Bug Bounties: Bringing Hackers and Manufacturers Together

Athira Nair • December 4, 2024

Lennert Wouters, a researcher at KU Leuven University in Belgium, has spent the past eight years studying embedded security, analyzing the vulnerabilities of everyday devices and commercial products. He shares his greatest hacks and insights on hardware security industry trends.

Culture

World Wide Work: Landing a Cybersecurity Career Overseas

Cybersecurity

16 Zero-Days Uncovered in Fuji Electric Monitoring Software

Report: Over 100M Americans Rely on Vulnerable Water Systems

Latest

EU Nations That Missed NIS2 Deadline Put On Notice

Akshaya Asokan • November 29, 2024

The European Commission on Thursday opened infringement procedures against 23 EU member states that missed a mid-October deadline for implementing the NIS2 Directive, as well 24 EU members that missed a Critical Entities Resilience Directive deadline.

CyberEdBoard

CyberEdBoard Profiles in Leadership: Melina Scotto Mastin

Anna Delaney • November 20, 2024

Melina Scotto Mastin, an accomplished CISO and CyberEdBoard member, shared how her journey from network engineering to CISO shaped her leadership style. She emphasized collaborative cybersecurity approaches, advocating for “shift-left” practices that integrate security early in projects.

Culture

Let's Give Thanks for How Far We've Come - and Forge Ahead!

Brandy Harris • November 20, 2024

Over the past few decades, cybersecurity has evolved from a niche concern into a global priority, creating a vast and dynamic career field. While we celebrate the journey, let's also focus on how today's cybersecurity professionals will shape the future.

Culture

CyberEdBoard Profiles in Leadership: Patty Ryan

Anna Delaney • November 12, 2024

Patty Ryan, CISO at QuidelOrtho, didn’t begin her career in cybersecurity, but her commitment to transparency and trust has helped her bridge that gap. Faced with unexpected challenges, she relied on her strengths in communication to lead her team through complex shifts in the organization.

Cybersecurity

IT as OT's Shield: Visibility Matters in Converged Defense

Prajeet Nair • November 4, 2024

As OT systems become more interconnected, traditional air gaps disappear, creating new risks, said Joseph Carson, chief security scientist and advisory CISO at Delinea. The convergence of IT and OT environments requires a stronger focus on protecting digital identities and access controls.

GovWare

Busting the Air Gap Myth: OT Security's Blind Spot

Prajeet Nair • November 4, 2024

Organizations mistakenly believe their operational technology systems are air-gapped and immune to cyberthreats. Dawn Cappelli, director of OT-CERT at Dragos, discusses why these assumptions are dangerous security gaps and why organizations need to rethink their approach to OT security.

Cybersecurity

HardPwn 2024: A Researcher's Passion for Hacking IoT Devices

Athira Nair • November 1, 2024

Dennis Giese, a security researcher and engineer, built his first computer at around age 8 using spare parts. Years later, he hacked his first robotic vacuum cleaner. Giese reflects on his journey as a researcher and ethical hacker during HardPwn, a hardware hackathon hosted by Hardwear.io in Amsterdam.

Cybersecurity

Quick Wins vs. Long-Term: A New Approach to OT Security Risk

Prajeet Nair • November 1, 2024

A "road map to resilience" approach helps organizations balance immediate, low-cost security improvements with complex, long-term risk reduction initiatives in industrial control systems, said Mex Martinot, vice president and global head of industrial cybersecurity at Siemens Energy.

IoT/IIoT Device Management

Cybersecurity Pulse Report: Unlock OT Security Strategies

Dan Verton • October 31, 2024

ISMG's Cybersecurity Pulse Report: ManuSec USA 2024 Edition is an essential resource for senior cybersecurity leaders and marketers navigating the complex landscape of operational technology security in manufacturing. This exclusive report distills critical insights from 61 industry pioneers.

Culture

Career Advice: Cybersecurity Means Business

Brandy Harris • October 30, 2024

With cybersecurity now embedded across all industries and functions, the importance of aligning security measures with business objectives has never been greater. Here’s why being business savvy is crucial in cybersecurity - and how you can cultivate it to become a more effective professional.

Cybersecurity

Critical Infrastructure Struggles With Legacy OT Security

Geetha Nandikotkur • October 28, 2024

As OT becomes increasingly connected to the internet, critical infrastructure operators must rethink their approach to cybersecurity while managing legacy systems that were not designed with security in mind, said John Lee, managing director, Global Resilience Federation Asia-Pacific.

GovWare

Building Cyber Resilience Across OT, IT and IoT Environments

Geetha Nandikotkur • October 28, 2024

Andre Shori, CISO for APAC governance at Schneider Electric, shares how aligning OT and IT under a unified cybersecurity framework is key to resilience. Our goal is to embed security across the product life cycle, he said, while highlighting the company's commitment to protecting customer assets.