NY Times Historical Fiction on Stuxnet
The NY Times published an enhanced excerpt from David Sangers’ new book Confront and Conceal: Obama’s Secret Wars and Surprising Use of American Power. The long article focuses on the US and Israeli...
View ArticleSiemens – The Good, The Bad & The Bravado
A friend sent me a 24-page Network Security brochure from Siemens dated May 2012 with more detail on Siemens S7 security offerings and overall security strategy (we will add the link when it is up on...
View ArticleConfront and Conceal – Stuxnet Technical Review, Comments & Questions
I read the Stuxnet portion of David Sanger’s Confront & Conceal. Stuxnet is actually only a small part of the book, but it is the first sensational story in the Prologue to capture the reader’s...
View ArticleGermany, Siemens, Stuxnet
Most of the attention, reporting and speculation on Stuxnet perpetrators has been focused on the US and Israel, but what about Siemens and the German Government’s possible role in the Stuxnet story?...
View ArticleOffensive Cyber Weapons: Construction, Development and Employment Paper
The Journal of Strategic Studies published my article Offensive Cyber Weapons: Construction, Development and Employment, and it is now available for free download. Thanks to Thomas Rid for inviting me...
View ArticleS4x13 Video: WinCC Under X-Rays by Sergey Gordeychik
Sergey Gordeychik of Positive Technologies presents in 45 minutes a large number of vulnerabilities in WinCC at S4x13 — yes the WinCC of Stuxnet fame. There are also some findings on the S7 PLC’s. The...
View ArticleUnsolicited Response Podcast – Interview with Kim Zetter from S4x15
We had Kim Zetter on stage for an interview at ICSage during S4x15 Week to discuss her new book: Countdown to Zero Day: Stuxnet and the Launch of the World’s First Digital Weapon. This first 2015...
View ArticleWhy IRONGATE Is A Big ICS Security Story
We were thrilled to add a session by Rob Caldwell / FireEye to next week’s S4xEurope agenda when we learned in April about the ICS malware they have named IRONGATE. This is the second biggest ICSsec...
View ArticleS4xEurope Video: IRONGATE – Technical Deep Dive
We decided to put the IRONGATE video from last week’s S4xEurope out first. There is no new big reveal over the information put out in the FireEye article, but Rob provides a lot of context that makes...
View ArticleS4 Classic Video: Langner’s Stuxnet Deep Dive
Tomorrow we will be officially opening the S4x17 Call For Presentations (CFP), so I thought it would be the perfect time to highlight one of the S4 Classics to show what a S4 Technical Deep Dive looks...
View Article