Kevin Owens

IT Cybersecurity. Cybersecurity for Industrial Control Systems (ICS). Securing critical infrastructure is my passion! I always follow back!

[Kevin Owens @Kevin_ICS]

⚠️ Iran tensions impact U.S. water utilities.

Not theoretical. Access already gained via exposed remote access and shared credentials.

No exploit needed.

Expect login attempts tied to IRGC.

If someone can log in, they don’t need to break in.

Remote access locked down today?

[Kevin Owens @Kevin_ICS]

It’s World Password Day today! That’s where you change all of your passwords.

Remember to try to use long passphrases that you can remember. Length is more important than complexity.

[Kevin Owens @Kevin_ICS]

Join us for an exclusive livestream event on control engineering & OT security.
💡 Is AI the future of control engineering & OT security? 🤔 Find out as industry leaders Ralph Langner & Kevin Owens share insights.
Monday@10 am Eastern Time

Register now: https://t.co/ssbec1ZVwk

[Kevin Owens @Kevin_ICS]

@kadavy I signed up!

[gabsmashh @gabsmashh]

found this on reddit.

[Matthew Green @matthew_d_green]

Why Apple’s announcements today are a big deal, a thread. 1/

[Lisa Forte @LisaForteUK]

Ransomware actors when a victim won’t pay the ransom:

[LetsDefend @LetsDefendIO]

Logs Cheat Sheet

[Kevin Owens @Kevin_ICS]

@TriciaKicksSaaS my cybersecurity awareness month tip is that you should always check your email address before sending your message to anyone with your personal information to ensure your privacy.

[𝔅͛𝔯͛𝔦͛𝔞͛𝔫͛ ͛𝔚͛𝔥͛𝔢͛𝔩͛𝔱͛𝔬͛𝔫͛ @brianwhelton]

Power over Ethernet

[Jake Williams @MalwareJake]

Security vendors demonstrating how their products "would stop the Uber breach."

[Kevin Owens @Kevin_ICS]

@madzadev It depends on the career that a student is interested in. C is critical for programming, especially reverse engineering. Not C++ or C#, just good old-fashioned C. Too many colleges/universities have dropped teaching C, which is a shame.

[Niki “No Longer Here” Tonsky @nikitonsky]

Can’t wait for AI to take over the world

[Jerry Gamblin @JGamblin]

The House passed a defense spending bill saying you can't sell software to the DoD that has *any* known CVEs in it.

https://t.co/6zO2pPgdwq

[Seb 🇧🇦 @LinuxSeb]

When you’re first learning Linux and someone tells you to run sudo rm -rf /

[Kevin Owens @Kevin_ICS]

@NxtFukingLevel @getvideobot

[Kevin Owens @Kevin_ICS]

@markelarson01 @repairfairy @WideEyedCurious @LakotaMan1 The joys and dangers of primitive camping. No people around, more wildlife.

[Kevin Owens @Kevin_ICS]

@markelarson01 @repairfairy @WideEyedCurious @LakotaMan1 I camped in a primitive spot in Custer State Park many years ago. In the middle of the night I heard noises of bison. My wife woke up and I told her to go back to sleep, I did not tell her what it was. In the morning we saw hundreds of bison hoof prints in the soft ground.

[Kevin Owens @Kevin_ICS]

3) All hyperlinks to external websites should be disabled/broken; and
4) All attachments from external emails should be sandboxed.

If those things are done correctly, that will reduce a lot of risks at minimal cost.

[Kevin Owens @Kevin_ICS]

Yet another wastewater utility hit by ransomware. No effect to the computers running the control systems and all customer data is most likely being done by a third party offsite.

#awia #wastewater #ics #criticalinfrastructure #ransomware #cybersecurity

https://t.co/OS12nYbYv5