Blogs

Is the WaterISAC Helping the Water Industry? – The Illinois Water Hack Raises Serious Questions

Per the WaterISAC portal, the WaterISAC (Information Sharing and Analysis Center) is a community of water sector professionals who share a common purpose: to protect public health and the environment. The WaterISAC provides email notifications about threats and any incidents demanding immediate attention.

More on Stuxnet and a New SCADA Security Blog

This popped up in my email box this morning. It's a note from Eric Byres at Tofino. Eric is a well-known security expert and a sometime contributor to Control. "With announcement on Tuesday of the Microsoft patch for the Stuxnet vulnerability, we have updated our recommendations for addressing this critical...

We Knew It Was Only a Matter of Time

Coming to work on a Monday and finding an email outlining the report of a major cyber security breach affecting an important supplier and its customers is never a good way to start the week. But that's what happened this morning.

Observations about the Siemens PLC vulnerability

Thursday July 15 a disclosure was made about the Siemens SIMATIC PLC WINCC cyber vulnerability. Arguably, it is the first malware in the wild targeted specifically at industrial control systems. The following issues concern me:- Siemens SIMATIC PLCs are used throughout the industrial (more than just critical) and DOD infrastructures globally.- According...