OT Security & Exposure Management Blog

Read the research presented by OTORIO Co-Founder and CTO, Yair Attar at S4*25 and try the methodology for yourself.

IoT is revolutionizing manufacturing by improving efficiency, enabling predictive maintenance, and enhancing smart operations. Discover its benefits, challenges, and best practices.

OTORIO discusses a recently unearthed critical vulnerability, CVE-2024-3094, residing within the XZ Utils package, a predominant compression utility used in various Linux distributions.

Explore the pros and cons of Intrusion Detection Systems (IDS) for OT security. Learn their benefits, challenges, and how they compare to advanced solutions like OTORIO Titan.

See how OTORIO and Cyberscope strengthened OT security for a global manufacturer, boosting visibility, resilience, and efficiency across sites.

IT/OT convergence boosts efficiency but introduces cybersecurity challenges. Explore its benefits, risks, and strategies for securing integrated systems.

CPS security protects OT environments by securing the integration of physical processes and digital control, ensuring safety and resilience.

In 2023, cybercrimes globally inflicted a staggering $12.5 billion in financial losses, with the manufacturing industry bearing the brunt—25% of all cyberattacks targeted this sector, as per IBM Security. As manufacturing evolves with Industry 4.0, incorporating technologies like AI and IoT into production, the importance of robust cybersecurity measures becomes paramount.

In today's fast-paced technological landscape, the security of operational technologies (OT) has never been more critical. Industries across all sectors face increasing cybersecurity threats that could disrupt critical infrastructure and lead to significant losses. This blog delves into the essence of industrial cybersecurity, exploring why it's pivotal in 2024 and beyond to protect the vital systems that drive our transportation, manufacturing, and energy sectors. Learn about the best standards in industrial cybersecurity, such as IEC 62443, NIST SP 800-82, and NERC CIP, and discover actionable insights that can fortify your organization against evolving cyber threats.

The Industrial Internet of Things (IIoT) revolutionizes how businesses operate, offering unprecedented interconnectivity between devices to enhance efficiency and data management. However, this integration of physical machinery with digital networks introduces significant cybersecurity challenges. This blog delves into the complexities of IIoT security, outlining the main risks such as insufficient encryption, outdated software, and the blending of IT and OT systems that increase vulnerability. Learn practical strategies for protecting your IIoT environment against cyber threats, ensuring that your operational technologies remain not only interconnected but also protected.

In the face of a rapidly evolving threat landscape, traditional vulnerability management proves inadequate, particularly in complex operational environments. This shift to exposure management offers a strategic advantage, enhancing return on investment from security controls and optimizing resource allocation. By focusing on the operational context of assets and integrating IT and OT systems, exposure management enables businesses to prioritize and address risks more effectively. Learn how this approach not only reduces the "vulnerability debt" but also leverages data-driven engines to improve efficiency and strengthen security postures across diverse infrastructures.

Traditional IT security methods are inadequate for the unique challenges of industrial control systems (ICS). Specialized ICS security practices are essential for safeguarding critical infrastructure from cyber threats, emphasizing safety, integrity, and compliance with regulations like the EU's Cyber Resilience Act. By adopting targeted strategies such as incident response, vulnerability management, and network segmentation, industries can enhance their resilience against potential breaches.

OTORIO discusses a recently unearthed critical vulnerability, CVE-2024-3094, residing within the XZ Utils package, a predominant compression utility used in various Linux distributions.

OTORIO discusses a recently unearthed critical vulnerability, CVE-2024-3094, residing within the XZ Utils package, a predominant compression utility used in various Linux distributions.

Explore the differences between passive and active discovery methods and how OTORIO's Safe Active Query solution can enhance asset visibility.

OTORIO researchers have shed light on the intricacies and emerging vulnerabilities in modern Physical Access Control Systems (PACS).

How to use multiple defense layers in an OT environment? OTORIO Field CTO, Matan Dobrushin, shares key insights from our research on implementing the DID model.

How to achieve OT security maturity by aligning risk management strategy and business objectives, including robust security policies and team training.

Cyber hygiene practices help safeguard operational environments in an era where OT is more digitally connected than ever before.

Discover how the Firewall Configuration Analyzer plugin can help you address security challenges and integrate natively with various IT, OT, and security systems.

Bazan group wasn't attacked, so why did the Iranian cyber gang Cyber Avengers falsely claim they breached the Israeli Oil & Gas company?

Discover why cybersecurity is important for the oil and gas industry and how Energy companies can build cyber resilience.

OTORIO enables electric utilities to move beyond NERC CIP to build robust OT security.

Explore SSH Tunneling in this informative article that explains what tunneling is and demonstrates simple ways to do it in several ways.

