@Secure_ICS_OT@infosec.exchange

@Secure_ICS_OT@infosec.exchange · 4d ago

The problem with vendor work is they bring their personal "solution". You then end up with a patch work of various "solutions" that creates more surface area and more stuff to manage.

0

Secure ICS OT

@Secure_ICS_OT@infosec.exchange · 6d ago

So back in the day I had to defend having a router segregating the ICS/OT from the IT network. Some time later the IT department accidentally exposed the routers WAN to the internet. I discovered this because I was able to access it without using their VPN first.

0

Secure ICS OT

@Secure_ICS_OT@infosec.exchange · Aug 06, 2026

0

Secure ICS OT

@Secure_ICS_OT@infosec.exchange · Aug 06, 2026

2

0

1

0

Secure ICS OT

@Secure_ICS_OT@infosec.exchange · Aug 06, 2026

Once again Just because you can Doesn't mean you should

0

Secure ICS OT

@Secure_ICS_OT@infosec.exchange · Aug 06, 2026

One of the biggest threats to ICS/OT. "IT/OT convergence" IYKYK

0

Secure ICS OT

@Secure_ICS_OT@infosec.exchange · Aug 05, 2026

0

Secure ICS OT

@Secure_ICS_OT@infosec.exchange · Aug 04, 2026

Microsoft in the ICS/OT:

0

Secure ICS OT

@Secure_ICS_OT@infosec.exchange · Aug 03, 2026

You need to educate yourself on ICS/OT security. Before someone that is not educated on ICS/OT security takes you in the wrong fucking direction.

0

Secure ICS OT

@Secure_ICS_OT@infosec.exchange · Jul 29, 2026

0

Secure ICS OT

@Secure_ICS_OT@infosec.exchange · Jul 29, 2026

0

Secure ICS OT

@Secure_ICS_OT@infosec.exchange · Jul 29, 2026

Wasn't long ago IT and Cisco was trying to sell me on VXLAN. Most definitely don't need VXLAN in my environment. I'm not even sure the corporate needs VXLAN. VXLAN is for datacenters.

0

Secure ICS OT

@Secure_ICS_OT@infosec.exchange · Jul 28, 2026

0

Secure ICS OT

@Secure_ICS_OT@infosec.exchange · Jul 28, 2026

0

Secure ICS OT

@Secure_ICS_OT@infosec.exchange · Jul 28, 2026

0

Secure ICS OT

@Secure_ICS_OT@infosec.exchange · Jul 28, 2026

Planning your work week in ICS/OT:

0

Secure ICS OT

@Secure_ICS_OT@infosec.exchange · Jul 27, 2026

Replying to @plzupgrademe@fedi.txw.ca

@plzupgrademe@fedi.txw.ca I was thinking the same thing. My package arrived at 2:30pm but was reported as 4:30pm. The issue seems to be between the subcontractor and Amazon.

0

Secure ICS OT

@Secure_ICS_OT@infosec.exchange · Jul 27, 2026

Visiting the guys on site:

0

Secure ICS OT

@Secure_ICS_OT@infosec.exchange · Jul 27, 2026

If you don't know about virustotal, you should totally check it out. Great tool for scanning files. Just don't be stupid and upload sensitive configuration files or documents. https://www.virustotal.com/gui/home/upload

www.virustotal.com

VirusTotal

0

Secure ICS OT

@Secure_ICS_OT@infosec.exchange · Jul 27, 2026

If you're an ICS/OT engineer you should learn how to configure firewalls. It is easier than configuring a PLC so you should pick it up pretty quick.

0

Secure ICS OT

@Secure_ICS_OT@infosec.exchange · Jul 27, 2026

0

Secure ICS OT

@Secure_ICS_OT@infosec.exchange · Jul 27, 2026

0

Secure ICS OT

@Secure_ICS_OT@infosec.exchange · Jul 27, 2026

This shouldn't have to be said but

Nobody should be able to browse the internet from the ICS/OT environment.
Nobody should be able to send or receive e-mails in the ICS/OT environment.

