Daniel Shugrue

🧊 What happens when a refrigeration controller becomes a target path? Claroty's #Team82 researchers uncovered 23 vulnerabilities, including 21 high-severity issues, in Copeland XWEB Pro controllers that could ultimately enable remote code execution and manipulation of connected refrigeration systems. This illustrates how swiftly vulnerabilities in #OT and cyber-physical systems can transition from the digital realm to real-world outcomes. 🔎 Read the research blog: https://gag.gl/YKfaK2

197

3 Comments

🏭 Automated pen tests are useful, but they won’t stop a pump from being flipped. A recent article celebrates automated penetration testing for continuous risk coverage. That’s fine for your office network. But what about your factory floor? What about a PLC, HMI, or SCADA system where a single misfire means physical damage or loss of life? Here’s the truth: 👉 Automated tools can scan, identify and document vulnerabilities, but they cannot emulate an adversary who moves from IT to OT, changes control logic, bypasses safety interlocks, and disappears before your alarms fire. 👉 In OT, the threat is operational, not just digital. Your defenses must work when the attacker shifts from keyboard to control room. That’s where PhishCloud Inc. OT Red Team Assessments come in. 💥 Real-world adversary simulations across IT and OT. 💥 Tests of detection, response and recovery, not just scanning. 💥 Consequence-based testing: What happens when production stops? If your next “security test” is just another automated scan or low-cost pen test, then you’re playing defense with one hand tied behind your back. Demand more. Test for survival. Learn more, or schedule your OT Red Team Assessment here: https://lnkd.in/eyixkgiC #OTSecurity #RedTeam #CyberResilience #IndustrialCybersecurity #PhishCloud #ProtectTheClick #DefendTheCore https://lnkd.in/e4n4kvk5

2

2 Comments

🎙️ On the Claroty Nexus Podcast, former Commonwealth of Pennsylvania CISO and current Black Kite CSO Bob Maley discusses the resource challenges facing not only critical infrastructure asset owners and operators, but also how those challenges are impacting #RiskManagement efforts in critical industries. 🎧 Listen to the full episode here: https://gag.gl/QHiOYD

3

💡 Key takeaways from Red Helix's Cyber in Focus podcast with Centripetal's Christopher Handscomb on the challenges of implementing cyber threat intelligence today: 1️⃣ Cost & access – Individual CTI feeds are expensive. Even if you can license them, scaling coverage quickly becomes cost-prohibitive. 2️⃣ Correlation & clarity – How do you compare, validate, and reconcile conflicting intelligence from multiple providers? 3️⃣ Storage & operationalization – Where do you store volumes of data that far exceed what a 100+ person team could process daily—and more importantly, how do you turn it into actionable controls that actually prevent threats from entering the network? CTI isn’t just about collecting intelligence. It’s about making it usable, scalable, and operational. 🚨 Spoiler alert, answers found here: https://lnkd.in/dqW7JbQ3 #CTI #cyberthreatintelligence #managedsecurityservices Thanks to the Red Helix team Tom Exelby and Rob Pocock

6

3 Comments

U.S. manufacturers are under nonstop attack—and it’s not just an IT problem. One stolen credential can jump from a remote login to plant-wide disruption, halting production and triggering cascading supply chain impact. That’s why “more training” and “more tools” isn’t enough. The missing control is identity at the moment of action. iVALT shrinks the blast radius by binding every employee, vendor, machine, API, and automated process to real-time, PKI-backed cryptographic identity—stopping impersonation, lateral movement, and blind trust across OT + IT. If a credential gets stolen, the plant shouldn’t fall.

4