Apply Now to Attend Nexus Conference 2025

Topics:

The NSA's Cybersecurity Technical Report on securing smart OT controllers champions secure-by-design and cyber-informed engineering, stating they prioritize “engineering controls to mitigate the worst consequences of cyberattacks”-like physical damage or loss of life. CIE moves cybersecurity from a design afterthought to a core engineering discipline. Traditional OT security often relied on air-gapping or retrofitting defenses, but CIE mandates designing systems that inherently resist attacks.

Cyber Resilience

Operational Resilience

Operational Technology

Risk Management

How Cyber-Informed Engineering Shapes NSA’s Blueprint for OT Cyber Resilience

George V. Hulme

Cyber Resilience

Operational Technology

Operational Resilience

Risk Management

An Operational Checklist for Securing the IT/OT Ecosystem

Vulnerability Management

Risk Management

Cyber Resilience

Secure by Default: The Necessary Prescription for Secure Healthcare Delivery

George V. Hulme

See all in Cyber Resilience See all in Articles

A New Jersey appeals court agreed with an earlier court’s decision that cybersecurity insurance providers could not deny ransomware coverage under a so-called “war exclusion” for a cybersecurity incident Merck & Co. claimed caused $1.4 billion in losses.

Cybersecurity Insurance

Merck Ransomware Insurance Ruling Helps Clear Fog of Cyberwar

George V. Hulme

Avoid these seven pitfalls when seeking cybersecurity liability insurance; ensure you understand policy terms and conditions, conduct due diligence, and involve the proper stakeholders, among other things.

Cybersecurity Insurance

Cybersecurity Liability Insurance Pitfalls to Avoid

George V. Hulme

Navigating cybersecurity insurance in a recession requires diligence about systemic cybersecurity risks that can cause premiums to rise or insurers to consider an organization uninsurable.

Cybersecurity Insurance

Risk Management

Navigating Cyber Insurance in a Recession

George V. Hulme

See all in Cybersecurity Insurance See all in Articles

A diversified operational technology (OT) cybersecurity monitoring platform plays a key role in strengthening the protection of cyber-physical systems by providing clear visibility, real-time threat detection, and proactive risk mitigation. By integrating multiple monitoring tools and technologies, organizations can build a layered security approach that minimizes vulnerabilities, improves response times, and keeps critical systems resilient against cyber threats.

Operational Resilience

Operational Technology

Diversified Monitoring Essential to a Strong OT Cybersecurity Foundation

John Ballentine

Cyber Resilience

Risk Management

Blunting the Risks of Private-Sector Ownership of CI

ADM. Michael S. Rogers, USN (Ret.)

The “Report to the President: Strategy for Cyber-Physical Resilience: Fortifying Our Critical Infrastructure for a Digital World,” reaffirms that cyber-resilience-by-design should be the standard and urges a coalition of government leaders and private sector critical infrastructure asset owners and operators to refocus their energies to build resilient cyber-physical systems (CPS) that are designed to withstand attack.

Cyber Resilience

Risk Management

Applauding A Codified Strategy for CPS Resilience

See all in Federal See all in Articles

Cyberattacks against the food and beverage industry are opportunistic and leverage the growth in digitization to exploit previously unmanaged vulnerabilities to disrupt operations.

Food & Beverage

On the Menu: Cybersecurity Risks in the Food and Beverage Industry

George V. Hulme

See all in Food & Beverage See all in Articles

Vulnerability Management

Risk Management

Cyber Resilience

Secure by Default: The Necessary Prescription for Secure Healthcare Delivery

George V. Hulme

Cyber Resilience

Risk Management

ASL Roma 1: From HyperSOC to H.O.P.E.

Stefano Scaramuzzino

The European Union Agency for Cybersecurity (ENISA)'s NIS360 report identifies gaps in the current state of NIS2 compliance readiness and provides recommendations to lawmakers and affected industry verticals on what they need to do to become NIS2 compliant.

Cyber Resilience

Operational Resilience

Operational Technology

ENISA Attempts to Move NIS2 Forward with NIS360 Findings

George V. Hulme

See all in Healthcare See all in Articles

The NSA's Cybersecurity Technical Report on securing smart OT controllers champions secure-by-design and cyber-informed engineering, stating they prioritize “engineering controls to mitigate the worst consequences of cyberattacks”-like physical damage or loss of life. CIE moves cybersecurity from a design afterthought to a core engineering discipline. Traditional OT security often relied on air-gapping or retrofitting defenses, but CIE mandates designing systems that inherently resist attacks.

