Waterfall Security Solutions

Introducing HERA - Hardware Enforced Remote Access. Enjoy the best of both worlds, full-blown remote access with hardware-based protection for critical networks ➡️ https://lnkd.in/gti2rGx9

OT Security Data Science – A Better Vulnerability Database | The Industrial Security Podcast Episode 133 with Dr. Carmit Yadin from DeviceTotal Listen now ➡️ https://bit.ly/4iG2EaJ

Thank you for being a part of our journey this year! We couldn’t have achieved these milestones without your support, engagement, and commitment to securing the future of OT systems. We can't wait for the year ahead!

Which Countries have transposed the NIS2 directive into law?  Croatia, Hungary, Italy, Latvia, Lithuania, Belgium and…Germany. Yes, these countries have transposed the law—although it depends on where you look. The official tracker site it now includes Germany, but not Hungary. This site communicates which countries have reported the directive as transposed:  https://lnkd.in/dmvzTNuF  For a better third-party tracker, check this out (focus on DNS, but plenty of information) https://lnkd.in/d4Cq97gC  That said, only Belgium appears to have clarified what the law actually means. For instance, it's still unclear to me what "transposition" entails in Italy. Also, most of them have a moratorium for compliance. And... there are countries like Spain and Estonia that haven’t even started the consultation process. Here’s a FAQ from Belgium on NIS2 transposition and implementation.  https://lnkd.in/dCcu4arF If you are interested in learning more about what NIS2 means specifically for OT professionals, download my free guide ➡️ https://hubs.li/Q02_-_yD0

Last chance to register for this webinar! We're unveiling the top 10 cyberattacks on industrial and critical infrastructure of 2024 ➡️ https://bit.ly/49NiNqY

The 62443 family of standards comes with an extensive collection of documents— each packed with very detailed information. Dr. Jesus Molina does a great job reducing the complexity of interpreting and applying the guidance in 62443 to power generation applications in his new eBook. I recommend giving it a read. It is free to download here ➡️ https://bit.ly/3OTNiBR

What should decision-makers focus on in order to allocate resources effectively and address the most pressing cyber threats? Rees Machtemes covers this and more in this edition of my newsletter - OT Security Spotlight

62443 Certification covers 3 areas: 1. The product development process 2. An actual product's resistance to attacks 3. The security level of complete systems In my new eBook we look at what these certifications mean and how they should be applied to power generation ➡️ https://bit.ly/3ZL3viR

I recently published an article in North American Mining magazine. Mining machinery is increasingly automated; simple pick-up trucks contain over 300 CPUs each, and more critical equipment is heavily instrumented. The software in these CPUs is the root of the cybersecurity problem: all software contains defects, and some defects are security vulnerabilities. How can mines protect themselves? This is the question I look at in the article. Feel free to download it below. Thank you to North American Mining Magazine for sharing my work.

As 2024 winds down, let’s wrap up and discuss the year’s most important cyber incidents that targeted physical operations – in both critical infrastructure and heavy industry