Show newer

Review - Fall 2023 Unified Agenda – FAA and Drones – Two FAA rulemakings on UAS operations listed in UA – 1 UAS rulemaking on the Long-Term Actions list – tinyurl.com/3bj7h6bk

Fall 2023 Unified Agenda – FAA and Drones – Two FAA rulemakings on UAS operations listed in UA – 1 UAS rulemaking on the Long-Term Actions list - tinyurl.com/3u6b3w48

Review - Fall 2023 Unified Agenda – DHS – 8 rulemakings of interest on latest version of the UA – CFATS update rule still listed – Short version – tinyurl.com/22892kyu

Fall 2023 Unified Agenda – DHS – 8 rulemakings of interest on latest version of the UA – CFATS update rule still listed - tinyurl.com/2s4dsrsj

CFSN Detailed Analysis - Substack Daily Update – 12-7-23 – Free Content – tinyurl.com/32bzm5m4

Short Takes – 12-7-23 – Space refueling test – Moon landing delays – Republican majority narrows – Agencies missed cyber logging deadline – tinyurl.com/2zajedxa

Review - 5 Advisories Published – 12-7-23 – NCCIC-ICS control system security advisories for from Sierra Wireless, ControlByWeb, Johnson Controls, SEL, and Mitsubishi – Short version – tinyurl.com/5dmm9xe8

5 Advisories Published – 12-7-23 – NCCIC-ICS control system security advisories for from Sierra Wireless, ControlByWeb, Johnson Controls, SEL, and Mitsubishi – a DRTH look at potential additional SW vulnerabilities – tinyurl.com/bdt2an29 Subscription requiured

Review - Conference Report for HR 2670 Published – 2024 NDAA – Lots of cybersecurity provisions include – Some from earlier versions excluded – Vote in House next week – Short versions – tinyurl.com/7ye63uh3

If you have a 23andMe profile, it is possible that you have been affected by their latest data breach. Just to be safe, you should take a minute now to change your DNA.

Conference Report for HR 2670 Published – 2024 NDAA – Lots of cybersecurity provisions include – Some from earlier versions excluded – Vote in House next week - tinyurl.com/ye2fvdhh Subscription required

Review - CSB Publishes Didion Milling Investigation Report – Yet another combustible dust incident – 5 dead and 14 injured - $15 million in damages – Short version – tinyurl.com/mrysbt78

CSB Publishes Didion Milling Investigation Report – Yet another combustible dust incident – 5 dead and 14 injured - $15 million in damages - tinyurl.com/yk8m5mrf

CFSN Detailed Analysis - Substack Daily Update – 12-6-23 – Free Content – tinyurl.com/3k69efew

Review – HR 6496 Introduced – Valve Standards Expansion – Would require PHMSA to reinstate RMV requirements for new Type A gas gathering lines – Short version – tinyurl.com/y7wvm47j

Yo, I don’t know who needs to hear this but @dangoodin had some outstanding coverage on what’s been going on with attacks on water utilities in the US, and a lot of the other big outlet coverage has been pretty wonky and drawing false conclusions. I’ve been too heads down with everything to comment much.

But like, this is stuff we in ICS cybersecurity have been warning about for a long time. Not because of uber 1337 APTs, but because municipalities are super duper underfunded and under appreciated, and because commonalities in tooling and devices and lowering the bar to entry in ICS attacks all the time. It’s like when metasploit, or cracked cobalt strike, or the big Windows RCE 0days hit. Those change things, because they make attacks easier for less techy people, and they make a lot of juicy targets more visible.

Like I say, water has been keeping us awake for a long time. This is awful but no surprise. We have all been trying to fix it.

HR 6496 Introduced – Valve Standards Expansion – Would require PHMSA to reinstate RMV requirements for new Type A gas gathering lines - tinyurl.com/ekcyzy7b Subscription required

Show older
CleverLibre Social

CleverLibre Social is an inclusive social instance for open discussion, learning, and community.
All cultures welcome.
Hate speech and harassment strictly forbidden.