Cyber Resilience

Operational Resilience

Operational Technology

Risk Management

How Cyber-Informed Engineering Shapes NSA’s Blueprint for OT Cyber Resilience

George V. Hulme

Cyber Resilience

Operational Technology

Operational Resilience

Risk Management

An Operational Checklist for Securing the IT/OT Ecosystem

Operational Technology

Operational Resilience

Has IT/OT Convergence Improved Critical Infrastructure Cybersecurity?

ADM. Michael S. Rogers, USN (Ret.)

See all in Industrial See all in Articles

If we are indeed at the full outset of Industry 4.0, the fourth industrial revolution, initiatives such as smart manufacturing will not truly succeed without keen awareness of new cybersecurity risks introduced by IT/OT connectivity and advanced technologies.

Cyber Resilience

Internet of Things

Operational Resilience

Operational Technology

Smart Manufacturing Requires Proactive Cybersecurity

See all in Internet of Things See all in Articles

The NSA's Cybersecurity Technical Report on securing smart OT controllers champions secure-by-design and cyber-informed engineering, stating they prioritize “engineering controls to mitigate the worst consequences of cyberattacks”-like physical damage or loss of life. CIE moves cybersecurity from a design afterthought to a core engineering discipline. Traditional OT security often relied on air-gapping or retrofitting defenses, but CIE mandates designing systems that inherently resist attacks.

Cyber Resilience

Operational Resilience

Operational Technology

Risk Management

How Cyber-Informed Engineering Shapes NSA’s Blueprint for OT Cyber Resilience

George V. Hulme

Cyber Resilience

Operational Technology

Operational Resilience

Risk Management

An Operational Checklist for Securing the IT/OT Ecosystem

Operational Technology

Operational Resilience

Has IT/OT Convergence Improved Critical Infrastructure Cybersecurity?

ADM. Michael S. Rogers, USN (Ret.)

See all in Operational Resilience See all in Articles

The NSA's Cybersecurity Technical Report on securing smart OT controllers champions secure-by-design and cyber-informed engineering, stating they prioritize “engineering controls to mitigate the worst consequences of cyberattacks”-like physical damage or loss of life. CIE moves cybersecurity from a design afterthought to a core engineering discipline. Traditional OT security often relied on air-gapping or retrofitting defenses, but CIE mandates designing systems that inherently resist attacks.

Cyber Resilience

Operational Resilience

Operational Technology

Risk Management

How Cyber-Informed Engineering Shapes NSA’s Blueprint for OT Cyber Resilience

George V. Hulme

Cyber Resilience

Operational Technology

Operational Resilience

Risk Management

An Operational Checklist for Securing the IT/OT Ecosystem

Operational Technology

Operational Resilience

Has IT/OT Convergence Improved Critical Infrastructure Cybersecurity?

ADM. Michael S. Rogers, USN (Ret.)

See all in Operational Technology See all in Articles

The HHS Office for Civil Rights proposes substantial rule changes to the long-standing Health Insurance Portability and Accountability Act (HIPAA) Security Rule. While details on the proposed rule changes remain unclear, HHS plans to issue a Notice of Proposed Rulemaking (NPRM) by the end of the year. These changes are believed to be the most substantial changes since the HIPAA Security rule went into effect in 2003

Significant Changes to HIPAA Security Rule on the Way

George V. Hulme

Mike Ratliff, AVP Security Engineering and Operations at Providence, writes about five steps healthcare delivery organizations should take to mitigate the risk of ransomware and extortion-based attacks.

Cyber Resilience

5 Things Hospitals Can Do to Mitigate Threats of Ransomware

Resilience, Recovery Strategies to Combat Ransomware and Extortion

ADM. Michael S. Rogers, USN (Ret.)

See all in Ransomware See all in Articles

The NSA's Cybersecurity Technical Report on securing smart OT controllers champions secure-by-design and cyber-informed engineering, stating they prioritize “engineering controls to mitigate the worst consequences of cyberattacks”-like physical damage or loss of life. CIE moves cybersecurity from a design afterthought to a core engineering discipline. Traditional OT security often relied on air-gapping or retrofitting defenses, but CIE mandates designing systems that inherently resist attacks.

