Chaitanya Bisale

Head of Service Lifecycle Management for Energy Automation Business @Siemens. #DigitalGrid #Cybersecurity #ICSSecurity #EnergyAutomation. My private account.

[Siemens @Siemens]

Join @NVIDIA CEO Jensen Huang, and other top industry and tech thought leaders June 29 at #SiemensAccelerate

[Siemens @Siemens]

Are you ready to accelerate digital transformation? @BuschRo, our President and CEO, is! 🚀 Join him, and other top industry and tech leaders, on 29 June 5pm CEST at #SiemensAccelerate ✨ Click to register now!

[Roland Busch @BuschRo]

Join us on June 29 when we’ll be live with @nvidia, @BMW, @ATT, @merckgroup, among others, to talk about how together we can accelerate #Digitaltransformation

[Siemens @Siemens]

Get ready to accelerate change! Soon you will find out how to accelerate your business and sustainable innovation. Join us, on 29 June, as we unlock the potential of #DigitalTransformation; making it fast, easy and scalable.

[Natalia Oropeza @NataliaOropezaG]

Hundreds of high-ranking international military and politicians will gather in Munich this weekend at the Munich Security Conference. All major foreign and security policy issues are discussed at the #MSC2022. Meanwhile, some are increasingly talking abou…https://t.co/kIn1siqskU

[Siemens Press Office @siemens_press]

2021 is coming to an end. Since it's not easy to meet in person these days, we tried to combine the best of our real and digital home office worlds in this year's seasons greetings for you. We wish you and your families #HappyHolidays and all the best for 2022 🌟 #staysafe

[Chaitanya Bisale @ChaiBisale]

Quoting from article: "An organization that thinks its Log4Shell problem is solved may let down its guard.

...the biggest threat here is that people have already gotten access and are just sitting on it, and even if you remediate the problem somebody’s already in the network”

[WIRED @WIRED]

“It is by far the single biggest, most critical vulnerability ever.” https://t.co/rzfW0MJkqj

[Chaitanya Bisale @ChaiBisale]

#Log4shell affects none of our #energyautomation product lines #SIPROTEC, #SICAM, #Reyrolle.

Also, SIMATIC #WinCC V7.4 is no longer the affected products list in our updated advisory.

#cybersecurity #icssecurity

[Chaitanya Bisale @ChaiBisale]

The listing of products and systems affected by #log4shell maintained by the Netherlands Cybersecurity Center (NCSC-NL) on this github site is impressive. Even covers #ICS vendor announcements - including ours https://t.co/LUNbBIC5Q8
https://t.co/eUaCaSTWwz

[Steve Gibson @SGgrc]

“Log4j & Log4Shell” Free online vulnerability checker by Huntress Labs. It's Security Now's GRC shortcut of the week:

grc[dot]sc/849

The page issues each visitor a unique GUID to be used in forms, queries, etc. They monitor for incoming LDAP queries which can then be looked up.

[Chaitanya Bisale @ChaiBisale]

#Log4Shell quoting the crux of the needed fix from the article: " CVE-2021-44228 can only be abused if the log4j2.formatMsgNoLookups option in the library’s configuration is set to false."

[Siemens Deutschland @SiemensDE]

#ZusammenGegenCorona – wir sind dabei!

#LasstEuchImpfen

[Chaitanya Bisale @ChaiBisale]

@Paul4innovating @Paul4innovating Incident Response and Disaster Recovery are very much within the scope of the Peoples / Processes / Products triad. Of course, a true blackout is not likely to happen with a single cyber incident. Nevertheless, one must plan for the worst case with the 3Ps.

[Chaitanya Bisale @ChaiBisale]

@fogoros @Siemens @pinogjunco @Hsaraiva35 @Jan_Cybersec_AI @MichaelDeckertE If that can be pulled off faster than Standards, I'll be positively surprised.

[Chaitanya Bisale @ChaiBisale]

@Siemens @pinogjunco @Hsaraiva35 @Jan_Cybersec_AI @MichaelDeckertE A6 #CybersecurityChat
Active collaboration between industry and the global energy ecosystem is also crucial for #gridsecurity. For example, Siemens partners with operators, NATO/EU bodies, and academics for building trust - and help minimize the risk of blackouts! #CharterOfTrust

[Chaitanya Bisale @ChaiBisale]

@Kevin_ODonovan @Siemens Yes, that's why Resiliency should be the true aim - the ability to carry on despite setbacks on a subsystem level.
A3 #CybersecurityChat

[Chaitanya Bisale @ChaiBisale]

@fogoros @Siemens @theandresgon A5 #CybersecurityChat
Rail electrification is also a crucial component of the mobility system, where cybersecurity plays an increasingly important role.

[Chaitanya Bisale @ChaiBisale]

@ward_caro @Siemens lol, the true way to avoid blackouts! maybe... :-)

[Chaitanya Bisale @ChaiBisale]

@mirko_ross @Siemens @Hackwerk_io @TylerCohenWood Yes, security patch management and vulnerability management are absolute musts for an ISO's policies. Prerequisite of course being Asset Inventory management for all power grid equipment.

[Chaitanya Bisale @ChaiBisale]

@fogoros @Siemens @alinamatyukhina @IIoT_World @DemiEpuran @FogorosAndrei @FogorosR @PaulFogoros @Fogoross Typo: IEC 62351 :-)

[Chaitanya Bisale @ChaiBisale]

@fogoros @Siemens @alinamatyukhina @IIoT_World @DemiEpuran @FogorosAndrei @FogorosR @PaulFogoros @Fogoross Endpoints are the last frontier - getting them secured should be top priority, especially in the case of IIoT meeting critical infrastructure! Hence the case for interoperable #ICSsecurity standards such as IEC 26351.