powerdcs @powerdcs

Power Engineer | InfoSec | Level 7 OT Sentinel | @BEERISAC Joined December 2019

Tweets

474
Followers

95
Following

278
Likes

1K

Robert M. Lee @RobertMLee

5 years ago

I’m glad CISA is providing a companion document w/ the DOJ indictment of the Russian govt operators who targeted ICS. Lots of great info but please don’t follow their mitigation advice for ICS. It’s not practical & in some cases dangerous. A quick thread: us-cert.cisa.gov/ncas/alerts/aa…

16 89 272 0 57

View Details

IAEA - International Atomic Energy Agency ⚛️ @iaeaorg

5 years ago

UPDATE 3: #Ukraine informs IAEA that missiles caused no damage to Kiev radioactive waste facility; IAEA chief @rafaelmgrossi urgently appeals to parties to refrain from military or other action that could threaten safety and security of nuclear facilities. bit.ly/3hl6kQC

55 478 1K 0 17

View Details

Battle Programmer Yuu @netspooky

5 years ago

There's a lot of hot takes on critical infrastructure and questions about why certain things are "online" in the first place. Just think about what a godsend it is for engineers to manage massive infra remotely. The focus for defense is on the links and software they use.

Battle Programmer Yuu @netspooky

5 years ago

@Nash076 Because power grids are huge machines that require constant monitoring. Substations talk to other substations, report the state of the grid, and respond to events. It's a massive operation that also needs human control. There are entryways engineers use. That's what's targeted.

1 0 8 0 0

3 2 22 0 1

View Details

Robert M. Lee @RobertMLee

5 years ago

If we find, whoever it is, targeting ICS. We’ll disclose it. It’s legitimately that simple. I don’t know why private sector firms pick sides. The side to pick is that of non-combatants. And anyone who served in the military knows that.

0 6 65 0 1

View Details

Lesley Carhart @hacks4pancakes

5 years ago

A reminder to senior peeps that whatever you do as a manager, exec, or lead IC is noticed by your junior people / direct reports, and they may feel pressured to emulate you. This can be good, but it can also be bad - if you don't take time off, work horribly extended hours, etc.

7 49 377 0 9

View Details

Robert M. Lee @RobertMLee

5 years ago

If you are a critical infrastructure company that experiences a cyber attack and you do not have an actual CISO your Congressional hearing is going to suck.

14 93 621 0 37

View Details

powerdcs @powerdcs

5 years ago

@hacks4pancakes I’m a recent grad and I’m not too worried. Go to school for EE or CS and get an internship at a utility or some gov infrastructure to fill in the gaps. More ICS curriculum will start to trickle in to unis soon, but you can still be competent in ICS if you augment your learning

1 0 4 0 1

View Details

Robert M. Lee @RobertMLee

5 years ago

I’m proud to announce the most significant update to my SANS ICS515 class to date. The course is renamed as a result to “ICS Visibility, Detection, and Response”, is now a 6 day class, has a whole new PLC kit, and more. Details in the blog and thread below sans.org/blog/introduci…

5 21 112 0 1

View Details

Robert M. Lee @RobertMLee

5 years ago

Every hurricane and natural disaster is an opportunity to be thankful for the utility industry and our industrial operations workers. Preparation and response efforts in the electric industry as an example are top notch and truly a community wide task.

4 19 204 0 2

View Details

Simone Margaritelli @evilsocket

5 years ago

Now medusa can automatically create a dummy clone of any host on shodan. Adaptive honeypots ftw 🔥

3 22 82 0 10

View Details

powerdcs @powerdcs

5 years ago

Seeing lots of hysteria around recent vulnerabilities potentially impacting ICS. “OMG code exec on the device!”…but the default user/pass is admin/admin and isn’t easily changeable by customers

1 2 3 0 0

View Details

powerdcs @powerdcs

5 years ago

@netspooky Nice find!

0 0 0 0 0

View Details

powerdcs @powerdcs

5 years ago

Your time for asset identification shouldn’t be when you are calculating how expensive the decrypter is per machine

2 0 11 0 0

View Details

Chris Krebs @C_C_Krebs

5 years ago

New @CISAgov & @FBI alert on Chinese cyber targeting pipelines. Notable line: “CISA and FBI assess that these intrusions were likely intended to gain strategic access to the ICS networks for future operations rather than for intellectual property theft.” us-cert.cisa.gov/ncas/alerts/aa…

7 108 270 0 12

View Details

powerdcs @powerdcs

5 years ago

@netspooky Congrats!

0 0 1 0 0

View Details

Battle Programmer Yuu @netspooky

5 years ago

The Second Annual Binary Golf Grand Prix starts tomorrow, and I finally put all of last year's entries into a git repo! Will be tracking all future entries here. Check it out: github.com/netspooky/BGGP

2 16 55 0 4

View Details

Andrew Morris (afk) @Andrew___Morris

5 years ago

Remy developed a method to reliably fingerprint and identify GreyNoise nodes and reported it to us. We offered to pay him a reward. He insisted we donate his reward to charity instead. So we did, and then we matched it. Remy is an absolutely stand-up human.

remy🐀 @_mattata

5 years ago

Shout out to GreyNoise for being great to work with when reporting an issue. When a bounty was offered and I asked to donate to a local charity instead, @GreyNoiseIO matched the donation! Thank you for being so generous with a local charity doing a ton of good in the community!

3 6 75 0 0

2 14 115 0 0

View Details

Trends for United States

Good Sunday

Wirtz

#AskFFT

Sunderland

FELIX SKZ RECORD OUT NOW

#FELIX_ShouldISayILoveYouAgain

Blaney

Brobbey

#AskZB

#Lioness

Moscow

Drew Kendall

Yom Kippur

#MCISUN

Hocevar

Full PPR

Blessed Sunday

Triumphal Arch

Sunday Funday

Evanescia

You might like

$OT \ ICS Security engineer by nature but also dab with Agriculture cyber security 🌾🇺🇸 - founder of Ag Defense Group.$

$Established in 2001, infracritical provides and supports private-public relationships, public awareness, and research of our critical infrastructures.$

infracritical

@infracritical

706 Followers