The nature of IIoT devices and infrastructure makes them high-value cyber targets. This is because they are relatively easy to compromise and are often connected to internal networks with high-value content with links to other networks. Moreover, IIoT devices rarely have direct user interaction, and this unattended nature means that many types of device compromise are likely to go unnoticed and undetected – particularly when the malware does not disrupt the device’s primary functionality. Here are a dozen reasons why intelligent IIoT devices are attractive targets for hackers.
In a Federal Information Security Modernization Act of 2014 report filed with Congress last week, the White House says the number of cybersecurity incidents recorded at US federal agencies in 2019 went down by 8 percent.
Federal Energy Regulatory Commission (FERC) Chairman Neil Chatterjee announced the selection of Mittal Desai to serve as the Commission’s Chief Information Officer, effective June 7, 2020. Desai currently is a Senior Advisor and Risk Analyst in FERC’s Office of the Executive Director.
The Consumer Brands Association announced the launch of the Critical Infrastructure Supply Chain Council (CISCC), which consists of 35 trade association to address long- and short-term supply chain challenges and weaknesses due to the coronavirus pandemic.
State utility commissions can strengthen the cybersecurity of U.S. critical infrastructure – particularly the electric grid – by advancing several relevant recommendations of the Cyberspace Solarium Commission report.
Due to increased cybersecurity threats, President Donald Trump signed an executive order banning U.S. power grid entities from buying and installing electrical equipment that has been manufactured outside the U.S.
The National Governors Association (NGA) selected seven states — Colorado, Michigan, Mississippi, New York, Oregon, Pennsylvania and Tennessee — to participate in a new project focused on implementing best practices on advancing statewide cybersecurity.
To detect and contain breaches faster, it’s become increasingly important to go beyond the typical malware detection capabilities and invest in the ability to detect and react to lateral movement within the environment. Lateral movement is a core piece of an attacker’s strategy once he’s gained a foothold within the environment. What three steps can you take to help stop lateral movement focus on security measures that minimize dwell time?
RSS
