ICS vulnerability insights, advisory analysis, and practical OT security guidance.
32 ICS security advisories published this week (6 critical, 7 high severity). Here are the ones that matter.
What Article 21 of the NIS2 Directive actually requires from essential entities on vulnerability handling, and what that looks like in practice for OT/ICS operators.
21 ICS security advisories published this week (4 critical, 4 high severity, 1 actively exploited). Here are the ones that matter.
Power management systems are among the most security-relevant OT systems on a vessel, yet they're often overlooked in cybersecurity assessments. Here's what maritime engineers need to know about PMS vulnerabilities and maritime PLC security.
86 ICS security advisories published this week (16 critical, 15 high severity, 3 actively exploited). Here are the ones that matter.
38 ICS security advisories published this week (1 critical, 7 high severity). Here are the ones that matter.
IACS Unified Requirements E26 and E27 apply to newbuild ships contracted on or after 1 July 2024. Here's what they require from shipyards, equipment suppliers, and ship owners — and what vulnerability monitoring has to do with it.
42 ICS security advisories published this week (3 critical, 16 high severity). Here are the ones that matter.
30 ICS security advisories published this week (6 critical, 3 high severity). Here are the ones that matter.
IMO Resolution MSC-FAL.1/Circ.3 required cyber risk management in SMS systems from January 2021. Five years on, most operators still treat it as a checkbox. Here's what it actually means for managing ICS vulnerabilities on your vessels.
33 ICS security advisories published this week (3 critical, 1 high severity). Here are the ones that matter.
Siemens publishes its own security advisories through ProductCERT before CISA republishes them. If you run Siemens equipment, here's what the difference means for your alert timing.
IT patch Tuesday doesn't work in OT. Here's why ICS patch management is different, what a realistic process looks like, and how to track it without adding headcount.
CIP-007 and CIP-010 require documented vulnerability management processes. Here's what auditors look for and how to build an audit trail without adding headcount.
CISA publishes hundreds of ICS advisories per year. Most teams either ignore them or drown in them. There's a better way.