Eric Byres

Eric is widely recognized as one of the world’s leading experts in the field of OT, IT and IoT software supply chain security. He is the inventor of the Tofino Security technology – the most widely deployed OT-specific firewall in the world. When not setting the product vision, or speaking at a conference, Eric can be found cranking away on his gravel bike.

Three Quick Takeaways from Biden’s National Cybersecurity Strategy

2 min read

#supplychainsecurity Regulatory Requirements EO14028

Three Quick Takeaways from Biden’s National Cybersecurity Strategy

By Eric Byres on March 2, 2023

NOTE: We were going to publish our second blog of the S4x23 SBOM Challenge today. However, the new National Cybersecurity Strategy was released this morning, and we thought that...

A Flurry of Regulatory Action and the Need for SBOMs

5 min read

Regulatory Requirements Supply Chain Management SBOM VEX

A Flurry of Regulatory Action and the Need for SBOMs

By Eric Byres on October 12, 2022

Executive Order 14028 on Improving the Nation's Cybersecurity was issued in May of 2021 and provided a roadmap for a series of regulatory initiatives that government agencies (and anyone...

2 min read

#supplychainsecurity hacking ICS 3rd Party Components industrial control system

How Russia Might Come After the West

By Eric Byres on February 25, 2022

The DDoS attack surge that began last week against Ukrainian government agencies and banks was a bad sign. I was actually preparing a post and wondering if it was appropriate to call out...

Sorry Blackberry: You Are Part of the Supply Chain

2 min read

Regulatory Requirements Vulnerability Tracking Supply Chain Management SBOM EO14028 VEX

Sorry Blackberry: You Are Part of the Supply Chain

By Eric Byres on November 2, 2021

Today, reporters Betsy Woodruff Swan and Eric Geller at Politico published a story: “BlackBerry resisted announcing major flaw in software powering cars, hospital equipment.” They outline...

4 min read

#supplychainsecurity

Kaseya Supply Chain Attack on SMBs

By Eric Byres on July 6, 2021

Last week I participated in a panel discussion on the Executive Order’s Impact On Embedded Device Security hosted by ISSSource.com. I signed off with a comment about my biggest worry: ...

Unpacking EO14028: Improving the Nation's Cybersecurity - Pt. 4

5 min read

ICS/IoT Upgrade Management vulnerability disclosure Regulatory Requirements Vulnerability Tracking Supply Chain Management SBOM EO14028

Unpacking EO14028: Improving the Nation's Cybersecurity - Pt. 4

By Eric Byres on May 26, 2021

Section 3 - Less Fog, More Cloud Section 3: Modernizing Federal Government Cybersecurity of the Executive Order is all about government agencies moving to the cloud and doing it right. If...

Unpacking EO14028: Improving the Nation's Cybersecurity - Pt. 3

3 min read

ICS/IoT Upgrade Management vulnerability disclosure Regulatory Requirements Vulnerability Tracking Supply Chain Management SBOM EO14028

Unpacking EO14028: Improving the Nation's Cybersecurity - Pt. 3

By Eric Byres on May 21, 2021

So you don’t sell to the Feds… Today’s blog is going to take a break from analyzing a specific section of the Executive Order on Improving the Nation’s Cybersecurity and focus on who will...

Unpacking EO14028: Improving the Nation's Cybersecurity - Pt. 2

3 min read

ICS/IoT Upgrade Management vulnerability disclosure Regulatory Requirements Vulnerability Tracking Supply Chain Management SBOM EO14028

Unpacking EO14028: Improving the Nation's Cybersecurity - Pt. 2

By Eric Byres on May 18, 2021

Removing Barriers to Sharing Threat Information On Friday we dissected Section 4: Enhancing Software Supply Chain Security of the new Executive Order on Improving the Nation’s Cybersecurity...

Unpacking EO14028: Improving the Nation's Cybersecurity - Pt. 1

4 min read

ICS/IoT Upgrade Management vulnerability disclosure Regulatory Requirements Vulnerability Tracking Supply Chain Management SBOM EO14028

Unpacking EO14028: Improving the Nation's Cybersecurity - Pt. 1

By Eric Byres on May 14, 2021

Late Wednesday night President Biden signed the Executive Order on Improving the Nation’s Cybersecurity. Compared to any Executive Order (EO) I’ve seen, this is a massive and complex...

Industrial Defender and aDolus Partner to Improve ICS Supply Chain Security

2 min read

#supplychainsecurity Partnership Press-release

Industrial Defender and aDolus Partner to Improve ICS Supply Chain Security

By Eric Byres on January 19, 2021

Industrial Defender’s integration with the aDolus FACT™ platform ensures updates are valid, tamper-free, and safe to install aDolus Technology Inc., a global authority on software...

Loading more posts

No more posts to load