@ICS_Secure

Inventor of the Tofino Security, leading expert in the field of ICS and SCADA security and ISA Fellow

 Canada
Joined July 2009
  • Tweets992
  • Following238
  • Followers3K
42Media
Read @ICS_Secure's latest blog on Evolving Threats and Regulations in Software Supply Chain Security. Attacks are on the rise — Eric touches on topics he'll discuss at #S4x24, like software supply chain attacks definitions, #vulnerabilities, #SBOMs. adol.us/42Tifwl
2
3
5
249
Replying to @aDolus_Inc @ICS_Secure
I was in Brussels last week talking about this exact issue with Commission staff and ENISA experts. Glad that you're monitoring this, and always happy to hear your thoughts.
1
1
185
The EU Cyber Resilience Act took a big step toward enactment this week. Read our blog to get @ICS_Secure's commentary on the implications this legislation has for software supply chain security. #SBOM #vulnerabilitymanagement adol.us/3Rf2SZF
2
2
1
2
472
The Microsoft Digital Defense Report (#MDDR 2023) dropped today and we provided key research and analysis for the section on OT #vulnerabilities. Read how we used machine learning to analyze manufacturer and industry disclosures to identify CVEs in PLCs. adol.us/46eThYU

Microsoft Digital Defense Report: Behind the Scenes Creating OT Vulnerabilities

aDolus collaborated with Microsoft on vulnerability analysis and contributed to their Microsoft Digital Defense Report 2023 (MDDR 2023).

blog.adolus.com
1
4
1
6
655
Passionate about ICS incident response panel ⁦@SCADAhacker⁩ ⁦@RobertMLee⁩ ⁦@CSAsingapore⁩ #otcep | …person on right is making a point 😁
3
24
Very exciting to see @Microsoft open source their internal SBOM generation tool. Would love to hear what you think of it. devblogs.microsoft.com/engin…
3
82
9
274
aDolus Wins Global Infosec Award at #RSAC2022! We were delighted just to see Software Supply Chain Security as a category, never mind taking home the prize at #RSA.🏆 Thank you @CyberDefenseMag. adol.us/3mkiyvG

aDolus Wins Global Infosec Award at RSAC 2022

aDolus Wins Most Innovative Software Supply Chain Security in 10th Annual Global InfoSec Awards at RSAC 2022

info.adolus.com
3
1
5
Heads up: We see a lot of scanning against the #log4j vulnerability and decided to publish a blog post with some guidance: govcert.ch/blog/zero-day-exp… Please patch now!
Image showing how an attacker might exploit the vulnerability in log4j using a specially crafted User-agent.

ALT Image showing how an attacker might exploit the vulnerability in log4j using a specially crafted User-agent.

27
1,132
108
2,259
So proud of our CARES Act Risk/Analysis team who helped spot/publish this data science to help reduce elective loss of life.
CDC
@CDCgov18 Nov 2021
A new @CDCMMWR report shows that when COVID-19 cases increase and ICU beds fill up, excess deaths from all causes occur in the next few weeks. Vaccination and other prevention measures are key to preventing big increases in COVID-19 cases. Learn more: bit.ly/mm7046a5.
1
7
19
I'm talking ICS security future tomorrow at Ignite.
3
11
Join @ICS_Secure at IIoT World’s ICS Cybersecurity Day, October 6, 2021. Experts from around the world will share insights focused on ICS cybersecurity topics. Register at no cost by Sept 30, 2021: adol.us/3AuU08t #CybersecurityDay #IIoT @iiot_world
2
3
If your #cybersecurity is strong, you’re safe, right? Not if your suppliers have lax security. Eric Byres (@ICS_Secure) of @aDolus_Inc discusses why supply chain #cyberattacks are so dangerous. #infosec industrialcybersecuritypulse…
2
6
My ICS-Patch decision tree would rate this as scheduled or defer based on a reasonable ICS architecture #Hysteria linkedin.com/pulse/ics-patch… (Also, many asset owners don't know if they have QNX #SBOM, most QNX devices are #InsecureByDesign, & vendor unlikely supports patch today)

ICS-Patch: What To Patch When?

I've been doing my best to push back on the idea that applying all or even most security patches on a monthly or quarterly basis to an ICS makes sense as part of some 'cyber hygiene'. In most cases...

linkedin.com
ICS-CERT@ICSCERT17 Aug 2021
Replying to @ICSCERT
❗️ @CISAgov strongly encourages #criticalinfrastructure, #ICS owners and operators, and any other organization developing, maintaining, supporting, or using affected QNX-based systems to patch ASAP: go.usa.gov/xFwVV. #Cybersecurity #IoT #Software #OT
1
3
1
9
Securing the ICS Software Supply Chain, Solarwinds attack & Executive Order 14028 - Improving the Nation’s Cybersecurity, Don't miss Eric Byres presentation this Sept with Cyber Senate @ICS_Secure @CyberSenate #supplychain #cybersecurity #otsecurity bit.ly/CYSECLDFDR
1
2
New Blog from Eric Byres @ICS_Secure on the #Kaseya Supply Chain Attack on Small and Medium Sized Businesses - including recommendations on protecting your company from future #supplychainattacks. adol.us/3hJDYzx
4
1
2
Welcome Mark Weatherford to our Board of Directors! Mark is a celebrated #cybersecurity veteran - DHS 1st Dep U/S for cybersecurity, NERC CSO, and CSO for Colorado and California. He will provide strategic guidance on software #supplychain security. adol.us/2TYXT56
4
2
8
Unpacking #EO14028: Improving the Nation's #Cybersecurity - Pt. 3. This blog focuses on who will be impacted by the Executive Order. Spoiler alert - even if your company doesn’t sell to the US Government, you need to start preparing as if you do.. adol.us/3f7VixV
1
5
3
Y'all had enough of this ransomware stuff yet? 🤨😜
2
1
7
Join us and our partner @iDefend_ICS on May 4th at 1pm ET to learn how to use Software Bill of Materials #SBOM to reduce software supply chain risk in OT environments. Register here: industrialdefender.com/webin…

Invitation to aDolus and Industrial Defender Webinar on May 4, 2021

What’s Hiding in Your Software? How SBOMs Reduce Supply Chain Risk

1
2
Security: A new database for industrial incidents, ICS STRIVE, launched today from the editors of ISSSource.com. Find the latest incidents across the industrial sector. #scadasecurity #industrialcybersecurity bit.ly/3r9Ra3h
2
4
2
7
Load more