Topic

cybersecurity (Page 3)

All articles on cybersecurity.

Automated warehouse with AS/RS systems, vertical racking and AGVs on the floor

Cybersecurity

OT cybersecurity in logistics and automated warehouses: heterogeneous systems and high turnover

Modern automated warehouses run complex OT networks: a WMS wired to the automation, heterogeneous PLCs from many vendors, AGVs and mixed protocols. High turnover and frequent vendor work break segmentation, and downtime hits the supply chain instantly.

6 min read

Incident response team handling an incident in an industrial OT environment

Cybersecurity

Incident response in OT environments: the critical differences from IT

IT incident response playbooks do not work in OT. Isolating a compromised system can halt production; powering off a device can cause physical damage. How to build OT IR that actually works.

4 min read

Legacy industrial control panel with dated HMI and PLC in an Italian manufacturing plant

Cybersecurity

OT Systems That Cannot Be Updated: Compensating Controls and Risk Reduction

PLCs with 2008 firmware, HMIs running embedded Windows XP, systems that cannot be touched by contract: the reality of Italian plants. How to manage risk when patching is not an option.

5 min read

Reconstructing an industrial OT network topology from passive traffic monitoring with a PLC SCADA HMI dependency map

Cybersecurity

OT Network Topology: How to Reconstruct It When No Documentation Exists

OT network topology often lives only in a technician's head, or in a 2014 diagram that was never updated. Rebuilding it from scratch with passive traffic monitoring: why it is necessary and how it is done in practice.

6 min read

Four-level chart representing OT security maturity, from blind to operational, with icons for assets, vulnerabilities and detection

Cybersecurity

OT Security Maturity Model: From Zero Visibility to Advanced Detection

A practical four-level framework to assess OT security maturity and build a concrete roadmap. Each level has clear prerequisites, measurable goals and a defined next step.

6 min read

Integration diagram between OT monitoring sensors and a SIEM platform with a SOC, showing normalized data flows and correlation of IT and OT events

Cybersecurity

Integrating OT Monitoring with Existing SIEM and SOC: Data, Formats and Added Value

Many companies already run a SIEM or a managed SOC, but these systems are blind to OT. How to feed OT monitoring events into the SOC, which formats to use and which alerts to escalate.

6 min read

SOC with OT network monitoring sensors and industrial analysis dashboard

Cybersecurity

Building a SOC for OT Environments: Requirements, Tools, and Operational Metrics

An IT SOC cannot see OT environments. Building monitoring capabilities for industrial networks requires different sensors, different skills, and playbooks specific to OT protocols and threats.

4 min read

Vulnerability management dashboard for OT systems with contextualized scoring

Cybersecurity

Vulnerability Management in OT: Why Traditional Patching Does Not Work

In OT environments, traditional patch management is often impossible. Legacy systems, certifications to maintain, very rare maintenance windows: how to build a VM program that actually works.

4 min read

Industrial network map with indicators of compromise and lateral movement from IT to OT

Cybersecurity

Sandworm and Manufacturing: State APTs Do Not Target Only Large Infrastructure

Sandworm is known for shutting off the lights in Ukraine and launching NotPetya. But its techniques are being replicated against European manufacturing, often as collateral damage. How an APT attack on an industrial OT network works and why SMEs are within range too.

5 min read

SCADA historian server in an industrial server room with connections between the corporate IT network and the OT process network

Cybersecurity

The SCADA Historian as a Lateral Attack Vector from IT to OT

Industrial process historians collect data from PLCs and expose it to business systems. This makes them a natural bridge between IT and OT, and a prime vector for lateral movement.

6 min read

Industrial OT network with unauthorized devices connected to switches and PLCs in a manufacturing plant

Cybersecurity

Shadow Devices in OT Networks: The Assets Nobody Knows They Have

Maintenance laptops left connected, 4G modems installed by vendors, uncatalogued switches: shadow devices in OT networks are more common than you think and represent concrete blind spots for security.

5 min read

Supply chain attack diagram against industrial OT environments

Cybersecurity

Supply Chain Attacks in OT: The Vector That Bypasses the Physical Perimeter

Supply chain attacks are among the hardest to detect and prevent. In industrial OT, the supplier chain is often long, poorly monitored, and holds privileged access to control systems.

3 min read