October: ICS Security Month In Review

<p>Jason Nations and I go over October's top three stories plus our Win, Fail and Prediction of the month.</p> <!-- /wp:paragraph --><!-- wp:paragraph --><!-- /wp:paragraph --> <p> </p> <!-- wp:heading {"level":4} --> <h4>Top Stories</h4> <!-- /wp:heading --><!-- wp:paragraph --> <p>1. Six Sandworm attackers from Russia charged. Why was this done now and what does it accomplish?</p> <!-- /wp:paragraph --><!-- wp:paragraph --> <p>2. More ICS vendors announced security services (ABB and Siemens). Will this be a good business? Is it good for asset owners?</p> <!-- /wp:paragraph --><!-- wp:paragraph --> <p>3. ICS security vendors are creating risk metrics for cyber assets and zones (Claroty and ID announced). How should asset owners view these metrics?</p> <!-- /wp:paragraph --><!-- wp:paragraph --> <p>Plus Jason has a Win and Prediction, and I give my Win, Fail and Prediction for October.</p> <!-- /wp:paragraph --><!-- wp:heading {"level":4} --> <h4>Links</h4> <!-- /wp:heading --><!-- wp:paragraph --> <p>Jason Nations / Selena Larson S4x20 video - <a href= "https://youtu.be/O_pl3lWxPu0">Understanding Our Adversaries</a></p> <!-- /wp:paragraph --><!-- wp:paragraph --> <p><a href= "https://www.amazon.com/Active-Measures-History-Disinformation-Political/dp/0374287260"> Thomas Rid's Active Measures</a> book</p> <!-- /wp:paragraph --><!-- wp:paragraph --> <p><a href= "https://www.linkedin.com/pulse/ics-patch-what-patch-when-dale-peterson/"> ICS-Patch Decision Tree ... What To Patch When?</a></p> <!-- /wp:paragraph --><!-- wp:paragraph --> <p><a href="https://finitestate.io">Finite State web page</a> and <a href= "https://dale-peterson.com/2020/06/16/podcast-matt-wyckhouse-of-finitestate/"> Unsolicited Response episode</a></p> <!-- /wp:paragraph -->