9 Industria/OT-NIS2 articles, newest first.
Which tools really help, how software should support the Article 23 incident flow, what evidence an MDM gives you and how to keep compliance over time.
Gorka GonzaloFounder & CEOFounded Hodeitek in 2023. 8+ years in pentesting, Red Team, OT/ICS and SOC.
View profile
Internet-connected, unpatched refrigeration controllers are OT assets that almost nobody would inventory. What is known about the new wave and what is worth reviewing.
Gorka GonzaloFounder & CEOFounded Hodeitek in 2023. 8+ years in pentesting, Red Team, OT/ICS and SOC.
View profile
A remote root exploit, conflicting severity ratings, and Ubuntu and RHEL without a fixed kernel: how to prioritize your Linux servers while the patch is pending.
Gorka GonzaloFounder & CEOFounded Hodeitek in 2023. 8+ years in pentesting, Red Team, OT/ICS and SOC.
View profile
How to order the critical INCIBE-CERT advisories on Citrix, Cisco, Veeam and Schneider Electric by affected versions, exposure and patch feasibility.
Gorka GonzaloFounder & CEOFounded Hodeitek in 2023. 8+ years in pentesting, Red Team, OT/ICS and SOC.
View profile
The PHP patch has existed since 21 October. In a plant, the hard part is knowing which devices carry the vulnerable engine inside and what each vendor says about them.
Gorka GonzaloFounder & CEOFounded Hodeitek in 2023. 8+ years in pentesting, Red Team, OT/ICS and SOC.
View profile
An attacker gained root access on an Ivanti Connect Secure appliance with every patch installed. What it means for industrial SMEs that give remote access to their OT network.
Gorka GonzaloFounder & CEOFounded Hodeitek in 2023. 8+ years in pentesting, Red Team, OT/ICS and SOC.
View profilePage 1 of 2 · articles 1–6 of 9