented rate in 2020. Here on the blog alone, I have written about XX such attacks, and according to

ICS cyber security blog guest post: Guest post I: The relationship between two unrelated cases 16 January 2021 – icscybersec Shortly after the launch of the blog a little over 5 years ago, the question arose: should I also give the opportunity to guest post? I liked the idea, yet, for various reasons, I had