Eric Byres

Eric is widely recognized as one of the world’s leading experts in the field of OT, IT and IoT software supply chain security. He is the inventor of the Tofino Security technology – the most widely deployed OT-specific firewall in the world. When not setting the product vision, or speaking at a conference, Eric can be found cranking away on his gravel bike.

Unpacking EO14028: Improving the Nation's Cybersecurity - Pt. 3

3 min read

ICS/IoT Upgrade Management vulnerability disclosure Regulatory Requirements Vulnerability Tracking Supply Chain Management SBOM EO14028

Unpacking EO14028: Improving the Nation's Cybersecurity - Pt. 3

By Eric Byres on May 21, 2021

So you don’t sell to the Feds… Today’s blog is going to take a break from analyzing a specific section of the Executive Order on Improving the Nation’s Cybersecurity and focus on who will...

Unpacking EO14028: Improving the Nation's Cybersecurity - Pt. 2

3 min read

ICS/IoT Upgrade Management vulnerability disclosure Regulatory Requirements Vulnerability Tracking Supply Chain Management SBOM EO14028

Unpacking EO14028: Improving the Nation's Cybersecurity - Pt. 2

By Eric Byres on May 18, 2021

Removing Barriers to Sharing Threat Information On Friday we dissected Section 4: Enhancing Software Supply Chain Security of the new Executive Order on Improving the Nation’s Cybersecurity...

Unpacking EO14028: Improving the Nation's Cybersecurity - Pt. 1

4 min read

ICS/IoT Upgrade Management vulnerability disclosure Regulatory Requirements Vulnerability Tracking Supply Chain Management SBOM EO14028

Unpacking EO14028: Improving the Nation's Cybersecurity - Pt. 1

By Eric Byres on May 14, 2021

Late Wednesday night President Biden signed the Executive Order on Improving the Nation’s Cybersecurity. Compared to any Executive Order (EO) I’ve seen, this is a massive and complex...

Industrial Defender and aDolus Partner to Improve ICS Supply Chain Security

2 min read

#supplychainsecurity Partnership Press-release

Industrial Defender and aDolus Partner to Improve ICS Supply Chain Security

By Eric Byres on January 19, 2021

Industrial Defender’s integration with the aDolus FACT™ platform ensures updates are valid, tamper-free, and safe to install aDolus Technology Inc., a global authority on software...

2 min read

#supplychainsecurity ICS Supply Chain Management

Wrapping Up 2020 with Dale Peterson

By Eric Byres on January 7, 2021

Wrapping up my year on December 31, I was delighted to join ICS cybersecurity luminary Dale Peterson for his December: ICS Security Month in Review episode of the Unsolicited Response...

Three Things the SolarWinds Supply Chain Attack Can Teach Us

4 min read

hacking ICS Supply Chain Management SBOM

Three Things the SolarWinds Supply Chain Attack Can Teach Us

By Eric Byres on December 18, 2020

Just in case you missed it, a software supply chain attack on the US government and industries is consuming the waking hours of everyone involved in cyber security this week. The attack...

ReFirm Labs and aDolus Partner to Improve IoT Supply Chain Security

2 min read

#supplychainsecurity Partnership Press-release

ReFirm Labs and aDolus Partner to Improve IoT Supply Chain Security

By Eric Byres on September 3, 2020

aDolus Technology Inc., a global authority on software intelligence for critical infrastructure, and ReFirm Labs, a provider of the industry’s first proactive IoT and firmware security...

3 Month Reprieve for Utilities on Cybersecurity Supply Chain Standards

3 min read

ICS/IoT Upgrade Management Regulatory Requirements Supply Chain Management

3 Month Reprieve for Utilities on Cybersecurity Supply Chain Standards

By Eric Byres on April 21, 2020

Earlier this month, as the coronavirus accelerated its alarming sprint across North America, NERC requested that FERC defer a number of looming deadlines for Reliability Standards....

Windows 10 Certificate Validation Bug Exposes a Fundamental Weakness

3 min read

Code Signing Software Validation Vulnerability Tracking Supply Chain Management

Windows 10 Certificate Validation Bug Exposes a Fundamental Weakness

By Eric Byres on January 17, 2020

The announcement Tuesday from the NSA about the new cryptographic vulnerability in the Microsoft Windows operating system sent ripples of shock through our entire community. In case you...