BLOG

September 5, 2022

Paving the way for Post-Quantum Cryptography

Two months ago, in early July, the US National Institute of Science and Technology (NIST) announced that the results of a six-year competition amongst the set of post-quantum algorithms had resulted in the selection of four initial algorithms (with the view of eight in total). These encryption tools are designed to withstand the assault of a future quantum computer which could potentially crack the security used to protect privacy in the digital systems we rely on every day such as online banking and email software.

The State of Global Operational Technology 2022 – part 1

31.08.2022

SCADAfence, the OT & IoT cybersecurity technology consultancy, conducted a survey on the current state of OT security, the negative consequence of the shortage of qualified workforce in the field, and the general level of risk organisations are currently facing. In 2022 SCADAfence surveyed over 3500 OT and IT security experts all around the world. Most of them came from North America – 39%, followed by Europe with 26%, South America – with 18%, and 10% from Asia.

Chinese Campaign exploits Network Providers and Devices Worldwide

29.08.2022

Nearly two months ago, on the 7th of June, CISA published Alert (AA22-158A). This alert describes the ways in which Chinese state-sponsored cyber actors exploit known vulnerabilities to establish an extensive network of compromised worldwide infrastructure. These actors use the network to exploit targets worldwide, including public and private sector organisations. The alert documentation details the targeting of major telecommunications companies and network service providers and the top vulnerabilities associated with network devices routinely exploited by cyber actors.

Cybersecurity of Smart Buildings

25.08.2022

When the topic of cybersecurity in Smart Buildings comes up, the question arises about the challenges related to the trend and technology, and who should be concerned about the topic. Building owners, investors, building managers, tenants, as well as building users should be concerned. Modern buildings are equipped with cutting-edge technology which is focused on making buildings more efficient by providing cost-saving solutions and bringing more value to the users via increased ease of use and comfort.

Phishing Attacks & Mitigation – part 2

22.08.2022

According to the CISCO’s 2021 Cybersecurity threat trends report, phishing accounts for around 90% of data breaches with at least one person having clicked a phishing link in around 86% of organisations. How to protect yourself from falling prey to a (spear) phishing attack? There is no 100% phishing-proof recipe and not getting caught requires an approach of constant vigilance when opening and acting on received emails, texts, and voice messages (communication).

Phishing Attacks & Mitigation – part 1

16.08.2022

As more and more of our everyday professional (and personal) lives take place online, so do increase the nefarious activities of those actors who want to abuse this fact and profit by extracting privileged information or influence us into taking an action that may or may not be in our best interest. Various organisations which deal with cybersecurity in a professional capacity and comprise their annual reports on this subject all agree that phishing and related activities have been steadily increasing in volume and sophistication in recent years and they agree that this trend will keep its course in the time to come.

The State of Global Operational Technology 2022 – part 3

14.08.2022

Smart Meters in the context of Smart Grid and AMI architecture. Security, Vulnerability and Best Practice – Part 4

11.08.2022

The power grid, one of the most crucial pieces of critical infrastructure, is on top of the list of interest to various APTs (Advanced Persistent Threat – stealthy threat actor, typically nation or state-sponsored) and other threat actors. Hence the security testing of such solutions as Advanced Metering Infrastructure (AMI) and Smart Meters as well as their security solutions must be of the highest standards. In this series of articles, SEQRED presents the topic of Smart Meter security in the wider context of the Smart Grid and the AMI architecture.

Smart Meters in the context of Smart Grid and AMI architecture. Security, Vulnerability and Best Practice – Part 3

11.08.2022

The power grid, which is one of the most crucial pieces of critical infrastructure, is on top of the list of interest to various APTs (Advanced Persistent Threat – stealthy threat actor, typically nation or state-sponsored) and other threat actors. Hence the security testing of such solutions as Advanced Metering Infrastructure (AMI) and Smart Meters as well as their security solutions must be of the highest standards. In this series of articles, SEQRED presents the topic of Smart Meter security in the wider context of the Smart Grid and the AMI architecture.

The State of Global Operational Technology 2022 – part 2

07.08.2022