Control Loop: The OT Cybersecurity Podcast 2.22.23
Ep 19 | 2.22.23

Adding some color to incident response.

Show Notes

Dragos has released its ICS/OT Cybersecurity Year in Review for 2022, finding a rise in ransomware attacks targeting industrial organizations. Forescout discloses two vulnerabilities affecting the Unity line of Schneider Electric’s Modicon programmable logic controllers. Dozens of vulnerabilities in industrial internet-of-things (IIoT) devices. Tim Starks from the Washington Post's Cybersecurity 202. discusses the upcoming White House National Cyber Strategy and its possible effects on critical infrastructure. In the Learning Lab, Dragos’ VP Product & Industry Market Strategy Mark Urban begins his two-part discussion about the importance of incident response planning with Vern McCandlish, who is a Principal Industrial Incident Responder at Dragos.

Control Loop News Brief.

Dragos releases its ICS/OT Cybersecurity Year in Review for 2022.

2022 ICS/OT Cybersecurity Year in Review (Dragos)

Russian-linked malware was close to putting U.S. electric, gas facilities ‘offline’ last year (Politico)

Schneider PLC vulnerabilities.

Deep Lateral Movement in OT Networks: When Is a Perimeter Not a Perimeter? (Forescout)

The return of ICEFALL: Two critical bugs revealed in Schneider Electric tech (The Record)

Wireless IIoT devices at risk from vulnerabilities.

Industrial Wireless IoT - The direct path to your Level 0 (Otorio)

Control Loop Interview.

The interview is with Tim Starks from the Washington Post's Cybersecurity 202 discussing the upcoming White House National Cyber Strategy and its possible effects on critical infrastructure.

Control Loop Learning Lab.

In Part 1 of 2, Dragos’ VP Product & Industry Market Strategy Mark Urban speaks with Vern McCandlish, Principal Industrial Incident Responder at Dragos, about the importance of incident response planning. 

Industrial Cyber Threat Intel & Collective Intelligence links:

Control Loop OT Cybersecurity Briefing.

A companion monthly newsletter is available through free subscription and on the CyberWire's website.