What I'm Reading 11/6/2022

Well, the summer haitus went on much longer than intended. Work got extremely busy and I just didn't have the time or energy, but now I'm back (even though no one reads this blog).

Securing OT That Can’t Be Patched

https://www.itsecurityguru.org/2022/08/17/securing-ot-that-cant-be-patched/?utm_source=rss&utm_medium=rss&utm_campaign=securing-ot-that-cant-be-patched

Critical infrastructures cannot be secure when critical equipment isn’t 

https://www.controlglobal.com/blogs/unfettered/critical-infrastructures-cannot-be-secure-when-critical-equipment-isnt/

Security Culture: An OT Survival Story

https://www.darkreading.com/operations/security-culture-an-ot-survival-story

Engineering workstation attacks on industrial control systems double: Report

https://www.csoonline.com/article/3678352/engineering-workstation-attacks-on-industrial-control-systems-double-report.html#tk.rss_all

CISA releases cybersecurity performance goals to reduce risk and impact of adversarial threats

https://www.csoonline.com/article/3678191/cisa-releases-cybersecurity-performance-goals-to-reduce-risk-and-impact-of-adversarial-threats.html#tk.rss_all

CISA's critical infrastructure performance goals win praise, but questions remain about effectiveness

https://www.cyberscoop.com/cisa-performance-goals-operational-technology/

The 8 Best Vintage Self-Improvement Books

https://www.artofmanliness.com/living/reading/the-8-best-vintage-self-improvement-books/

Social Engineering Kill–Chain: Predicting, Minimizing & Disrupting Attack Verticals

https://ahead.feedly.com/posts/social-engineering-kill-chain-predicting-minimizing-and-disrupting-attack-verticals

OpenSSL dodges a security bullet

https://www.zdnet.com/article/openssl-dodges-a-security-bullet/#ftag=RSSbaffb68

How to securely manage LAPS on a Windows network

https://www.csoonline.com/article/3678293/how-to-securely-manage-laps-on-a-windows-network.html#tk.rss_all

Security Leaders Share 5 Steps to Strengthen Cyber Resilience

https://www.darkreading.com/microsoft/security-leaders-share-5-steps-to-strengthen-cyber-resilience

Federal bans aren't stopping US states from buying forbidden Chinese kit

https://www.theregister.com/2022/10/28/federal_bans_china_law/

I'll try and get back on the weekly schedule in the future.