Actions Target Russian Govt. Botnet, Hydra Dark Market

Actions Target Russian Govt. Botnet, Hydra Dark Market

The U.S. Federal Bureau of Investigation (FBI) says it has disrupted a giant botnet built and operated by a Russian government intelligence unit known for launching destructive cyberattacks against energy infrastructure in ...
CISA Call with Critical Infrastructure Partners on Potential Russian Cyberattacks Against the U.S.

Russia’s Invasion of Ukraine and CISA/FBI’s New Era of Transparency

BLUF: Bottom Line Up FrontI want to start this post with the most important thing right up top:The CISA.gov/Shields-Up page starts with this statement.  PLEASE take it seriously, and escalate to your ...
TRITON Framework Leveraged at a Second Critical Infrastructure Facility

TRITON Framework Leveraged at a Second Critical Infrastructure Facility

Researchers have discovered that malicious actors leveraged the TRITON framework at a second critical infrastructure facility. In this particular attack, the threat actor maintained access to the target corporate networks for nearly ...
Triton, BlackEnergy, WannaCry – Has Your Behavior Changed?

Triton, BlackEnergy, WannaCry – Has Your Behavior Changed?

Hopefully the title of this blog has gotten your attention. In one of my prior blogs, ICS Cybersecurity: Visibility, Protective Controls, Continuous Monitoring – Wash, Rinse, Repeat, we talked about how the ...

USB Threats to Cybersecurity of Industrial Facilities

Industrial facilities cybersecurity is very critical for the national security of every state and comes once more into focus following the recent Honeywell’s Industrial USB Threat Report. With increasing pressure to limit ...
SEC-T 0x0B: Steve Miller - Reversing the TriStation Network Protocol

Reverse Engineering Proprietary ICS Protocols

One of the highlights at this year's SEC-T conference in Stockholm was Steve Miller's talk titled 'Reversing the TriStation Network Protocol'. In this talk Steve covered his quest to better understand the ...
Triton Malware Exploited Flaw

Triton Malware Exploited Zero-Day Flaw in Schneider Electric Safety Controllers

Schneider Electric has confirmed that a recently uncovered malware program that was used to attack industrial infrastructure exploited a vulnerability in its Triconex safety controllers. The malware, dubbed Triton, was uncovered in ...
Security Boulevard