energy sector

The UK Smart Grid: How It Started & How It’s Going

| | electicity, Energy, energy grid, energy sector, environmental, gas, ICS Security, IIoT, iot
It’s no secret that if nations want to meet the Net Zero emission targets set by international organizations by 2050, there’s a lot of work to be done. In the UK, one ...
The State of Security

How to Ensure Continuous Compliance with NERC CIP

| | cyber-risk, Cybersecurity, energy sector, risk management, ServiceNow, ServiceNow IRM
What is NERC? The North American Electric Reliability Corporation, or NERC, is the largest electric reliability organization in North America. They’re responsible for over 1,900 bulk power system operations spanning the United ...
Risk Intelligence Academy – Iceberg Networks
How to Mitigate Risk Against Operational Technology (OT)

How to Mitigate Risk Against Operational Technology (OT)

| | cyber-risk, energy sector, Operational Resilience, Operational Resiliency, Operational Risk, security operations, ServiceNow
Operational technology, or OT, is hardware and software technologies that monitor and control a variety of physical operations including, but not limited to processes, devices, and even various infrastructures like public rail ...
Risk Intelligence Academy – Iceberg Networks

Final Version of NIST SP 1800-23 Guides Identification of Threats to OT Assets

| | energy sector, ICS Security, NIST, operational technology, Regulatory Compliance
In September 2019, the National Cybersecurity Center of Excellence (NCCoE) at the National Institute of Standards and Technology (NIST) announced the release of a draft practice guide entitled, “NIST Special Publication (SP) ...
The State of Security
Oil & Gas Spearphishing Campaigns Drop Agent Tesla Spyware in Advance of Historic OPEC+ Deal

Oil & Gas Spearphishing Campaigns Drop Agent Tesla Spyware in Advance of Historic OPEC+ Deal

| | Anti-Malware Research, energy sector, energy spearphishing, oil & gas malware, Oil and Gas, oil&gas, OPEC, SpearPhishing
Bitdefender researchers have recently found spearphishing campaigns, either impersonating a well-known Egyptian engineering contractor or a shipment company, dropping the Agent Tesla spyware Trojan. The impersonated engineering contractor (Enppi – Engineering for ...
Bitdefender Labs

NIST SP 1800-23, Energy Sector Asset Management: Securing Industrial Control Systems

| | energy sector, ICS Security, NIST, Regulatory Compliance
Industrial organizations face a growing list of digital threats these days. Back in April 2019, for instance, FireEye revealed that it had observed an additional intrusion by the threat group behind the ...
The State of Security
Dragonfly Cyberspy Group Ramps Up Attacks Against Energy Sector

Dragonfly Cyberspy Group Ramps Up Attacks Against Energy Sector

| | Android botnet, Apache Struts, cyberespionage, ddos, Dragonfly, energy sector, Exploit, industrial control system, Remote Code Execution, WireX
Symantec warns that a sophisticated cyberespionage group known as Dragonfly is aggressively targeting companies from the energy sector in Europe and the United States. The company’s researchers have seen evidence that in ...