universeodon.com is part of the decentralized social network powered by Mastodon.
Be one with the #fediverse. Join millions of humans building, creating, and collaborating on Mastodon Social Network. Supports 1000 character posts.

Administered by:

Server stats:

3.4K
active users

Learn more

#ot

7 posts5 participants2 posts today
Replied to hubertf

Details 2/n

Nachdem es zunächst so schien als seie nur GridWatch vom benachbarten Stromnetzbetreiber betroffen, hat nun auch ein Kraftwerk Verdacht geschöpft und hat die kompromittierte Schaltzentrale für die PLCs und OT vom Internet getrennt. Doch HexSwarm war vorbereitet: Ein Totmannschalter sorgte für die automatische Abschaltung – erste Instabilitäten im Stromnetz sind bereits spürbar.

Replied to hubertf

Details 1/n

"Die berüchtigte Hackergruppe HexSwarm plant den ultimativen Sabotageakt: ein koordinierter Angriff auf die Stromversorgung von CyberCity. Mehrere Kraftwerke wurden bereits infiltriert – getarnt als harmlose Wartungstools haben sie Schadprogramme in die Systeme eingenistet.

Compliance is often seen as the black sheep of security, ¡but it doesn't need to be!

Discover how OTSPM has changed the game for our customers, reducing their workload, offering actionable insights, and making the process engaging and fun!

Stay tuned for more details on Safetybits Seamless Compliance next week!

#Compliance #OT #OTSPM #DigitalTransformation #Industry
safetybits.io/blog/why-hate-co

Safety Bits · Why do People Hate Compliance? (And why They Shouldn’t)Compliance is often seen as a hassle. Implementing each security standard your company needs to comply with requires too much effort and provides limited benefits to daily operations.

📒 MeriTalk, in partnership with Claroty, surveyed 100 Federal security administrators and managers overseeing #OT in Federal civilian and Department of Defense (#DoD) organizations. This report examines the state of Federal OT security, identifies critical strategy gaps, and offers recommendations to strengthen resilience.

Download the report for more insights and learn how #Federal agencies are enhancing operational readiness in the face of a heightened threat landscape: meritalk.com/study/guardians-o

www.meritalk.comGuardians of Government: The State of Federal OT SecurityMeriTalk, in partnership with Claroty, surveyed 100 Federal security administrators and managers overseeing OT in Federal civilian and Department of Defense (DoD) organizations. This report examines the state of Federal OT security, identifies critical strategy gaps, and offers recommendations to strengthen resilience.

🗣️ The Latest Buzz About #OTsecurity

Our cyber adversaries are not stopping; nor are we when it comes to protecting #CriticalInfrastructure. We help you keep your fingers on the pulse of the OT cyber world.

And for the right solutions, download the Industrial Cyber 2025 Buyers Guide. industrialcyber.co/download/in

Find us here: blueridgenetworks.com/

#CyberCloak #RiskManagement #AssetManagement #NetworkSecurity #NetworkProtection #ICS #IT #OT#NetworkSegementation #SecureRemoteAccess

🗣️ The Latest Buzz About #OTsecurity

Our cyber adversaries are not stopping; nor are we when it comes to protecting #CriticalInfrastructure. We help you keep your fingers on the pulse of the OT cyber world.

And for the right solutions, download the Industrial Cyber 2025 Buyers Guide. industrialcyber.co/download/in

Find us here: blueridgenetworks.com/

#CyberCloak #RiskManagement #AssetManagement #NetworkSecurity #NetworkProtection #ICS #IT #OT#NetworkSegementation #SecureRemoteAccess

Release notes for v25.03.1 of Malcolm, a powerful, easily deployable network traffic analysis tool suite for network security monitoring

This has been a busy month for Malcolm! I pushed hard to get v25.03.0 out earlier this month, as it contained pretty much just the Keycloak integration one of our partners (and major funding sources) was waiting for. Rather than wait until April for the other stuff that would have gone into the regular end-of-the-month release, I decided to pull those items into this smaller release just a week and a half after the last one.

Malcolm v25.03.1 contains a few enhancements, bug fixes, and several component version updates, including one that addresses a CVE that may affect Hedgehog Linux Kiosk mode and Malcolm's API container.

NOTE: If you have not already upgraded to v25.03.0, read the notes for v25.02.0 and v25.03.0 and follow the Read Before Upgrading instructions on those releases.

Changes in this release

  • ✨ Features and enhancements
    • Incorporate new S7comm device identification log, s7comm_known_devices.log (#622)
    • Display current PCAP, Zeek, and Suricata capture results in Hedgehog Linux Kiosk mode (#566)
    • Keycloak authentication: configurable group or role membership restrictions for login (#633) (see Requiring user groups and realm roles)
    • Mark newly-discovered and uninventoried devices in logs during NetBox enrichment (#573)
    • Added "Apply recommended system tweaks automatically without asking for confirmation?" question to install.py to allow the user to accept changes to sysctl.conf, grub kernel parameters, etc., without having to answer "yes" to each one.
  • ✅ Component version updates
  • 🐛 Bug fixes
    • Fix install.py error when answering yes to "Pull Malcolm images?" with podman (#604)
    • Order of user-provided tags from PCAP upload interface not preserved (#624)
  • 📄 Configuration changes (in environment variables in ./config/) for Malcolm and in control_vars.conf for Hedgehog Linux
  • 🧹 Code and project maintenance
    • Ensure Malcolm's NetBox configuration Python scripts are baked into the image in addition to bind-mounting them in docker-compose.yml at runtime.

Malcolm is a powerful, easily deployable network 🖧 traffic analysis tool suite for network security monitoring 🕵🏻‍♀️.

Malcolm operates as a cluster of containers 📦, isolated sandboxes which each serve a dedicated function of the system. This makes Malcolm deployable with frameworks like Docker 🐋, Podman 🦭, and Kubernetes ⎈. Check out the Quick Start guide for examples on how to get up and running.

Alternatively, dedicated official ISO installer images 💿 for Malcolm and Hedgehog Linux 🦔 can be downloaded from Malcolm's releases page on GitHub. Due to limits on individual files in GitHub releases, these ISO files have been split 🪓 into 2GB chunks and can be reassembled with scripts provided for both Bash 🐧 (release_cleaver.sh) and PowerShell 🪟 (release_cleaver.ps1). See Downloading Malcolm - Installer ISOs for instructions.

As always, join us on the Malcolm discussions board 💬 to engage with the community, or pop some corn 🍿 and watch a video 📼.

🚀 Wir sind auf der #HM25! Besuchen Sie uns z. B. im 𝗜𝗻𝗱𝘂𝘀𝘁𝗿𝗶𝗮𝗹 𝗦𝗲𝗰𝘂𝗿𝗶𝘁𝘆 𝗖𝗶𝗿𝗰𝘂𝘀 𝗶𝗻 𝗛𝗮𝗹𝗹𝗲 𝟭𝟲, 𝗦𝘁𝗮𝗻𝗱 𝗔𝟭𝟮 (𝟵) und erfahren Sie, wie Sie die Sicherheit und Robustheit Ihrer vernetzten Industrieanlagen testen und verbessern können. Außerdem demonstrieren wir Ihnen in unserem #Lernlabor #Cybersicherheit für die Energie- und Wasserversorgung, wie Cyberattacken wirken und wie Sie sich dagegen schützen können. 🔒

Mehr Infos: www.iosb.fraunhofer.de/hm25