aDolus Blog | Supply Chain Management (2)

3 min read

Software Validation malware Supply Chain Management

Don’t Judge an Ebook by Its Cover

By Ron Brash on May 12, 2020

Interesting times lead to interesting opportunities. The current pandemic is proving no exception, but, sadly, it’s an opportunity for some attackers who have laid a rather cunning trap. As...

3 Month Reprieve for Utilities on Cybersecurity Supply Chain Standards

3 min read

ICS/IoT Upgrade Management Regulatory Requirements Supply Chain Management

3 Month Reprieve for Utilities on Cybersecurity Supply Chain Standards

By Eric Byres on April 21, 2020

Earlier this month, as the coronavirus accelerated its alarming sprint across North America, NERC requested that FERC defer a number of looming deadlines for Reliability Standards....

Windows 10 Certificate Validation Bug Exposes a Fundamental Weakness

3 min read

Code Signing Software Validation Vulnerability Tracking Supply Chain Management

Windows 10 Certificate Validation Bug Exposes a Fundamental Weakness

By Eric Byres on January 17, 2020

The announcement Tuesday from the NSA about the new cryptographic vulnerability in the Microsoft Windows operating system sent ripples of shock through our entire community. In case you...

Podcast: Where Do Your Bits Really Come From?

3 min read

ICS/IoT Upgrade Management 3rd Party Components Supply Chain Management

Podcast: Where Do Your Bits Really Come From?

By Eric Byres on September 26, 2019

Earlier this year I attended the Public Safety Canada Industrial Control System Security symposium in Charlottetown, PEI (FYI the PSC ICS events are outstanding - worth attending, even if...

Who Infected Schneider Electrics’ Thumbdrive?

3 min read

chain of trust ICS USB 3rd Party Components malware industrial control system Supply Chain Management

Who Infected Schneider Electrics’ Thumbdrive?

By Eric Byres on September 12, 2018

On 24 August 2018 Schneider Electric issued a security notification alerting users that the Communications and Battery Monitoring devices for their Conext Solar Energy Monitoring Systems...

Building (or Losing) Trust in our Software Supply Chain

3 min read

Dragonfly chain of trust ICS malware pharmaceutical Havex industrial control system Trojan energy Supply Chain Management

Building (or Losing) Trust in our Software Supply Chain

By Eric Byres on May 10, 2018

Back in 2014, when I was managing Tofino Security, I became very interested in the Dragonfly attacks against industrial control systems (ICS). I was particularly fascinated with the ways...