Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

bitsight

180,000 ICS/OT Devices and Counting: The Unforgivable Exposure

Sep 25, 2025 By Pedro Umbelino In BitSight
Remember when ICS malware was “rare”? Last year we got two new families built for one thing: disruption. FrostyGoop and Fuxnet are not Mirai with a wrench taped on or your typical DDoS botnet. They were built to target and disable devices that use Meter-bus and Modbus protocols, inflicting maximum damage. If you still believe that “our PLCs aren’t on the Internet,” then this is your nudge to actually go and check.
Read Post
levelblue

The Cost of Inaction: Securing the Energy Grid Before It's Too Late

Sep 18, 2025 By Kory Daniels In LevelBlue
Delivering safe and reliable power around the clock is a huge challenge. A task made even more difficult by the sharp rise in cyberattacks on the energy and utilities sector. Recent research from Trustwave SpiderLabs found that cyber threats against the sector have surged by 80% year-over-year, costing organizations nearly half a million dollars more per breach than the cross-industry average of $4.8 million.
Read Post
tripwire

Windows 10 Retirement: A Reminder for Managing Legacy Industrial Control Systems (ICS)

Sep 16, 2025 By Katrina Thompson In Tripwire
On October 14th, Windows 10 will be retired, and Microsoft will no longer push patches or updates to systems on that operating system. It is crucial for companies to make the jump to Windows 11 now—or risk being exposed to critical vulnerabilities. This is especially important for Industrial Control Systems (ICS), which often run on legacy systems.
Read Post
Trustwave

The Cost of Inaction: Securing the Energy Grid Before It's Too Late

Sep 9, 2025 By Kory Daniels In Trustwave
Delivering safe and reliable power around the clock is a huge challenge. A task made even more difficult by the sharp rise in cyberattacks on the energy and utilities sector. Recent research from Trustwave SpiderLabs found that cyber threats against the sector have surged by 80% year-over-year, costing organizations nearly half a million dollars more per breach than the cross-industry average of $4.8 million.
Read Post
xona systems

OT Endpoint Risks and How to Eliminate Them

Sep 2, 2025 By Cody Jaster In Xona
Cyberattacks on operational technology systems increased 87% in 2024 (Dragos 2024), with endpoint access emerging as THE top attack vector for OT and industrial control systems (ICS). This means the same connections vital to maintaining your critical systems, whether a vendor connecting remotely via VPN or an employee logging into a local workstation, represent a potential entry point into your environment.
Read Post
obrela

Bridging the Gap Between IT and OT Cybersecurity in the Middle East's Critical Infrastructure

Aug 29, 2025 By Notis Iliopoulos In Obrela
As the Middle East rapidly accelerates its digital transformation across sectors like energy, oil and gas, and manufacturing, the traditional gap between IT and OT cyber security is closing. Industrial operators now rely on interconnected systems to maximize efficiency, but this increasing convergence introduces new vulnerabilities that cannot be addressed in isolation.
Read Post
tripwire

OT Security in Ports: Lessons from the Coast Guard's Latest Warning

Jul 3, 2025 By Kirsten Doyle In Tripwire
The cranes that move goods in and out of America's busiest ports (some of the most essential components of our national logistics chain) are under growing scrutiny. In a newly issued MARSEC Directive 105-5, the U.S. Coast Guard has raised red flags about the cybersecurity risks that come with ship-to-shore (STS) cranes manufactured in China. These cranes, mostly produced by state-owned enterprises like Shanghai Zhenhua Heavy Industries (ZPMC), make up nearly 80% of the STS equipment at U.S. ports.
Read Post
Featured Post
Keeping the Lights on: Cybersecurity Automation in Critical National Infrastructure

Keeping the Lights on: Cybersecurity Automation in Critical National Infrastructure

Jun 27, 2025 By Chris Jacob, VP, Global Field Operations In ThreatQuotient
Ask anyone who was scheduled to fly in or out of London Heathrow airport in the UK on March 20 and 21 2025, and they'll tell you that disruption to critical national infrastructure (CNI) is no joke. A fire at a local electricity substation resulted in thousands of journey disruptions and cancellations as one of the world's busiest airports was closed and incoming planes were diverted to alternative locations. The knock-on effect of the closure continued for days, and lost tourism revenue for the UK.
Read Post

Copyright © 2026 OpsMatters™. All rights reserved.