Industrial Cyber Security News
Stay up-to-date with Nozomi Networks on and
Industry Reactions to New Triton Attacks on Critical Infrastructure
First and foremost, it’s important to keep in mind that based on the information that is currently available, it does not appear that TRITON malware was deployed at this new facility. However, it’s not surprising to learn that FireEye has seen evidence of the Triton threat group at a new location.
30 years of the internet: How the World Wide Web is becoming dangerous territory
Tony Atkins, regional director of Northern Europe at Nozomi Networks, agrees that the rise of IoT will result in new threats for organisations. He tells IDG Connect: “The Proliferation of smart buildings will increase an organisation’s attack surface as they provide a number of new entry points into corporate networks.
Hackers target critical infrastructure facility using Triton framework -TEISS® : Cracking Cyber Security
little over a year after hackers used the Triton malware framework to target Schneider Electric SE’s Triconex industrial safety technology, they have used the malware framework to target yet another unnamed critical infrastructure facility, FireEye has revealed.
Study Highlights ‘Relentless’ Attacks On Critical Infrastructure
A Ponemon Institute report finds critical systems being taken offline by cyber-attacks, with security teams struggling to gain a clear picture of the IT systems they are trying to protect.
Industrial scale cyber risk
To be able to take full advantage of the benefits offered by connected industrial networks, operators must prioritise security and minimise the risks of cyber-attacks.
Critical flaw in Rockwell Automation’s ICS component gave hackers complete access
Tony Atkins, regional director, EMEA at Nozomi Networks, said that this is a clear case of customers requiring visibility into their industrial networks. Many organisations will have a difficult task in being able to accurately assess their exposure to vulnerability disclosures such as this.
Las 10 empresas que están revolucionando el sector de la energía
Michael Wilshire, presidente del comité de selección y jefe de estrategia en BloombergNEF, dijo: “Este año recibimos un número récord de candidatos de alta calidad para el programa New Energy Pioneers, de todo el mundo. Continuamos viendo una fuerte innovación en el uso de tecnologías digitales como AI, IoT y ciberseguridad que harán que nuestro sistema eléctrico y nuestros procesos industriales sean más eficientes, flexibles, limpios y seguros.
Nozomi se apoya en su mayorista Exclusive Networks para crecer en España
Según Vesku Turtia, director regional de Ventas para Iberia de Nozomi Networks, “la convergencia actual de TI/OT y el ecosistema digital cambiante han transformado los requisitos de seguridad. Ya no basta con proteger; es necesario detectar, monitorizar y mitigar los riesgos en cuestión de minutos. Con la innovación en el uso de la inteligencia artificial, Nozomi posee la plataforma más completa para asegurar los activos más críticos”.
Nozomi Networks sella su apuesta por el mercado ibérico y desgrana su estrategia de negocio | CyberSecurity News
Tras abrir oficina en España, Nozomi aspira a replicar su éxito internacional, como solución líder para asegurar la visibilidad y seguridad de la red OT.
Automation Has Increased Exposure To Cyber Attacks (Radio)
Edgard Capdevielle, CEO of Nozomi Networks, discusses cybersecurity for industrial control systems and critical infrastructure. Live from the Bloomberg New Energy Finance Summit at the Grand Hyatt in NYC. Hosted by Lisa Abramowicz and Paul Sweeney.
Nozomi Networks shares research and tools to help ICS community defend against cyber threats
Focused on helping defend the industrial systems that support everyday life, Nozomi Networks Labs will share its own research and collaborate with partners, peers, universities, government and institutional reseachers.
Norsk Hydro Attack Contained, New Website Live, Samples Analysed
In an updated post the cybersecurity company said it has now obtainedfour different LockerGoga samples that indicate “the ransomware is under active development”.
LockerGoga ransomware blamed for Norsk Hydro attack – impacts aluminium prices
Nozomi Networks Labs has carried out an analysis into the LockerGoga ransomware, which aims to explain how the malware works and how victims can tell they are infected.
Norsk Hydro recovers some systems following Lockergoga ransomware security breach
Nozomi Networks Labs explained: “The malware encrypts the files with the targeted extension and soon after drops the ransom note inside the filesystem, providing the user with the steps he/she must take in order to get the files back. It follows the classic approach present in most ransomware malware.”
Norsk Hydro Restoring Systems, But Not Paying Ransom
Nozomi has pointed out that the malware includes some anti-analysis features, such as detecting the presence of virtual machines and deleting itself to prevent researchers from collecting samples.
Nozomi Launches Research Lab
The goal behind the lab to provide the ICS cyber security community with the information, tools and guidance that can help reduce cyber threats to industrial and critical national infrastructure.
Industrial Cybersecurity Firm Nozomi Launches Research Department
While this is the formal launch of its research department, Nozomi has already conducted detailed analysis of some major threats targeting industrial control systems (ICS), including the GreyEnergy and Triton/Trisis malware families. The company has also created and released some tools that may be useful to defenders.
CYBERRISIKEN BEI KRITISCHEN NATIONALEN INFRASTRUKTUREN VERSTEHEN
Unternehmen müssen für unterschiedliche Schutzebenen sorgen. Das reicht vom Absichern des Netzwerks selbst bis dahin, es auf Anomalien zu überwachen, die Anzeichen für eine Cyberbedrohung sein könnten. Angriffe auf kritische Infrastrukturen / CNI nehmen zu, das ist ein Fakt. Aber sowohl der öffentliche wie der private Sektor nehmen die Bedrohungen sehr ernst und ergreifen aktiv Schritte für mehr Sicherheit und Widerstandsfähigkeit dieser Umgebungen.
NSA Releases Security Research Tool But Can You Trust It?
Suzanne Spaulding is an advisor to Nozomi Networks and a former Department of Homeland Security Under Secretary, she told me that she understands the mistrust but would certainly use Ghidra herself. “First, it’s incredibly useful for forensic threat analysts” she explains, continuing “second, it’s open source, so NSA would be taking a huge risk that anything malicious it might build in would be detected eventually.”
Reverse Engineering GreyEnergy Malware
It’s important for those defending critical and industrial infrastructure to share knowledge and stay up-to-date on malware tradecraft.