Cyber Resilience

Operational Resilience

Operational Technology

Risk Management

How Cyber-Informed Engineering Shapes NSA’s Blueprint for OT Cyber Resilience

George V. Hulme

Cyber Resilience

Operational Technology

Operational Resilience

Risk Management

An Operational Checklist for Securing the IT/OT Ecosystem

Vulnerability Management

Risk Management

Cyber Resilience

Secure by Default: The Necessary Prescription for Secure Healthcare Delivery

George V. Hulme

See all in Risk Management See all in Articles

Enterprises often are blind to the use of open source software in commercial and homegrown software development. Vulnerabilities and other weaknesses in OSS deployments are significant exposures that must be managed and mitigated.

Vulnerability Management

Risk Management

Visibility, Governance Key to Managing Open Source Risk

George V. Hulme

Technical debt in OT leads to increased operations costs as teams fight to maintain outdated systems, and security teams struggle to keep those same systems secure, often through compensating controls.

Operational Technology

Getting Strategic Against Technical Debt in OT

George V. Hulme

Technical debt broadly refers to having old technology in place that causes problems later on, such as increased maintenance, lower productivity, and software or system reliability.

Operational Technology

Technical Debt in OT Environments: How It's Different and Why it Matters

George V. Hulme

See all in Technical Debt See all in Articles

Vulnerability Management

Risk Management

Cyber Resilience

Secure by Default: The Necessary Prescription for Secure Healthcare Delivery

George V. Hulme

Enterprises often are blind to the use of open source software in commercial and homegrown software development. Vulnerabilities and other weaknesses in OSS deployments are significant exposures that must be managed and mitigated.

Vulnerability Management

Risk Management

Visibility, Governance Key to Managing Open Source Risk

George V. Hulme

Building management or automation systems are increasingly being connected online. Each connection to the internet introduces a new risk. Attackers looking for an entry point onto an internal network or to disrupt operations within a building could target a vulnerability in an internet-facing system and put the physical safety of occupants—or patients at a hospital, for example—at risk.

Vulnerability Management

Risk Management

Operational Resilience

Operational Technology

Reducing the Cybersecurity Risks of Connected BMS

See all in Vulnerability Management See all in Articles

Operational Resilience

Operational Technology

Poor Visibility Still a Drag on Secure Third-Party Remote Access

George V. Hulme

The European Union Agency for Cybersecurity (ENISA)'s NIS360 report identifies gaps in the current state of NIS2 compliance readiness and provides recommendations to lawmakers and affected industry verticals on what they need to do to become NIS2 compliant.

Cyber Resilience

Operational Resilience

Operational Technology

ENISA Attempts to Move NIS2 Forward with NIS360 Findings

George V. Hulme

As shop floors and factories get smarter, there is an unprecedented surge in, and demand for, remote access to manufacturing systems. Former Pfizer global head of automation engineering Jim LaBonty writes for Claroty Nexus about the need to secure remote access to manufacturing environments to reduce risk and improve efficiency.

Cyber Resilience

Operational Technology

Secure Remote Access for Smart Factory Environments

See all in Zero Trust See all in Articles

screenshot-2024-11-07-at-4.43.18-pm.png

Nexus Conference

Rodnei Gripp da Petrobras Fortalece a Conexão entre Segurança de Infraestruturas Críticas e Negócio

Saiba como a Claroty colaborou com o time de segurança cibernética da Petrobras, gerando benefícios estratégicos para a equipe responsável pelas plataformas de…

screenshot-2024-11-07-at-4.40.51-pm.png

José Carlos Hererra de Sigma, la Importancia de la Visibilidad y la Simplicidad

José Carlos Herrera, CISO de Sigma Europa, nos habla de la importancia de tener un inventario claro y una herramienta amigable como base para desarrollar una…

Nexus Conference

Felipe Bonomo Destaca os Desafios Relacionados à Proteção de Infraestruturas Críticas

Felipe Bonomo, CISO da Alpargatas, empresa responsável pela icônica marca Havaianas, compartilha os desafios e benefícios de sua parceria com a Claroty na…

See all in Videos

Joe Slowik, threat intelligence and detections lead at Gigamon, joins the Nexus podcast to discuss a Virus Bulletin paper and presentation he gave recently on XENOTIME.