OTORIO research team shares DCS/SCADA risks and mitigations with their top 10 steps to improve security and secure industrial processes.

Malware doesn’t shut down plants, people do. Learning about the people behind the industrial cyber-attacks will help to prevent the next cyber disaster.

Interconnecting IoT and OT optimize efficiency, but the cybersecurity risks are high.

In a world where threats constantly arise and exposures are identified, organizations must have a clear view of their operational security posture and a feasible action plan to continuously improve it.

OTORIO's newly patented risk simulation model and attack graph analysis provide a unique approach to quantifying and managing risk.

Compliance requirements have done a lot to increase awareness and drive investment, but the question remains – Does compliance guarantee that effective security is in place?

Biden's new US cybersecurity strategy stresses the importance of working proactively and strategically to defend critical infrastructure.

Latest OTORIO research to be presented at S4x23 points to wireless IIoT vulnerabilities that provide a direct path to internal OT networks, enabling hackers to bypass common protection layers in operational and industrial networks.

OTORIO researchers uncovered two vulnerabilities affecting certain Sierra Wireless wireless IIoT devices.

Our Field CTO shares OT security insights for critical infrastructure entities to maintain operational resilience.

Which OT security risks do pulp and paper companies face, and how can extended asset visibility help address them?

Whether producing paper, boards, or tissue, pulp and paper industry machinery increases a manufacturer’s digital attack surface.

OTORIO's IEC 62443 certification highlights our commitment to internationally recognized cyber security standards and best practices.

Why German industrial manufacturers and critical infrastructure operators face greater OT security risks and regulatory compliance.

From asset visibility to proactive, contextual risk awareness and more, here are 5 essentials for a complete industrial OT security solution.

OTORIO's Research team reveals how the GhostSec hacking group compromised 55 Berghof PLC devices in Israel.

See why relying solely on an intrusion detection system (IDS) leaves gaps in your OT security, making industrial operations more vulnerable to attack.

How and why should you determine and quantify the business impact of an asset? See why building a systematic approach to quantifying an industrial asset's business impact is valuable.

Food producers and beverage makers have become some of the preferred targets of ransomware attackers. As a critical infrastructure industry, how can food and beverage manufacturers manage risk effectively for their OT security and converged networks?

Only by repeatedly performing this risk assessment loop can companies achieve business resilience, and do so using a limited amount of resources.

Many CISOs from leading industrial organizations feel like they are not receiving the best value from their existing cybersecurity solutions. Why do existing OT security paradigms fail to deliver on their promise? Here are the top five reasons...

Even our researchers at OTORIO were overwhelmed to discover nearly 70,000 ICSs IPs exposed to the internet in their recent research.

With criticality scores of 10 and 8.6, these vulnerabilities are easy to exploit and allow unauthenticated attackers to penetrate and take over industrial control systems.

Choosing the right security vendor for your company is a handful, especially in “insecure-by-design” environments like ICS/OT which require the highest level of expertise

We have a responsibility to share our experience and collaborate with the wider industrial cybersecurity community.

Read this Blog to learn why securing the industrial networks, that control the world’s physical ports, demands a different type of maritime cybersecurity approach.

OTORIO’s Pen-Testers discovered more than 20 vulnerabilities in the MBConnect remote access solution. Attackers can disrupt production by exploiting these vulnerabilities.

Attacks across all sectors are growing bolder, more frequent, and exponentially more expensive. A recent report found that ransomware attacks targeting the industry were second only to those targeting government in prevalence.

In today’s volatile cybersecurity climate, the only way to truly mitigate damage is to prevent it. The question is, how?

The Siemens pcs 7 software, DCS environment, is one of the most common DCS solutions. Learn about the new security hardening open-source tool.

This blog post gives an overview of how easy it is to perform cyberattacks on the oil and gas sector.

How to define industrial security systems testing criteria and choose an attack scenario tool.

As industrial systems (OT) continue to digitize, IT security teams should get to know the new OT environment and how it differs from IT.

In the advisory, OSIsoft reported a vulnerability that affects their PI System, a data management platform that accesses a broad range of core OT network assets in its sites.

The increased remote work triggered by COVID-19 caught industrial security teams off guard. To continue production without compromising cyber-security, follow our experts’ recommendations.

The newly-identified vulnerability lays in the implementation of the Profinet stack with implications for a variety of industrial verticals.

Iran has proven capabilities to launch cyber-attacks on ICS, and with the tension rising, industrial companies would be wise to be prepared.

DoS attacks are known for disrupting systems by flooding them with traffic, but sometimes that is not the only objective. Here is what can be done about it.