Announcements

How to Launch a Threat Hunting Program | Webinar <REGISTER>

How to Accelerate XDR Outcomes: Bridging the Gap Between Network and Endpoint | Webinar <REGISTER>

Black Hat USA 2022 Attendee Report | Supply Chain & Cloud Security Risks Are Top of Mind | <READ IT NOW>

ICS/OT Security

The latest news and analysis on threats and attacks against operational technology (OT) environments, as well as the security tools, technologies, and strategies for protecting industrial control systems (ICS) and OT networks.

Amazon Pays $30.8M to Settle Ring Spying & Alexa Privacy Lawsuits

The global e-commerce company will pay millions of dollars in two separate lawsuits because of privacy and security violations, the FTC says.

The global e-commerce company will pay millions of dollars in two separate lawsuits because of privacy and security violations, the FTC says.

by Dark Reading Staff, Dark Reading

Biometric Bypass: BrutePrint Makes Short Work of Fingerprint Security

Bugs in the biometric protections on Android phones and iPhones allow the limit on the number of tries to unlock the devices with a fingerprint can be bypassed, allowing automated brute-force attacks.

Bugs in the biometric protections on Android phones and iPhones allow the limit on the number of tries to unlock the devices with a fingerprint can be bypassed, allowing automated brute-force attacks.

by Robert Lemos, Contributing Writer, Dark Reading

Yet Another Toyota Cloud Data Breach Jeopardizes Thousands of Customers

The newly found misconfigured cloud services are discovered just two weeks after an initial data breach affecting millions came to light.

The newly found misconfigured cloud services are discovered just two weeks after an initial data breach affecting millions came to light.

by Dark Reading Staff, Dark Reading

'Volt Typhoon' Breaks Fresh Ground for China-Backed Cyber Campaigns

This is the first incident where a threat actor from the country appears to be laying the groundwork for disruptive attacks in the future, researchers say.

This is the first incident where a threat actor from the country appears to be laying the groundwork for disruptive attacks in the future, researchers say.

by Jai Vijayan, Contributing Writer, Dark Reading

CosmicEnergy Malware Emerges, Capable of Electric Grid Shutdown

Russian code that could tamper with industrial machines and toggle RTUs on and off was floating around VirusTotal for years before being noticed. It raises new questions about the state of OT security.

Russian code that could tamper with industrial machines and toggle RTUs on and off was floating around VirusTotal for years before being noticed. It raises new questions about the state of OT security.

by Nate Nelson, Contributing Writer, Dark Reading

'Volt Typhoon' China-Backed APT Infiltrates US Critical Infrastructure Orgs

According to Microsoft and researchers, the state-sponsored threat actor could very well be setting up a contingency plan for disruptive attacks on the US in the wake of an armed conflict in the South China Sea.

According to Microsoft and researchers, the state-sponsored threat actor could very well be setting up a contingency plan for disruptive attacks on the US in the wake of an armed conflict in the South China Sea.

by Tara Seals, Managing Editor, News, Dark Reading

Honeywell Releases Cyber Insights to Better Identify Cybersecurity Threats and Vulnerabilities

The new software-led solution enables organizations to defend against cybersecurity threats in their operational technology (OT) environments.

The new software-led solution enables organizations to defend against cybersecurity threats in their operational technology (OT) environments.

Bridgestone CISO: Lessons From Ransomware Attack Include Acting, Not Thinking

A February 2022 attack knocked the giant tire maker's North American operations offline for several days.

A February 2022 attack knocked the giant tire maker's North American operations offline for several days.

by Jai Vijayan, Contributing Writer, Dark Reading

Houthi-Backed Spyware Effort Targets Yemen Aid Workers

Pro-Houthi OilAlpha uses spoofed Android apps to monitor victims across the Arab peninsula working to bring stability to Yemen.

Pro-Houthi OilAlpha uses spoofed Android apps to monitor victims across the Arab peninsula working to bring stability to Yemen.

by Dark Reading Staff, Dark Reading

Unpatched Wemo Smart Plug Bug Opens Countless Networks to Cyberattacks

Cyberattckers can easily exploit a command-injection bug in the popular device, but Belkin has no plans to address the security vulnerability.

Cyberattckers can easily exploit a command-injection bug in the popular device, but Belkin has no plans to address the security vulnerability.

by Tara Seals, Managing Editor, News, Dark Reading

Name That Toon: One by One

Feeling creative? Submit your caption and our panel of experts will reward the winner with a $25 Amazon gift card.

Feeling creative? Submit your caption and our panel of experts will reward the winner with a $25 Amazon gift card.

by John Klossner, Cartoonist

Severe RCE Bugs Open Thousands of Industrial IoT Devices to Cyberattack

Researchers found 11 vulnerabilities in products from three industrial cellular router vendors that attackers can exploit through various vectors, bypassing all security layers.

Researchers found 11 vulnerabilities in products from three industrial cellular router vendors that attackers can exploit through various vectors, bypassing all security layers.

by Elizabeth Montalbano, Contributor, Dark Reading

4 Big Mistakes to Avoid in OT Incident Response

What works in IT may not in an operational technology/industrial control systems environment where availability and safety of operations must be maintained.

What works in IT may not in an operational technology/industrial control systems environment where availability and safety of operations must be maintained.

by Debbie Gordon, Founder & CEO, Cloud Range

TSA Official: Feds Improved Cybersecurity Response Post-Colonial Pipeline

US Transportation Security Agency (TSA) administrator reflects on how the Colonial Pipeline incident has moved the needle in public-private cooperation.

US Transportation Security Agency (TSA) administrator reflects on how the Colonial Pipeline incident has moved the needle in public-private cooperation.

by Robert Lemos, Contributing Writer, Dark Reading

CISA Addresses 'Cyber Poor' Small Biz, Local Government

Relatively few organizations have the resources for security programs and security professionals, so the US cyber agency is putting programs in place to help them, while striving to understand the scope of the problem itself.

Relatively few organizations have the resources for security programs and security professionals, so the US cyber agency is putting programs in place to help them, while striving to understand the scope of the problem itself.

by Robert Lemos, Contributing Writer, Dark Reading