0

Secure ICS OT

@Secure_ICS_OT@infosec.exchange · Jul 27, 2026

Amazon's package tracking updates are so good they can see into the future.

0

1

0

Secure ICS OT

@Secure_ICS_OT@infosec.exchange · Jul 27, 2026

The current top firewall alert is from my few Windows machines trying to check on updates.

0

Secure ICS OT

@Secure_ICS_OT@infosec.exchange · Jul 25, 2026

Another great read for ICS/OT security is the joint government document: "Principles of Operational Technology Cyber Security" https://www.cyber.gov.au/sites/default/files/2026-06/Principles%20of%20operational%20technology%20cyber%20security%20%28October%202024%29.pdf

0

Secure ICS OT

@Secure_ICS_OT@infosec.exchange · Jul 25, 2026

Please pray for me this morning while I struggle with the desire to reply all, and correct the "project manager".

0

Secure ICS OT

@Secure_ICS_OT@infosec.exchange · Jul 25, 2026

2

0

2

0

Secure ICS OT

@Secure_ICS_OT@infosec.exchange · Jul 24, 2026

If you have ICS/OT firewall alarms going to your inbox. We can be friends.

0

Secure ICS OT

@Secure_ICS_OT@infosec.exchange · Jul 24, 2026

Replying to @Secure_ICS_OT@infosec.exchange

This is the book I'm trying to get managers to read.

0

Secure ICS OT

@Secure_ICS_OT@infosec.exchange · Jul 24, 2026

I have taken a break from training this year and have just been hitting the books. The best book I have read this year, hands down has been Engineering-Grade OT Security (A manager's guide) by Andrew Ginter. It stands apart from everything else and you should read it. It's only $15CND on Amazon!

0

1

0

Secure ICS OT

@Secure_ICS_OT@infosec.exchange · Jul 23, 2026

With the MTBF so high on most equipment, having redundancy generally seems like a complete waste of money and only makes things more complicated than they need to be. I'd rather have cold spares on hand, save money and reduce system complexity.

0

Secure ICS OT

@Secure_ICS_OT@infosec.exchange · Jul 23, 2026

3

0

2

0

Secure ICS OT

@Secure_ICS_OT@infosec.exchange · Jul 23, 2026

Sorry I didn't mean to like that post. I was just slapping a mosquito.

0

Secure ICS OT

@Secure_ICS_OT@infosec.exchange · Jul 23, 2026

https://youtu.be/FwA3CuJxbk4?si=W9Wb1TbR87gzukZw

0

Secure ICS OT

@Secure_ICS_OT@infosec.exchange · Jul 23, 2026

1

0

Secure ICS OT

@Secure_ICS_OT@infosec.exchange · Jul 20, 2026

3

0

1

0

Secure ICS OT

@Secure_ICS_OT@infosec.exchange · Jul 19, 2026

Just because it's a standard doesn't mean it won't break your business.

0

Secure ICS OT

@Secure_ICS_OT@infosec.exchange · Jul 18, 2026

You have to put in the time to secure new projects. It's very hard to make significant changes once things are in production.

0

Secure ICS OT

@Secure_ICS_OT@infosec.exchange · Jul 17, 2026

Mike Holcomb (LinkedIn):

0

Secure ICS OT

@Secure_ICS_OT@infosec.exchange · Jul 17, 2026

0

Secure ICS OT

@Secure_ICS_OT@infosec.exchange · Jul 16, 2026

https://techcrunch.com/2026/07/16/coca-cola-suspended-production-at-its-fairlife-dairy-after-a-ransomware-attack/

0

Secure ICS OT

@Secure_ICS_OT@infosec.exchange · Jul 11, 2026

New term learned over drinks: Shadow AI

0

Secure ICS OT

@Secure_ICS_OT@infosec.exchange · Jul 03, 2026

Replying to @mattesilver@fe.disroot.org

@mattesilver@fe.disroot.org they are proprietary data replicators that have various "collectors" that let you move ICS/OT time-series data into the Corporate domain where you can then setup read-only dashboards or move data on to ERP systems.

0