Muhammad Raheem·3d agoCVE-2026–58115: When a Node-RED Flow Editor Becomes an OT Command PlaneAn offensive-security analysis of Siemens SIMATIC IoT2050, missing authentication, observed exploitation, public PoC limitations, and…
Majid·4d agoWhen Cyberattacks Get Physical: Why Hackers Targeting Blood Bank Fridges Should Terrify Us AllA chilling incident in France reveals the terrifying evolution of cybercrime, moving from stolen data to literal life-or-death sabotage of…
Rajj·Oct 31ICS/OT Security Fundamentals: Part 1 — Processes, Architecture, and Safe Assessment(OT Pentest)A foundation for learning OT penetration testing.
MaTTy·Oct 27CybICS: Plant Takeover — TryHackMe Write-upFrom a phished office host to a blow-out: Modbus, S7comm, OPC-UA, OpenPLC and an IDS, with no exploit
Abbas Moayaed·Oct 27APIFIX: A Forensic-Ready Architectural Approach for Critical Oil & Gas InfrastructureExecutive Summary
Wartelski.·Oct 24AI Hackers Go Regional: ARTEX in Japan, and Can AI Plan an Attack on a Factory?An open-source AI pentesting tool shows up behind attacks on Japanese companies, and a new study measures how well AI can plan attacks on…A response icon1A response icon1
~ goody·Oct 19Securing Operational Technology (OT) Assets in AWS: A Practical GuideFor decades, Operational Technology (OT) lived in its own world. Air-gapped networks, proprietary protocols, and engineers who trusted…
Anthony Bahn·Oct 13How to Inventory the OT Controllers Your Facilities Contractors Put OnlineRefrigeration, HVAC and lighting controllers get internet access through contractor modems and router port-forwards IT never sees. A…
Sulaiman Alhasawi·Oct 7NIST SP 800–82 Rev. 4: What OT Security Practitioners Really Need to KnowNIST recently released the Initial Public Draft of SP 800–82 Rev. 4, Guide to Operational Technology (OT) Security.
Anushka Jain·Sep 30Not Every Missile Plays by the Same RulesPart 2 of the series: “Missile Defense Is an OT Problem Wearing a Kinetic Disguise”