Nick Cano

Vulnerability Analyst II & Researcher @DragosInc

[Nick Cano @nickcno]

I’ll be giving a talk on October 30th for those around in San Diego!

[Layer 8 Masters @Layer8Masters]

Catch @nickcno at the Planet Cyber Sec CISO-CIO Forum as he presents the "Dragos 2023 Infrastructure and Global Cybersecurity Year in Review"!

This talk offers a comprehensive overview of the most significant cyber trends, threats, and lessons learned from the past year. Dive into operational data from professional services engagements, insights on Dragos Threat Group analysis, and trends in OT vulnerability data and assessments.

Enhance your cybersecurity strategy with valuable insights from industry experts! #CyberSecInsights
https://t.co/PukAsdUPJr
#PlanetCyberSec #CyberSecurity #infosec #AI #cyberwarfare #CyberAttack #cyberdefense #CISO #CIO #CISOForum

[Nick Cano @nickcno]

Another YIR in the books!

[Dragos, Inc. @DragosInc]

ICYMI: Last week, Dragos Vulnerability Analysts Logan Carpenter and Nick Cano gave us a data-driven look at vulnerabilities in operational technology environments and recommended which to prioritize. Watch On-Demand → https://t.co/xuraEx6eNz #2023yearinreview #DragosIntel

[Nick Cano @nickcno]

@nickcano93 On the bright side, you managed to take nickcano[.]com 💀

[Jimmy Wylie @mayahustle]

The team and I looked at COSMICENERGY and I’m excited to finally share the results publicly. I hope you read the report, but I wanted to add some informal takeaways from the analysis.
 (1/9) #ICS #malware
https://t.co/QXTF3r9reh

[Dragos, Inc. @DragosInc]

Read our updated analysis of MOUSEHOLE capabilities, a component of the ICS/OT attack framework #PIPEDREAM, and the common OPC UA protocol it targets. https://t.co/DbHXLO5p6q #OTmalware #DragosIntel #ICSsecurity

[Nick Cano @nickcno]

It’s almost time for our 2022 YIR Vulnerability Briefing!

[Dragos, Inc. @DragosInc]

Join Dragos vulnerability analysts on April 18 for valuable insights on which ICS/OT advisories and vulnerabilities should be prioritized to better secure your industrial environment. Register now → https://t.co/ao2aGJ9g30 #ICSsecurity #OTsecurity #DragosIntel #yearinreview

[Sam Wilson @AeroCyberSam]

Incredible to see that Dragos tracks more vulnerabilities than any other OT Cyber vendor. I know who I would choose to partner with! #OTcybersecurity #vulnerabilitymanagement

[Dragos, Inc. @DragosInc]

Now Available - The Dragos 2022 ICS/OT #Cybersecurity Year in Review! Read the highlights in our latest blog - we discuss the latest threat intelligence on adversaries targeting ICS/OT and offer proactive recommendations to stay ahead of potential threats: https://t.co/sVaXQ7wu4R

[Andrew (Unitless Measure) @[email protected] @acedrew]

Reid Wightman (@ReverseICS) explaining various ways logic gets deployed into industrial controllers and how 3rd party tooling like #CodeSyS can be exploited #S4x23

[Jimmy Wylie @mayahustle]

DISC2022 is over. Almost 5 years in and I’m still enjoying working with this team. Real proud of how far we’ve come.
But, my social cup is empty, so time for self-care.

[Robert M. Lee @RobertMLee]

Proud to announce that @DragosInc is now a CVE Numbering Authority (CNA) advancing the ICS/OT vulnerability discussion with a focus on what actually matters versus just what’s vulnerable https://t.co/SXa4y81hBW

[Dragos, Inc. @DragosInc]

Join us November 5 at the Dragos Industrial Security Conference (DISC) in Hanover, MD. #DISC2022 is an exclusive event for industrial asset owners/operators to hear the latest findings of the Dragos threat intel & operations teams. Register your interest: https://t.co/VoZNHeUjgR

[Dragos, Inc. @DragosInc]

Dragos’s @secureloon provides an analysis of a password “cracking” software that exploited an unknown #vulnerability in targeted industrial devices. #DragosIntel reported the vulnerability to the vendor, who has since released a patch to fix the issue: https://t.co/2x8zhaYzSO

[Robert M. Lee @RobertMLee]

Join the @DragosInc team involved in analyzing PIPEDREAM on April 26th and 27th (same talk two sessions to be friendlier for time zones) for an in depth look and analysis at the newest ICS malware https://t.co/bxgPMwlYxz

[Sam Hanson @__samhanson__]

It’s been a busy last few weeks!

Check out our analysis on PIPEDREAM - the 7th malware family to target industrial control systems.

It was a fun (at times crazy) project to work on!

https://t.co/Yq9zBc2bdk

[Robert M. Lee @RobertMLee]

Today the US Government announced a new ICS malware that has been designed to disrupt industrial operations. CISA/FBI/NSA put out a great advisory; also I appreciate the callout/thanks to @DragosInc in the advisory - we call the malware PIPEDREAM https://t.co/ZuqwKzzYq3

[Little Bobby @_LittleBobby_]

Basic Scanning Threat (BST) | https://t.co/K2EarFdNbf