Dieter Sarrazyn

New SANS/GIAC study finds cybersecurity skills gap, not talent shortage, at core of workforce crisis Upcoming SANS/GIAC study finds cybersecurity skills gap, not talent shortage, at the core of workforce crisis.

New SANS/GIAC study finds cybersecurity skills gap, not talent shortage, at core of workforce crisis

Smash the Stack with Swiss precision 🇨🇭💻

Join Corelan’s Stack Exploit Dev course in Zürich, Oct 7-10, 2025. 🚀

www.eventcreate.com/e/sigs-corel...

💛 Pls share 💛

What our students say on the #Corelan Stack course:

🗣️ “Peter will refute about every single thing you might have learned so far related to the topic in other courses… and then teach you it the right way from the ground up.”

See for yourself: 👉🏼 bit.ly/corelan-trai...

IEC62443, NIS2 and security testing - a happy marriage? - Secudea bv When the NIS2 EU Directive came into effect, I wondered what the implications would be for security testing in industrial environments. After all, a large part of the NIS2 directive focuses on supply ...

Have a look at my newest post to learn more whether IEC62443, NIS2 and security testing are or can be a happy marriage.
secudea.be/2025/02/15/i...

yep, true fact...
we used to have snow every year (some decades ago), now we (some of us) are happy when it finally snows, to realize it's gone after a few hours...
The other half doesn't know how to drive a vehicle anymore at that time...

I would not match them, but more like extending the test cases with what is found in the requirements.
But tbh, a good fat/sat approach should already cover all your own security requirements.

True, security requirements should idd be set during design phase and verified. First on paper allowing you to catch low hanging fruit and tailor any testing protocol, second by performing technical tests.

Some throughs on the practical side of FAT/SAT security testing within #industrial environments - secudea.be/2024/12/30/p...
#ICS #OT #FATSAT

(long overdue) wrap-up of the #ISCCPH conference in Copenhagen last November - secudea.be/2024/12/30/i...
#ICS #OT #industrial

*sigh* this has been a good security practice for several decades already (when I was still installing firewalls), so I find it a bit strange that this suddenly becomes a hot topic... are people forgetting the good stuff, what works, the basics?? Is everybody falling for buzz words instead?

Welcome to BlueSky, Andy. @defend-the-future.bsky.social
Miss you buddy, call me sometime.

He's #100 on my ICS/OT Starter Pack
go.bsky.app/SQygf7K

Who else do I need to add?

well... I sure hope other tools would also be possible to be used within segmented networks without needing direct access to the internet to fetch updates...

Microsoft ends development of Windows Server Update Services (WSUS) Microsoft has officially announced that Windows Server Update Services (WSUS) is now deprecated, but plans to maintain current functionality and continue publishing updates through the channel.

What are other OT/ICS security folk thinking about WSUS being deprecated?

I'd expected to see more reaction and alternatives being promoted.

#infosec #ics #ot

www.bleepingcomputer.com/news/microso...

nice :-) let me know when this plan is formalizing :-)

Or to BruCon

I created the ICS/OT Security starter pack. Please give it a follow and let me know if I'm missing anyone.

go.bsky.app/SQygf7K

hi Stephen, missing you in CPH ;-)