SAVE THE DATE FOR THE 2018 FALL MEETING IN CINCINNATI!
The 2018 Fall Meeting will be held August 28 - 30, 2018, in Cincinnati, Ohio. Specific venue information will be made available as soon as possible.
Friday, May 11, 2018 - 12:04
NIST is releasing a publication that will help organizations prepare better against potentially destructive attacks to the collection of hardware and firmware components of a computer system, also called the platform. Special Publication 800-193, Platform Firmware Resiliency Guidelines provides technical guidelines and recommendations supporting resiliency of platform firmware and data against such attacks.
Friday, May 4, 2018 - 14:36
This updated malware analysis report is a follow-up to the original malware analysis report titled MAR-17-352-01 HatMan - Safety System Targeted Malware that was published December 18, 2017, on the NCCIC/ICS-CERT website.
Tuesday, April 17, 2018 - 18:48
This paper is intended to provide an understanding of the possible effects of the April 6, 2019 GPS Week Number Rollover on Coordinated Universal Time derived from GPS devices.
Tuesday, April 10, 2018 - 10:21
The National Institute of Standards and Technology (NIST) released the initial public draft of NIST Special Publication 800-160 Volume 2, Systems Security Engineering: Cyber Resiliency Considerations for the Engineering of Trustworthy Secure Systems.
Wednesday, March 21, 2018 - 10:29
The United Kingdom's Department for Transport released “Code of Practice: Cyber Security for Ships.” Additional information and the document are available at: http://www.americanshipper.com/main/news/uk-releases-code-of-practice-for-maritime-cyber-se-69046.aspx?source=Big4.
Tuesday, September 19, 2017 - 11:21
The Initial Public Draft of NIST Special Publication (SP) 800-53 Revision 5, "Security and Privacy Controls for Federal Information Systems and Organizations" is now available for public comment.
Full details and links to Draft SP 800-53 Revision 5 can be found on the NIST CSRC Draft Publications page:
Tuesday, August 22, 2017 - 11:24
ICS-CERT released the FY2016 Industrial Control Systems Assessment Summary Report.
This report can be found on the ICS-CERT web site, on the "Assessments" page and on the "Other Reports" page.
Thursday, July 13, 2017 - 11:32
Trend Micro has released a report titled "View Hacker Machine Interface: The State of SCADA HMI Vulnerabilities" at the following URL: https://www.trendmicro.com/vinfo/us/security/news/vulnerabilities-and-exploits/the-state-of-scada-hmi-vulnerabilities.
Wednesday, May 31, 2017 - 09:01
NIST Announcing the release of draft Special Publication (SP) from the 1800 Special Publication series -- Draft NIST SP 1800-8, Securing Wireless Infusion Pumps in Healthcare Delivery Organizations is available for public comment.
Details and links to Draft Special Publication (SP) 1800-8, Securing Wireless Infusion Pumps in Healthcare Delivery Organizations; can be found on the NIST CSRC Draft publications page at: <http://csrc.nist.gov/publications/PubsDrafts.html#SP-1800-8>
Wednesday, May 17, 2017 - 10:36
NCCIC/ICS-CERT released an ICS-CERT Year in Review 2016, which can be accessed at https://ics-cert.us-cert.gov/Year-Review-2016. The Year in Review summarizes the ICS-CERT activities and achievements of 2016.
Wednesday, March 22, 2017 - 13:26
This NCCIC/ICS-CERT white paper highlights a number of the destructive malware families analyzed by ICS-CERT and gives recommendations for victims on the best way to combat each specific family. Length is 4 pages. March 2017.
Monday, March 13, 2017 - 16:44
CyberX has discovered a new, large-scale cyber-reconnaissance operation targeting a broad range of targets in the Ukraine. Because it eavesdrops on sensitive conversations by remotely controlling PC microphones – in order to surreptitiously “bug” its targets – and uses Dropbox to store exfiltrated data, CyberX has named it “Operation BugDrop.”
Thursday, February 23, 2017 - 10:53
This paper is intended as a Best Practices Guide to be used for Improving the operations and development of Global Positioning System (GPS) equipment used by Critical Infrastructure.
Friday, January 6, 2017 - 13:07