Новый отчет от World Economic Forum: Cyber Resilience in the Electricity Ecosystem: Playbook for Boards and Cybersecurity Officers

https://www.weforum.org/reports/cyber-resilience-in-the-electricity-ecosystem-playbook-for-boards-and-cybersecurity-officers

у каждого батискафа есть своя максимальная глубина погружения)

Мне одному кажется, что незаметно произошла подмена источника информации. раньше это были опросы участников вэф, а сейчас это документы  "команды форума".

Commissioner Starks on Barring Huawei and ZTE from USF | Federal Communications Commission
https://www.fcc.gov/document/commissioner-starks-barring-huawei-and-zte-usf

https://www.us-cert.gov/ics/advisories/icsa-20-182-02

IMPROPER RESTRICTION OF XML EXTERNAL ENTITY REFERENCE CWE-611
The vulnerability could allow a malicious attacker to send a file on the computer running the product to the outside.

UNCONTROLLED RESOURCE CONSUMPTION CWE-400
The vulnerability could allow a malicious attacker to cause the product to enter a denial-of-service condition.

It does not apply anymore. Very very very old.  Can't be used for competitive analysis most of technologies changed, lot of ones disappeared and others had lot of evolution.

You can see by this statement Fortinet-Nozomi that this is really a very old doc. The integration between Fortinet and Nozomi is the same as Nozomi has with Cisco ASA, Cisco Firepower and Palo Alto Networks.

Oil and Gas Pipeline
Industrial Security Reference Design

Cisco-AVEVA-Schneider Electric

Long read )

Рекомендации от US DHS CISA по провидейсвию Tor каналам, MITRE ATT&CK детализацией: Defending Against Malicious Cyber Activity Originating from Tor

https://www.us-cert.gov/ncas/alerts/aa20-183a

TUV Rheinland and Ponemon Institute just published a study regarding the state of cybersecurity of industrial plants.

Operational Technology (OT) is the main target for cyberattacks on industrial plants. These are devices and systems that control or monitor industrial processes - such as motors, pumps or valves. Successful cyberattacks on OT systems cause particularly high levels of damage to the companies affected.

The following results show how much cyberattacks endanger OT systems:

- More than half of the respondents (57 percent) say that their companies expect attacks on OT systems.
- Almost half (48 percent) are convinced that cyber threats pose a greater risk to OT systems than to the IT environment.
- Almost two thirds (63 percent) of those surveyed stated that security measures for IT and OT systems are not coordinated in their companies.
- For almost half of the respondents (47 percent), cyber threats to OT systems have increased over the past year. These include attacks such phishing, social engineering and extortion ("ransomware").

Source: PR Newswire

Новый эпизод в плэйлисте подкастов @BEERISAC: CPS/ICS Security Podcast Playlist: "June - ICS Security Month In Review" из подкаста Unsolicited Response Podcast

bit.ly/beerisac

Взорвалась центрифуга в Натанзе, "Military attack". Сиквел? 🤔

https://twitter.com/ISCResearch/status/1278721405438382080?s=19

не дай бог спиноф.

Во всех этих центрифугах и их магистралях давление ниже атмосферного. Взрыв там в принципе невозможен, для этого и понижают давление. В данном же случае, скорее всего, просто подшипник ушатался. Такое бывает

А уже обсуждали?
Не совсем АСУ ТП, но тем не менее прецедент с реальным сроком.
http://blag-gs.amr.sudrf.ru/modules.php?name=press_dep&op=1&did=2881&fbclid=IwAR3_VWhSR_ZaTTC9RlWSIidcAslboRgrx5d4yIFaLVHja-WUXNhZGutFx2M#