Critical Infrastructure
Critical Infrastructure | News, how-tos, features, reviews, and videos
Critical VxWorks flaws expose millions of devices to hacking
Researchers have found 11 serious vulnerabilities in VxWorks, the world's most popular real-time operating system (RTOS) that powers over 2 billion devices including enterprise network firewalls and routers, industrial controllers and...
Why getting election security right for 2020 matters
The U.S. is moving at glacial speed to secure election systems against possible interference by foreign adversaries. We're not even close to ready, and that could call contests into question.
Secure elections scorecard: Grading the candidate and Congressional proposals
After 2016's election security debacle, there's a push to secure America's electronic voting infrastructure. Some of the proposals are good. Others fall short. CSO investigates.
What is an ISAC or ISAO? How these cyber threat information sharing organizations improve security
Information Sharing and Analysis Organizations were created to make cyber threat data and best practices more accessible than with Information Sharing and Analysis Centers, but results are mixed.
What is the CISA? How the new federal agency protects critical infrastructure from cyber threats
The Cybersecurity and Infrastructure Security Agency (CISA) is a new federal agency, created to protect the nation's critical infrastructure.
6 questions to ask before buying an ICS / OT security monitoring tool
Shopping for an ICS / OT monitoring solution? Here's what you need to know about evaluating the vendors.
Mike Assante’s lasting impact on critical infrastructure security (and me)
Thanks to Mike Assante, critical infrastructure stakeholders have a better understanding of and ability to respond to cybersecurity risks.
Why the Huawei ban is bad for security
Many believe the ban on exporting U.S. technology to Chinese company Huawei could hurt American tech vendors and do little to mitigate supply chain threats.
What is GPS spoofing? And how you can defend against it
The U.S. Global Positioning System, part of a network of global navigation satellite systems (GNSS), is vulnerable to attacks that could disrupt many industries. Here's how it works and what you can do to mitigate its risk.
Why your business continuity and disaster recovery plans should account for EMP attacks and GMD events
A new executive order from the White House directs critical infrastructure to prepare for electromagnetic pulse (EMP) attacks, but geomagnetic disturbance (GMD) events caused by solar flares are a greater threat to the enterprise.
Group behind TRITON industrial sabotage malware made more victims
The attackers stayed undetected on the victim's network for more than a year and sought out operational technology networks.
Congress steers clear of industrial control systems cybersecurity
Industry resistance to regulation, complexity of securing ICS systems are roadblocks to passage of critical infrastructure cybersecurity legislation.
City of Raleigh implements ICS monitoring tool for water treatment plants
Securing operational technology systems is a different game than IT, but the City of Raleigh has deployed a CSO50 award-winning network monitoring solution that gives them greater visibility into its PLCs.
New CISA director outlines top 5 priorities for protecting U.S. critical infrastructure
CISA’s Christopher Krebs has a two-year plan for his new cybersecurity agency, with China, supply chain and 5G as top priorities.
The cybersecurity legislation agenda: 5 areas to watch
The 116th Congress is only a few months old, but far-reaching cybersecurity bills to protect infrastructure and the supply chain, ensure election integrity, and build a security workforce are now being considered. Here’s the list.
Why America is not prepared for a Stuxnet-like cyber attack on the energy grid
The U.S. energy grid continues to be vulnerable to Aurora-like attacks that could cause blackouts lasting a year or more.
Fear and loathing defending ICS security at DoE's CyberForce Competition
Defending critical infrastructure from determined attackers is not an easy task, CSO reporter J.M. Porup learned competing in the Department of Energy's CyberForce Competition 2018, a cyber security training initiative.
What is physical security? How to keep your facilities and devices safe from on-site attackers
Securing premises and devices from physical attacks can be just as challenging as defending against cyber threats. Automation and AI are increasingly used to shore up defenses.
-
White Paper
-
White Paper
-
White Paper
-
White Paper
-
eBook
Sponsored
Sponsored Links