Jan Hoff

Keeping critical infrastructures secure since 2009. Likes electricity - any voltage level. #ICS #SCADA #DFIR #KRITIS

[Jan Hoff @OT_unplugged]

#CriticalInfrastructures require more hackers with defense in mind. Hackbacks are not the solution!

[E.DSO @EDSO_eu]

“Defense in depth requires testing in depth” - industry is good in #engineering & #IT but there’s a #SkillGap in #CyberSecurity & #SocialEngineering, #SecurityTesting should be the norm not the exception - @innogy_en ’s #EthicalHacker Jan Hoff at #CyberGrids19

[Robert M. Lee @RobertMLee]

Phenomenal @defcon talk by @mayahustle on further analysis and testing of PIPEDREAM - the first cross industry scalable ICS/OT disruptive malware. https://t.co/Ni1nievbZ7

[Sarah Fluchs @SarahFluchs]

Der @SuK_Community CfC läuft seit Mai.
Was einreichen? Was interessiert die Zielgruppe - Automatisierer, die sich mit Security beschäftigen (müssen) - unseres neuen Kongresses?

Darüber hat sich der Programmbeirat Gedanken gemacht. Ich erkläre sie hier:
https://t.co/2OrIT2ejvR

[Security unter Kontrolle @SuK_Community]

Große Neuigkeiten!

1) Wir haben ein Kongressdatum
2) Unser Call for Contributions (CfC) beginnt heute:
https://t.co/Ns5HImGl3K

Alle Einreichungen werden von unserem Programmbeirat begutachtet. Wir freuen uns auf eure Ideen!🤗

[Cybersecurity and Infrastructure Security Agency @CISAgov]

With @DOE_CESER, @FBI, & @NSACyber, we published a joint advisory on APT cyber tools targeting #ICS & #SCADA devices. Critical infrastructure organizations – especially in the energy sector – should review our recommended proactive mitigations and actions: https://t.co/QYjX8folCk

[gridX @getgridX]

⚡️🏙 A #cybersecurity incident in #energysystems could leave the population immobile, incommunicado or isolated. Learn from @mehgrmlhmpf & @philippfranke in our next webinar how we can reduce this risk and why it isn't just the responsibility of IT experts https://t.co/jOQ5wY6Fdn

[Jan Hoff @OT_unplugged]

@perceptic0n Lenovo T/X Serie als refurb von Leasingrückläufern. Leider etwas Glücksspiel mit dem Zustand. Gute Erfahrungen mit AFB gemacht als Reseller.

[Jan Hoff @OT_unplugged]

Happy to have provided input to gridX's report. Cybersecurity and energy transition can only happen together. Preparation, Detection and Response must be on the agenda for all players. #criticalinfrastructure #energy #cybersecurity #interoperability #energytransition

[gridX @getgridX]

🪢 Interoperability makes grid operations more reliable, affordable & sustainable. But we can't have #interoperability without #cybersecurity. Hear from experts @mehgrmlhmpf & @jhedev in our report to learn how cybersecurity enables the #energytransition: https://t.co/ghXF25AzZq

[gridX @getgridX]

🪢 Interoperability makes grid operations more reliable, affordable & sustainable. But we can't have #interoperability without #cybersecurity. Hear from experts @mehgrmlhmpf & @jhedev in our report to learn how cybersecurity enables the #energytransition: https://t.co/ghXF25AzZq

[Sarah Fluchs @SarahFluchs]

The Top 20 Secure PLC Programming Practices are published!
Inspired by @scadateer's S4x20 talk, initiated by @digitalbond, led by @ControlsCyber & me, supported by @ISA_Interchange GCA - and I hope now shared widely by all of you!

FAQ & links on my blog:
https://t.co/FsY34hIeHf

[Jan Hoff @OT_unplugged]

I presented on @MITREattack, attackgraphs and #ICS environments in today's #EUATTACKworkshop. Many thanks to the organizers and presenters. An awesome format with many inspirations.

Find my slides and content at https://t.co/zpt8sLA0no

[Amprion @Amprion]

Im europ. #Stromnetz beobachten wir immer häufiger kurzzeitige #Frequenzabweichungen zur vollen Stunde, meist um 6 od. 21 Uhr, ohne dass eine Störung vorliegt. Wo die Ursache des Phänomens liegt und an welcher Lösung die #ÜNB arbeiten: https://t.co/x7PFH4RPZT
#Netzfrequenz

[CERT-EU @CERTEU]

The 7th EU MITRE ATT&CK® Community Workshop is taking place on 1-2 June.💪💪

Details and registration 👉 https://t.co/env2bX0yYc

@circl_lu @FDezeure @CycatP

[Freddy Dezeure @FDezeure]

The agenda of the EU ATT&CK Workshop on 1-2 June is online now. https://t.co/Zwwohx3FiF. Packed with inspiring lightning talks from the community. Participation free but registration required. @MITREattack @CycatP @sigma_hq @circl_lu @CERTEU @MITREengenuity

[Michael Weiss @michaeldweiss]

It was sabotage, no cyberattack. And note American and Israeli intel confirming it to NYT. Mossad’s penetration of Iran is extensive.
https://t.co/EIB5Hwim42

[Jan Hoff @OT_unplugged]

Happy to see some analysis on cybersecurity for the distribution grid by the GAO.
Key message: the "grid" should be as well protected as generation/transmission by policy makers and operators. Critical electric infrastructure has a long supply chain. https://t.co/kWNIWuPGaO

[hasherezade @hasherezade]

I started creating a free #MalwareAnalysis training: https://t.co/Glofblatut - what do you think?

[Freddy Dezeure @FDezeure]

7th EU ATT&CK Workshop on 1-2 June. https://t.co/Zwwohx3FiF. Updates from @MITREattack, launching @CycatP, exciting news from @sigma_hq and best practices presented by peers. Participation free but registration required. @circl_lu @CERTEU @MITREengenuity

[Jan Hoff @OT_unplugged]

@SarahFluchs @MITREattack Thanks for sharing 🤓

[Sarah Fluchs @SarahFluchs]

Automatically generated @MITREattack attack graphs can facilitate tabletops, risk analyses, or serve as source of inspiration that is more visual, more sophisticated &more individual than your usual threat catalogue.
tl;dr: Check out @mehgrmlhmpf's thesis!
https://t.co/c8ZeM2ElQs

[@mikko @mikko]

OVH, the largest hosting provider in Europe, had a major fire in one of their data centers.