Elektrine lite

← Feed

Secure ICS OT :mastodon:

Secure_ICS_OT@infosec.exchange

<p>Unsolicited posts from an ICS/OT Professional with both GICSP and ISA 62443 Expert. GIAC Advisory and ISA member.</p><p><a href="https://infosec.exchange/tags/ICS" class="mention hashtag" rel="tag">#<span>ICS</span></a> <a href="https://infosec.exchange/tags/OT" class="mention hashtag" rel="tag">#<span>OT</span></a> <a href="https://infosec.exchange/tags/GICSP" class="mention hashtag" rel="tag">#<span>GICSP</span></a> <a href="https://infosec.exchange/tags/IEC62443" class="mention hashtag" rel="tag">#<span>IEC62443</span></a></p>

Posts

  • View post

    Australia Health services should pursue legal or criminal action against Sam Altman and OpenAI.

  • View post

  • View post

    I&#39;m not sure why anyone still uses Adobe Acrobat. Just saying.

  • View post

    Have you remembered to thank AI today? You&#39;re not going to survive the AI apocalypse if you forget to thank the AI. /s

  • View post

    Restoring from backups isn&#39;t necessarily going to be a free pass in the ICS/OT. Even restoring from a golden backup in a critical environment, any engineer worth their mustard is going to insist on functional testing prior to putting their license on the line. Just saying.

  • View post

    Look at this fucking awesomeness! https://www.cisa.gov/resources-tools/services/malcolm

  • View post

    You can&#39;t do effective ICS/OT security from behind a desk. You have to put on some steel toes and leave the office. Visit operations. Walk down the plant(s). Get to know managers, operators and the various trades. Put eyes on the situation.

  • View post

    Look at this shit people post on LinkedIn! This is f&#39;n horrible!

  • View post

    This landed in my YouTube feed: https://youtu.be/hVmbWMS3W4I?si=Q1S1VTTu0AothnTh

  • View post

    Teams is the worst communications medium in the field for me. I can&#39;t handle poor LTE coverage inside of buildings. Messages can get out of order and it will just spontaneously reorganize messages. SMS is still superior.

  • View post

    The problem with vendor work is they bring their personal &quot;solution&quot;. You then end up with a patch work of various &quot;solutions&quot; that creates more surface area and more stuff to manage.

  • View post

    So back in the day I had to defend having a router segregating the ICS/OT from the IT network. Some time later the IT department accidentally exposed the routers WAN to the internet. I discovered this because I was able to access it without using their VPN first.

  • View post

  • View post

  • View post

    Once again Just because you can Doesn&#39;t mean you should

  • View post

    One of the biggest threats to ICS/OT. &quot;IT/OT convergence&quot; IYKYK

  • View post

  • View post

    Microsoft in the ICS/OT:

  • View post

    You need to educate yourself on ICS/OT security. Before someone that is not educated on ICS/OT security takes you in the wrong fucking direction.

  • View post

  • View post

  • View post

    Wasn&#39;t long ago IT and Cisco was trying to sell me on VXLAN. Most definitely don&#39;t need VXLAN in my environment. I&#39;m not even sure the corporate needs VXLAN. VXLAN is for datacenters.

  • View post

  • View post

  • View post

  • View post

    Planning your work week in ICS/OT:

  • View post

    Visiting the guys on site:

  • View post

    If you don&#39;t know about virustotal, you should totally check it out. Great tool for scanning files. Just don&#39;t be stupid and upload sensitive configuration files or documents. https://www.virustotal.com/gui/home/upload

  • View post

    If you&#39;re an ICS/OT engineer you should learn how to configure firewalls. It is easier than configuring a PLC so you should pick it up pretty quick.

  • View post