The U.S. cyber defense agency warned that machine learning and large language model deployments can introduce new attack surfaces across critical infrastructure sectors in a document setting out principles for safely integrating AI into operational technology.
The manufacturing industry is leading digital transformation. However, the rise of interconnected IT/OT (Information Technology and Operational Technology) environments has also created significant vulnerabilities. In Zscaler's latest report, Manufacturing Cyber Resilience, they explore the critical gaps threatening...
Traditional network security tools can’t keep up with the complex threats facing today’s connected factories. Zscaler’s Zero Trust Purdue Model reimagines the classic framework for industrial networks, delivering modern strategies to secure Operational Technology (OT) and Industrial Control Systems (ICS) without...
U.S. federal authorities are warning that several high-severity vulnerabilities discovered in Mirion Medical Co. inventory tracking software used by nuclear medicine departments could allow attackers to modify program executables and gain access to sensitive information.
Check your readiness now with Honeywell’s OT Compliance Checklist. OT cybersecurity mandates are expanding in scope and urgency as regulators respond to heightened threats across critical infrastructure. Requirements like NIS2, CIRCIA, OTCC and SOCI are raising expectations for visibility, governance, and...
The NIS 2 Directive marks the EU’s most significant expansion of cybersecurity requirements to date, raising the bar for risk management, OT protection, and incident reporting across essential and important entities. As organizations modernize interconnected industrial environments, NIS 2 introduces new obligations...
Across the past two quarters, cyber-physical attacks accelerated in both volume and sophistication. Organizations reported a dramatic increase in ransomware extortion, new worm variants spreading via removable media, and credential-harvesting malware entering OT environments through IT networks. At the same time,...
The Food and Drug Administration is warning that Life 2000 - an at-home ventilation system built by medical device maker Baxter - has been permanently recalled due to a cyber issue that could allow individuals with physical access to tamper with the gear's life support settings.
Newly revised "model contract language" guidance from the Health Sector Coordinating Council provides an updated reference document to help healthcare providers and medical device makers better articulate and evaluate cyber considerations when negotiating purchases of products and services.
Patching is still the mortal weaknesses of operational technology environments, warns cybersecurity firm Trellix in a report assessing incidents in critical infrastructure settings during the middle two quarters of this year.
AI can improve anomaly detection in power systems by combining model precision with human expertise. But Yaniv Harel of the cyber center at Tel Aviv University warns that attackers exploit can AI's rapid evolution and target unsecured training data, creating new risks for critical infrastructure.
Third-party risks are creating new challenges for critical infrastructure providers, and that could lead to new regulations for securing cyber-physical systems, said Sean Tufts, field CTO at Claroty. Claroty's recent survey shows that cyber professionals are facing an uncertain regulatory landscape.
For those charged with the cyber defense of OT and industrial control systems, one challenge towers above all others: Data. Specifically, its scarcity. Most operators simply don't capture it, in stark contrast with their IT counterparts.
Featuring some of the most prominent voices in Indian operational technology cybersecurity, the steering committee for the inaugural OTsec India Summit shares insights on a range of topics including OT threats, regulatory imperatives and the latest innovations.
Another cybersecurity vendor is planning to dive into the still waters of an initial public offering. Cyber exposure management firm Armis dipped its toe in the market Wednesday, announcing a pre-IPO funding round of $435 million that boosted the company's valuation to $6.1 billion.
Our website uses cookies. Cookies enable us to provide the best experience possible and help us understand how visitors use our website. By browsing govinfosecurity.com, you agree to our use of cookies.
