Categories
Commentary & Insights

10 recent cyber attacks on the transport & logistics sector

In this post we summarise recent cyber-attacks on transport and logistics operators. Transport and logistics sector overview The transport and logistics sector is responsible for the movement of people and goods. Our definition covers the public and private transport systems, infrastructure, and ancillary services associated with: Our definition of transport and logistics covers the transport […]

Categories
Commentary & Insights

8 recent cyber attacks on the manufacturing industry

In the highly competitive world of manufacturing, the intellectual property of competitors can save adversaries millions of dollars, if not billions, in product development, and shrink time to market timelines considerably. The shutdown of production lines can lead to product shortages that result in consumers switching suppliers, as well as starve manufacturers of revenue in […]

Categories
Commentary & Insights

10 recent cyber-attacks on the telco sector

In this post we summarise recent cyber-attacks on providers of telecommunications services. What are the business risks of cyber-attacks on telecommunication service providers? Cyber-attacks on telcos can have far reaching consequences. The nature of information held on customers can put their personal safety at risk if it’s breached. And outages can prevent connected, critical equipment […]

Categories
Commentary & Insights

9 recent cyber attacks on the water and wastewater sector

This page summarises some of the most recent cyber attacks on water and wastewater utilities that are in the public record. The majority of organisations, of any type, prefer not to publicly report their incidents, so the reality is that more attacks are occurring than we hear about. Tipton, Indiana Date: April 2024Country: United StatesConsequence: […]

Categories
Commentary & Insights

Cyber-Informed Engineering (CIE) vs Consequence Driven, Cyber-Informed Engineering (CCE)

Cyber-Informed Engineering (CIE) and Consequence Driven, Cyber-Informed Engineering (CCE) are concepts developed by the Idaho National Laboratory (INL). A side-by-side comparison of the two is presented in the table below. CIE is a guide to embedding cyber security considerations into cyber-physical systems throughout the engineering lifecycle model, and across business functions. The CIE guide is […]

Categories
Commentary & Insights

Manufacturing under cyber-attack

Cyber incidents were publicly reported at two manufacturing companies over the past few weeks. This comes as cyber security company Dragos reported it had tracked a 50% increase in ransomware attacks against industrial companies in 2023, with manufacturing accounting for 71% of all ransomware attacks. Varta batteries was attacked on 12 February 2024, and steel […]

Categories
Commentary & Insights

Hacktivists tap into vulnerable operational technology

Proving that money and target size aren’t the primary concern for all hackers, a cyber attack by hacktivists on water equipment in the western Ireland area of Erris, County Mayo, left 160 households without a supply for two days [The Record. 12 December 2023]. Hacktivists value impact and headlines over money to promote a political […]

Categories
Commentary & Insights

Insights from a rare case study

An asset-rich organisation, Gloucester City Council uses suppliers to help maintain service delivery. Just as many asset management organisations do. In 2021 they suffered a ransomware attack that presented via an email, mid-conversation, from a supplier that had themselves been compromised. In 2023, the Local Government Association, in collaboration with the council, published a case […]

Categories
Commentary & Insights

Rare look into city council cyber attack and consequences

Gloucester City Council’s ransomware attack case study provides insights and lessons for many

Categories
Commentary & Insights

Let’s torque about smart tool cyber security

Vulnerabilities found with a smart tool highlight some of the risks of relying on technology for critical operations