Topic
All articles on critical infrastructure.
Cybersecurity
NSA, CISA, FBI, DOE and EPA warn of actors targeting internet-exposed Siemens S7 PLCs with AI-generated scripts disguised as OT monitoring tools. What the advisory says and what to do.
Regulations
NIS2 protects the digital, the CER directive protects the physical. They are two sides of the same European design for critical infrastructure, and NIS2 entities often fall under the CER too.
Cybersecurity
Ports and ships are complex, under-protected OT ecosystems: automated cranes, onboard systems, terminals and intermodal logistics. A map of risks and obligations for a critical sector that is often overlooked.
Cybersecurity
In oil & gas, cybersecurity is intertwined with process safety: a cyber incident can become a physical one. Risks, safety systems and strategies for refineries, pipelines and terminals.
Cybersecurity
In the chemical industry a cyber incident can cause the release of hazardous substances, explosions and harm to people. Safety/security convergence is no abstraction: the Triton attack on Safety Instrumented Systems proved the last physical line of defense can be compromised.
Cybersecurity
Italian food & beverage has a wide, poorly protected OT attack surface: dosing lines, digital HACCP systems, connected cold rooms for traceability. An OT attack here can compromise food safety and brand reputation.
Cybersecurity
Local utilities (water operators, power distributors, waste treatment plants) are NIS2-regulated entities with security resources close to zero. SCADA systems 15 to 20 years old connected to the internet, run by a single technician: how to set up OT security from this starting point.
Cybersecurity
Railway networks are becoming more connected and more exposed. An analysis of systems at risk, the regulatory framework and defence strategies for an often overlooked critical infrastructure.
Cybersecurity
Sandworm is known for shutting off the lights in Ukraine and launching NotPetya. But its techniques are being replicated against European manufacturing, often as collateral damage. How an APT attack on an industrial OT network works and why SMEs are within range too.
Cybersecurity
Triton/TRISIS is the first documented malware designed to disable Safety Instrumented Systems — the systems that prevent physical industrial accidents. Its impact goes beyond the targeted plant: it changes the perimeter of what must be monitored.
Cybersecurity
Water and wastewater treatment plants are critical infrastructures with often obsolete OT systems and exposed remote connections. A sector that industrial cybersecurity still struggles to reach.
Cybersecurity
The blackout that brought Spain and Portugal to a standstill shows how fragile energy grids are and why visibility into OT assets is decisive.
Risk Management
Industrial cyber risk is not measured like IT risk. A practical guide for CISOs: consequences, plant context, and managing OT risk.
