aDolus Blog

2 min read

#supplychainsecurity hacking ICS 3rd Party Components industrial control system

How Russia Might Come After the West

By Eric Byres on February 25, 2022

The DDoS attack surge that began last week against Ukrainian government agencies and banks was a bad sign. I was actually preparing a post and wondering if it was appropriate to call out...

2 min read

#supplychainsecurity ICS Supply Chain Management

Wrapping Up 2020 with Dale Peterson

By Eric Byres on January 7, 2021

Wrapping up my year on December 31, I was delighted to join ICS cybersecurity luminary Dale Peterson for his December: ICS Security Month in Review episode of the Unsolicited Response...

Three Things the SolarWinds Supply Chain Attack Can Teach Us

4 min read

hacking ICS Supply Chain Management SBOM

Three Things the SolarWinds Supply Chain Attack Can Teach Us

By Eric Byres on December 18, 2020

Just in case you missed it, a software supply chain attack on the US government and industries is consuming the waking hours of everyone involved in cyber security this week. The attack...

Who Infected Schneider Electrics’ Thumbdrive?

3 min read

chain of trust ICS USB 3rd Party Components malware industrial control system Supply Chain Management

Who Infected Schneider Electrics’ Thumbdrive?

By Eric Byres on September 12, 2018

On 24 August 2018 Schneider Electric issued a security notification alerting users that the Communications and Battery Monitoring devices for their Conext Solar Energy Monitoring Systems...

Building (or Losing) Trust in our Software Supply Chain

3 min read

Dragonfly chain of trust ICS malware pharmaceutical Havex industrial control system Trojan energy Supply Chain Management

Building (or Losing) Trust in our Software Supply Chain

By Eric Byres on May 10, 2018

Back in 2014, when I was managing Tofino Security, I became very interested in the Dragonfly attacks against industrial control systems (ICS). I was particularly fascinated with the ways...