Jeremy Morgan

How security by design might have stopped Oldsmar HMI attack

April 19, 2021

Now that the dust has settled a bit around the cyber attack at the Oldsmar water facility in Florida, and everyone has made their sales pitch, this is a good time to highlight some of […]

Creating a threat-informed defense for a facility

April 12, 2021

The MITRE ATT&CK for ICS Matrix provides a common nomenclature that allows asset owners, security researchers and consultants, internal defenders and product vendors to better communicate about adversary techniques. Nothing in it is new to […]

Why cyber hygiene is needed when developing a risk-based cybersecurity approach

April 5, 2021

A risk-based approach to cybersecurity without basic cyber hygiene is a fool’s errand, leading to short-term prioritizations and a game of musical chairs where you hope you aren’t the one left standing when the music […]