Joe Saunders’ Post

A consortium in the US has come together to address the growing concerns surrounding cybersecurity threats to embedded devices. The EMB3D cybersecurity threat model, developed through a collaborative effort by MITRE, Niyo Little Thunder Pearson, Red Balloon Security, and Narf Industries, aims to provide a comprehensive understanding of these threats and the necessary security mechanisms for mitigation. Various organizations from sectors such as energy, water, manufacturing, aerospace, health, automotive, as well as researchers and threat tool vendors, have tested the threat model and provided valuable feedback. EMB3D builds upon existing models like Common Weakness Enumeration, MITRE ATT&CK, and Common Vulnerabilities and Exposures, focusing specifically on embedded devices. #electricalengineering #electronics #embedded #embeddedsystems #electrical #computerchips Follow us on LinkedIn to get daily news: HardwareBee - Electronic News and Vendor Directory

⚡️ Electric utilities across the globe face increasing regulatory mandates around cybersecurity. Read this white paper to learn how an OT continuous monitoring platform secures and improves the operational reliability of power generation, transmission and distribution systems: https://hubs.ly/Q02s9W360 #cybersecurity #OT #utilities

🚨 Security Alert: Rockwell ControlLogix 1756 Devices Exposed! 🚨 Claroty’s Team82 has uncovered a critical vulnerability in Rockwell Automation's ControlLogix 1756 PACs, posing significant risks to industrial control systems. This flaw could allow unauthorized access, leading to operational disruption, data manipulation, IP theft, and safety hazards. Technical Details of the Vulnerability 🔧 Mitigation Steps: Update Firmware: Apply the latest patches from Rockwell Automation. Network Segmentation: Isolate control systems from broader network access. Access Controls: Implement strict access controls and use multi-factor authentication. Monitoring: Deploy tools to detect unusual activity. Training: Educate your team on cybersecurity best practices. Ensuring the security of ICS environments is essential to protect operations, assets, and lives. https://lnkd.in/gTneh_cX #CyberSecurity #IndustrialSecurity #ICS #Automation #RockwellAutomation #Claroty #ControlLogix #SafetyFirst #TechNews #Innovation #Industry40 #SMIITCyberai 🔒✨ Stay safe and secure! ✨🔒

⚡️ Electric utilities around the globe are facing increasing regulatory mandates around cybersecurity. In this white paper, we share use cases for how OT continuous monitoring platforms secure and improve the operational reliability of power generation, transmission and distribution systems. Download the white paper 👉 https://ow.ly/otLQ50SXO3P #cybersecurity #OT #utilities Nozomi Networks Netpoleon India Vineeth Vasu Puneeth Shrimali Kandalam Ugandhar Ayush Sharma Kishor Mahadik

Protecting critical production networks has never been more essential. As digital and operational technology converge, manufacturing and utilities face new cyber risks that impact uptime, worker safety, data security, and supply chains. Ready to secure your OT environment for continuous, safe, and resilient operations? https://okt.to/S0L9yC #OTSecurity #CyberProtection #Manufacturing #Utilities #Fujitsu

How Can We Protect Factory Equipment from Cyber Attacks? In recent years, there has been a global increase in cyber attacks targeting factory equipment and OT systems. To safeguard factories from such risks, Omron has outlined its future direction for enhancing OT security and the security of PLC products. This has been featured in an article by MONOist, a well-known media for manufacturing. The article provides an easy-to-understand introduction to the current state of security in production sites and Omron's approach and direction for the security of PLCs, which play a crucial role in factory automation. ●Article（in Japanese） https://lnkd.in/ggGvExvj #Manufacturing #OTSecurity #PLC #CyberAttack #PR #Omron #ICS

𝐈𝐧𝐝𝐮𝐬𝐭𝐫𝐢𝐚𝐥 𝐧𝐞𝐭𝐰𝐨𝐫𝐤𝐬 are rapidly evolving, and along with it comes the challenge of visibility and monitoring. Our latest page details how Profitap’s ICS/OT monitoring solutions bring packet-level visibility to industrial environments. Discover how our solutions help you: ⦿ Mitigate cyber threats with fault-tolerant data access ⦿ Simplify network complexity through traffic aggregation ⦿ Ensure real-time data processing without interruptions ⦿ Capture low-level errors and impairments for accurate diagnostics, even in the field From Industrial TAPs to Network Packet Brokers, we’ve got the technology to optimize visibility into your network and ensure optimal performance and security monitoring. Check out the link in the comments to learn more! #NetworkMonitoring #IndustrialSolutions #ot #industrialnetwork #manufacturing #ICS

Protecting critical production networks has never been more essential. As digital and operational technology converge, manufacturing and utilities face new cyber risks that impact uptime, worker safety, data security, and supply chains. Ready to secure your OT environment for continuous, safe, and resilient operations? https://okt.to/kxD2XN #OTSecurity #CyberProtection #Manufacturing #Utilities #Fujitsu

A vulnerability in Rockwell Automation ControlLogix 1756 devices, discovered by Claroty’s Team82, lets attackers bypass the trusted slot security feature. This flaw (CVE-2024-6242, CVSSv3 score: 8.4) could allow unauthorized commands to reach the PLC CPU. Rockwell has issued a fix, and users should update their devices promptly. Cybersecurity and Infrastructure Security Agency has also provided guidance for mitigation. Some older models need upgrading to newer versions to secure against this issue. "An attacker would require network access to the device in order to attack this vulnerability. A successful exploit would allow an attacker to bypass the security restriction and send elevated commands to the PLC CPU." - Sharon Brizinov. Credit to Sharon Brizinov, Director of Research at Claroty's Team82, for the detailed blog post and to your team for identifying the vulnerability. Kudos to Anna Ribeiro for the informative post on Industrial Cyber News. Industrial Cyber News: https://lnkd.in/gztgwMfc Claroty's blog: https://lnkd.in/d2wfeQ-S Rockwell's post: https://lnkd.in/ddxfH5DY CISA guidelines: https://lnkd.in/d8q-8kVd CVE details by NIST: https://lnkd.in/dRDynzrJ CVE details by Claroty: https://lnkd.in/dKPtFEY7 #Claroty #Team82 #Rockwell #IndustrialCyber #PLC #ControlLogix #CISA #CVE #NIST

Protecting critical production networks has never been more essential. As digital and operational technology converge, manufacturing and utilities face new cyber risks that impact uptime, worker safety, data security, and supply chains. Ready to secure your OT environment for continuous, safe, and resilient operations? https://okt.to/l4Gh0x #OTSecurity #CyberProtection #Manufacturing #Utilities #Fujitsu