Organizations are advancing their efforts, investing in OT cybersecurity programs

ICS cybersecurity threats remain high and present evolving challenges, a new SANS report reveals. However, since the last SANS OT/ICS report released in 2017, a growing majority of organizations have significantly matured their security postures over t… Continue reading Organizations are advancing their efforts, investing in OT cybersecurity programs

Nozomi Networks shares research and tools to help ICS community defend against cyber threats

Nozomi Networks, the leader in industrial cyber security and operational visibility announced the launch of Nozomi Networks Labs. Focused on helping defend the industrial systems that support everyday life, Nozomi Networks Labs will share its own resea… Continue reading Nozomi Networks shares research and tools to help ICS community defend against cyber threats

GreyEnergy malware has ‘massive amounts of junk code’ meant to confuse researchers

The investigation of the network of hackers generally associated with the seminal 2015 cyberattack on the Ukrainian power grid continues. A researcher has reverse-engineered malware used by a subgroup of those attackers and found “massive amounts of junk code” meant to throw analysts off the trace. “The threat actors’ broad use of anti-forensic techniques underlines their attempt to be stealthy and ensure that the infection would go unnoticed,” Alessandro Di Pinto, a researcher at industrial cybersecurity company Nozomi Networks, wrote in a paper published Tuesday. The malware Di Pinto analyzed is the handiwork of GreyEnergy, a likely derivative of the hacking group known as BlackEnergy, which Western governments have attributed to Russian military intelligence. (Both the groups and the malware they deployed have been referred to as BlackEnergy and GreyEnergy.) BlackEnergy was behind the first known cyberattack to cause a blackout when 225,000 people lost power in Ukraine in 2015. […]

The post GreyEnergy malware has ‘massive amounts of junk code’ meant to confuse researchers appeared first on CyberScoop.

Continue reading GreyEnergy malware has ‘massive amounts of junk code’ meant to confuse researchers

Nozomi Networks raises $30 million for ICS security platforms

Nozomi Networks, a San Francisco-based company that specializes in industrial cybersecurity, announced Thursday that it raised $30 million in its Series C funding round — yet another sign that investors see growth potential in the market for guarding industrial control systems (ICS). The company offers products that use artificial intelligence to give customers visibility into the security of their ICS networks — the technology that helps run factories, refineries and more. The two main platforms, SCADguardian and the Centeral Management Platform, allow ICS operators to keep an eye on their industrial assets and monitor them for risks and threats. ICS security is getting a lot of attention as criminal and state-backed hackers regularly threaten critical infrastructure, which involves increasingly connected operational technology networks. Successful attacks can impact the safety and livelihood of people who work at or depend on, for example, oil and gas plants. Competitors in the ICS security field include Claroty, Dragos, […]

The post Nozomi Networks raises $30 million for ICS security platforms appeared first on Cyberscoop.

Continue reading Nozomi Networks raises $30 million for ICS security platforms

Atos and Nozomi Networks team to deliver security to OT environments

Atos and Nozomi Networks announced they will work together to provide industrial enterprises real-time operational technology (OT) network visibility, data analysis and cybersecurity protection. The joint solution will help customers decrease total cos… Continue reading Atos and Nozomi Networks team to deliver security to OT environments