aDolus Blog (4)

Bayshore Networks and aDolus Forge Supply Chain Security Partnership

3 min read

#supplychainsecurity Partnership Press-release

Bayshore Networks and aDolus Forge Supply Chain Security Partnership

By Norma Dowler on July 23, 2020

The aDolus FACT™ platform provides independent software update validation to ensure safe upgrades and a more secure supply chain NANAIMO, BC, CANADA, July 22, 2020 --aDolus Technology Inc.

3 min read

Software Validation malware Supply Chain Management

Don’t Judge an Ebook by Its Cover

By Ron Brash on May 12, 2020

Interesting times lead to interesting opportunities. The current pandemic is proving no exception, but, sadly, it’s an opportunity for some attackers who have laid a rather cunning trap. As...

3 Month Reprieve for Utilities on Cybersecurity Supply Chain Standards

3 min read

ICS/IoT Upgrade Management Regulatory Requirements Supply Chain Management

3 Month Reprieve for Utilities on Cybersecurity Supply Chain Standards

By Eric Byres on April 21, 2020

Earlier this month, as the coronavirus accelerated its alarming sprint across North America, NERC requested that FERC defer a number of looming deadlines for Reliability Standards....

Windows 10 Certificate Validation Bug Exposes a Fundamental Weakness

3 min read

Code Signing Software Validation Vulnerability Tracking Supply Chain Management

Windows 10 Certificate Validation Bug Exposes a Fundamental Weakness

By Eric Byres on January 17, 2020

The announcement Tuesday from the NSA about the new cryptographic vulnerability in the Microsoft Windows operating system sent ripples of shock through our entire community. In case you...

Sniffing Out Fakes: From Saffron in Marrakech to Digital Certificates

4 min read

Code Signing Software Validation malware

Sniffing Out Fakes: From Saffron in Marrakech to Digital Certificates

By Eric Byres on October 8, 2019

Eric Byres in Morocco

Podcast: Where Do Your Bits Really Come From?

3 min read

ICS/IoT Upgrade Management 3rd Party Components Supply Chain Management

Podcast: Where Do Your Bits Really Come From?

By Eric Byres on September 26, 2019

Earlier this year I attended the Public Safety Canada Industrial Control System Security symposium in Charlottetown, PEI (FYI the PSC ICS events are outstanding - worth attending, even if...

Will the DoD’s CMMC Encourage Bad Password Habits?

4 min read

password strength Uncategorized DoD CMMC

Will the DoD’s CMMC Encourage Bad Password Habits?

By Eric Byres on September 19, 2019

Last Wednesday (September 11), the U.S. Department of Defense released a draft of its Cybersecurity Maturity Model Certification (CMMC) for public comment. The idea is for the DoD to...

When the Security Researchers Come Knocking, Don’t Shoot the Messenger

3 min read

medical hacking malware vulnerability disclosure Vulnerability Tracking

When the Security Researchers Come Knocking, Don’t Shoot the Messenger

By Eric Byres on November 8, 2018

Our own Jonathan Butts and Billy Rios were interviewed this month on the CBS Morning News about their research showing that medical devices like pacemakers and insulin pumps can be hacked...

Who Infected Schneider Electrics’ Thumbdrive?

3 min read

chain of trust ICS USB 3rd Party Components malware industrial control system Supply Chain Management

Who Infected Schneider Electrics’ Thumbdrive?

By Eric Byres on September 12, 2018

On 24 August 2018 Schneider Electric issued a security notification alerting users that the Communications and Battery Monitoring devices for their Conext Solar Energy Monitoring Systems...

Building (or Losing) Trust in our Software Supply Chain

3 min read

Dragonfly chain of trust ICS malware pharmaceutical Havex industrial control system Trojan energy Supply Chain Management

Building (or Losing) Trust in our Software Supply Chain

By Eric Byres on May 10, 2018

Back in 2014, when I was managing Tofino Security, I became very interested in the Dragonfly attacks against industrial control systems (ICS). I was particularly fascinated with the ways...