You shouldn't be spending precious time setting up network monitoring. You need to spend time on your network architecture and make sure your ICS/OT isn't exposed to the internet or the corporate network. Stop spending money on blinky lights and work on the basics.

People are going about things the wrong way. IT doesn't need visibility into ICS/OT. ICS/OT needs a seat at the table.

We should be able to ban people who post shit like this on LinkedIn

IT dividing up the resources between the various VMs. The poor guys are starving.

Tom Lawrence (LinkedIn):

Feeling cute. Might swap a ICS/OT device today.

I might have done my job too well.... My aggressive equipment refresh has almost my whole fleet well below the manufacturer's generous warranty period. I might actually have time to focus more on security enhancements. 🤪

It didn't take long for Dragos to share my contact information with Runzero.... No, I don't want a product that does active scanning of my fucking network.

I see ICS/OT cybersecurity guru's posting on LinkedIn about protecting PLCs. My question is. What are they actually doing about it? I think it's a lot of "talk the talk" and not much of "walk the walk".

Anybody out there using Authentik for remote access control?

When the vendor supplies a FTP link to download firmware updates and it's not limited.

Australia Health services should pursue legal or criminal action against Sam Altman and OpenAI.