Security audits and tests

Secure

ICS and IoT

News ▼

Conferences and lectures

Code security for PLC controllers
– InfraSEC Forum 2021

Blog

Cybersecurity Framework – Protect – part 1

How to #StopRansomware – Prevention & Mitigation best practice – part 3

Cybersecurity Framework – Identify

How to #StopRansomware – