Cybersecurity

A recent threat research post by Mandiant Threat Intelligence highlights the increasing frequency of OT compromises by low sophistication threat actors. The majority of these compromises occur due to insecure OT systems exposed to the internet. According to Mandiant’s report, the compromises appear to be driven by threat actors who are motivated to achieve ideological, egotistical, or financial objectives by taking advantage of an ample supply of internet-connected OT systems.

Cyber insurance has been in the news a lot lately, especially insurers – some being attacked and subsequently paying millions, to others declaring they will no longer cover ransomware claims and subsequently being attacked.

Dragos has finally been able to publicly release its findings from a prior Advisory Alert on February 17, 2021 to customers informing them of the watering hole potentially targeting water utilities along with defensive guidance and indicators.

We all dread them; we all need them – security audits. They can take multiple forms, but without security audits we are unable to measure cybersecurity improvements and many deficiencies may never be brought to light. Security audits involve evaluating or analyzing people, processes, and technology surrounding the security aspects of an organization. Likewise, as organizational networks and cyber threats are constantly changing, security audits should be performed regularly to assess if current controls and processes sufficiently reduce risk against the ever-changing threat landscape.