Netcrook
#OT security
Deadlock’s Victim Listing Puts a Quiet Engineering Firm Under Loud Extortion Pressure
A public victim post is not proof of breach, but it is a sharp reminder that ransomware crews use naming and exposure as pressure tools against firms that sit close to both IT and operational systems.
When Logistics Goes Digital, the Real Attack Surface Moves Into Operations
Transport and logistics gain speed from digitization, but the same connectivity can widen cyber risk across OT, suppliers, and remote access paths that keep goods moving.
OT Security Is Moving from Visibility to Verification
A new Claroty and Frenos partnership points to a growing industrial focus on testing whether controls actually hold against realistic attack paths, without putting live production at risk.
Money Flows to the Quiet Front Line of the Quantum Transition
A new seed round for QIZ Security points to a growing security market built around one hard problem: finding every place where vulnerable cryptography still hides inside critical infrastructure.
Government Chatbots Need More Than Good Manners: The Security Test Behind GenAI in Public Services
Public-sector assistants built with GenAI are only trustworthy if they survive adversarial testing, readable metrics, and expert review before citizens ever rely on them.
When a Relay Leaks Its Own Identity, the OT Map Gets Easier to Draw
A hard-coded credential issue in Schneider Electric’s Easergy MiCOM Px40 relays shows how a modest-looking SNMP flaw can still matter in critical infrastructure.
OpenPLC v3 Flaw Turns a Simple Upload Into a Dangerous Build-Chain Escape
A critical file-path weakness in legacy OpenPLC software can let an authenticated user plant files where they should never land, then ride the normal compile-and-start flow toward native code execution.
Manufacturing Draws the Sharpest Edge of Ransomware Pressure
Sector-level threat intelligence points to manufacturing as a persistent extortion magnet, where business downtime can carry more leverage than data theft alone.
OT Security’s Power Shift Exposes a New Kind of Weak Link
A consolidation wave in industrial cybersecurity and a separate SaaS integration incident both point to the same lesson: in modern security stacks, the trust boundary is often the real target.
NATO Catalogued a Security Vendor - and Exposed How Hard “Trusted” Really Is
Forescout’s addition to a NATO cybersecurity catalogue looks simple on paper, but the technical meaning is narrower: a listing for sensitive deployments, not a blanket promise of security.
Cloud Perimeters Meet Their Blind Spot in a Dialogflow CX Trust-Boundary Break
A reported flaw in Google Cloud’s conversational agent platform raises a hard question for enterprise AI: what happens when a managed workflow can move data outside the controls meant to contain it?
Inside the Chatbot Backdoor Risk: Why a Dialogflow CX Code Block Could Become a Phishing Engine
A reported flaw in Google Cloud Dialogflow CX shows how trusted automation inside conversational AI can become a high-risk control point, not just a convenience feature.
Google’s Camera-Check CAPTCHA Raises the Stakes for Bots - and for Privacy
A new hand-gesture verification idea inside reCAPTCHA points to a more invasive anti-bot future, but it also invites replay tricks, consent questions, and accessibility tradeoffs.
The Factory’s Real Firewall: Why Industrial Innovation Starts with Security
In manufacturing, cybersecurity is not just a control layer - it is what makes cloud, AI, IoT, and digital production workable without turning efficiency into fragility.
When the Factory Learns to Think, the Network Becomes the Weakest Joint
Physical AI is being framed as the next step for manufacturing SMEs in Piemonte and Valle d’Aosta, but the real test is whether data, robots, and OT-connected systems can be modernized without expanding cyber risk.
When Plants Go Dark: Why OT Visibility Has Become the New Industrial Insurance
In industrial environments, seeing the assets, connections, and changes inside OT networks is no longer just a compliance task - it is a practical condition for keeping operations running.
How a Port Can Go Dark Without Touching the Control Room
The Porto di Ancona case points to a harsh lesson for critical infrastructure: cloud identity failures can disrupt operations even when industrial systems are reportedly untouched.
DHS Tries to Rebuild the Quiet Machinery Behind U.S. Infrastructure Defense
A proposed federal framework could reshape how government and private operators share sensitive threat information, but its real test is whether it restores trust without losing confidentiality.
When a Desktop Robot Learns to Talk Offline, the Risk Surface Moves Closer to Home
Reachy Mini’s move to all-local conversational AI is a useful privacy signal, but it also shows how embodied AI shifts trust from the cloud to the device, the host machine, and the software around them.
Water Plants Under Pressure: Why Exposed Control Gear Still Draws Strategic Attention
Water and wastewater networks remain attractive targets when HMIs, PLCs, and weak segmentation leave operational technology easier to reach than it should be.