Risk Management

Cyber Resilience

Operational Resilience

Nexus Podcast: Joe Slowik on Identifying Truly ‘Critical’ Infrastructure

Cyber Resilience

Operational Resilience

Operational Technology

Risk Management

Nexus Podcast: Danielle Jablanski on Critical Infrastructure Protection

Cyber Resilience

Operational Resilience

Vulnerability Management

Risk Management

Nexus Podcast: Cassie Crossley on Hardware Security, HBOMs

See all in Podcasts

Podcasts

Recent podcasts

Joe Slowik, threat intelligence and detections lead at Gigamon, joins the Nexus podcast to discuss a Virus Bulletin paper and presentation he gave recently on XENOTIME.

Risk Management

Cyber Resilience

Operational Resilience

Nexus Podcast: Joe Slowik on Identifying Truly ‘Critical’ Infrastructure

Cyber Resilience

Operational Resilience

Operational Technology

Risk Management

Nexus Podcast: Danielle Jablanski on Critical Infrastructure Protection

Cyber Resilience

Operational Resilience

Vulnerability Management

Risk Management

Nexus Podcast: Cassie Crossley on Hardware Security, HBOMs

On this episode of the Nexus Podcast, Rapid7 Senior Director of Threat Analytics Christiaan Beek explores the economics of ransomware and the continued profitability and success of it as an attack vector.

Cyber Resilience

Risk Management

Nexus Podcast: Christiaan Beek on Ransomware’s Continued Profitability

Internet of Things

Risk Management

Cyber Resilience

Nexus Podcast: Florence Hudson on the IEEE/UL 2933 Clinical IOT Cybersecurity Standard

On this episode of the Claroty Nexus Podcast, Mike Holcomb, global lead for ICS and OT cybersecurity at engineering and construction solution provider Fluor, discusses his advocacy and efforts to educate engineers and IT cybersecurity professionals in the nuances of protecting operational technology and industrial control systems.

Operational Technology

Operational Resilience

Vulnerability Management

Nexus Podcast: Mike Holcomb on Starting and Succeeding in OT Cybersecurity

Ron Fabela joins the Nexus podcast to discuss his research into low-skilled threat actors targeting operational technology and industrial control systems. Many of these groups operate as hacktivists and carry out less sophisticated defacements and intrusions. While less of a risk, these incidents are still a drain on human resources required to investigate them and decided on mitigation strategies.

Vulnerability Management

Risk Management

Operational Technology

Nexus Podcast: Ron Fabela on Low-Skilled OT/ICS Threat Actors

On the latest episode of the Claroty Nexus Podcast, Munish Walther-Puri, adjunct professor at the Center Global Affairs at New York University, describes a homegrown scale OT cybersecurity incidents called the Infrastructure Cyber Incident Scale, which takes into account an incident's magnitude, intensity, and duration.

Operational Resilience

Operational Technology

Risk Management

Nexus Podcast: Munish Walther-Puri on Developing a Scale for OT Cybersecurity Incidents

Brian Foster, senior advisor for grid security at Southern California Edison, joins the Nexus Podcast to discuss his presentation delivered at the S4 Conference on the risks of a hyperconnected grid. Adding a Wi-Fi connection to vulnerable smart meters that are enrolled by customers on a massive scale may allow attackers able to compromise centralized command and control of these devices to issue commands at scale that could result in catastrophic damage.

Internet of Things

Operational Technology

Cyber Resilience

Nexus Podcast: Brian Foster on the Risks of a Hyperconnected Power Grid

Matthew Rogers, ICS Cybersecurity Strategy & R&D Lead at CISA, joins the Nexus Podcast to discuss the agency's and its international partners' release of a procurement guide for operational technology (OT) owners and operators . The guide describes 12 OT cybersecurity elements that buyers should be looking for, and hopefully influencing automation and control system vendors to implement. Rogers hopes this initiative not only gives OT asset owners some agency during procurement, but also to creates a market-influenced demand among leading vendors to integrate these security elements by default into OT products.

Cyber Resilience

Operational Technology

Nexus Podcast: CISA on Secure-by-Demand for OT

Internet of Things

Operational Technology

Nexus Podcast: Noam Moshe on the IOCONTROL Malware

Team82’s Noam Moshe discusses state actor targeting of OT, why it’s so challenging to develop ransomware for OT and industrial control systems, and the mitigation strategies available to defenders of cyber-physical systems.

Cyber Resilience

Internet of Things

Nexus Podcast: Team82 on Attacking the Insecure IoT Cloud

1