Blog

Schenectady Cyber Security of Industrial Systems

Dedicated Probes : a new comer not yet widely accepted The notion of probes for detecting intrusion in control systems is now more than 10-years-old (refer to SINARI project for example) and has also been officially requested in the Critical Infrastructure French Law (LPM) for Critical Infrastructure operators in 2016.  However they are rarely used and this is due to several reasons: 1 – Market maturity 2 – Alert treatment 3 – Products differences and availability.  Read more…

By Lamyae Benjelloun, ago

L’investissement en cybersécurité des systèmes existants

Il y a aujourd’hui un retard d’investissement en cybersécurité industrielle. Un contrôle-commande qui fonctionne correctement parait à l’abri d’une attaque, une intervention sur un système fonctionnel est susceptible d’entrainer une dégradation ou encore le montant des primes d’assurance ne seront pas diminuées si l’on sécurise le système.  On peut également noter que les budgets cyber sont traditionnellement gérés dans une entreprise par une Direction des Systèmes d’Information (DSI), et les DSI privilégient fortement – voire exclusivement Read more…

By Lamyae Benjelloun, ago

How to invest your first euro in industrial cybersecurity?

Wanacry and NotPetya achieved what the experts were struggling to do: propel cybersecurity issues on board and raise awareness. Recent cyber-attacks have already cost businesses between $ 100 million and $ 300 million. Figures that encourage top management to invest now their first euros in their ICS cybersecurity. Once companies are ready to invest, the following questions arise: what level of security does my company need? What are the priorities? How to estimate the vulnerabilities Read more…

By Lamyae Benjelloun, ago

EKANS or Snake: The effective security measures of Cybelius.

How Cybelius’ solutions counter this new malware that attacks industrial systems? This ransomware was submitted for initial testing on Virustotal on December 26, 2019. Many variations were subsequently observed in different systems. Written in GO (programming language) this attack is quite classical, with the particularity of specifically targeting industrial applications. EKANS EKANS is a ransomware that encrypts the victim’s files in exchange for a ransom, but it also includes features specific to industrial systems. Indeed, Read more…

By Lamyae Benjelloun, ago

EKANS or Snake: The effective security measures of Cybelius.

How Cybelius’ solutions counter this new malware that attacks industrial systems? This ransomware was submitted for initial testing on Virustotal on December 26, 2019. Many variations were subsequently observed in different systems. Written in GO (programming language) this attack is quite classical, with the particularity of specifically targeting industrial applications. EKANS EKANS is a ransomware that encrypts the victim’s files in exchange for a ransom, but it also includes features specific to industrial systems. Indeed, Read more…

By Lamyae Benjelloun, ago

New solution in partnership with Gfi : CyFENCE & SIEM Service

In partnership since a year, Gfi and Cybelius have been working together to bring the best in industrial cybersecurity. With the aim of innovation and research in cybersecurity, the two partners have developed the “CyFENCE & SIEM Service” solution. A service that does not yet exist on the market, which allows information systems managers a complete representation of their activity to better manage the security of their installation. Read the press release.

By Lamyae Benjelloun, ago

New ransomware: impact on IT and OT networks

With the “CyFENCE & SIEM Service” solution, this attack would have had no effect on industrial installations.  New cyber attack affecting control over the OT network of a natural gas compression facility published by the Cybersecurity and Infrastructure Security Agency (CISA) (More info : https://www.us-cert.gov/ncas/alerts/aa20-049a). The attacker managed to gain access to the organization’s computer network and then was able to infiltrate the OT network. The ransomware was then able to reach both networks (IT Read more…

By Lamyae Benjelloun, ago