A Tale of Two SOCs: CISA's AA26-237A and the Control Your Audit Cannot Test
CISA's red team ran two simultaneous assessments against US critical infrastructure with similar tradecraft. Both organizations were fully compromised...
ot-security
3 articles on ot-security — privacy laws, security frameworks, and regulatory compliance.
A Wind Farm, a Private APN, and a Frozen Town: Poland's Heat Plant Attack and the NIS2 Scope Question Nobody Asked
Attackers entered through a FortiGate VPN at a wind farm with no MFA, crossed a private cellular network into an unrelated district heating plant, spe...
2,279 Victims, 91 Groups, 108 Countries: What GuidePoint's GRIT Q2 2026 Ransomware Report Demands of Your Compliance Program
GuidePoint Security's GRIT Q2 2026 report counts 2,279 ransomware victims — up 7% quarter-over-quarter and 43% year-over-year — spread across a record...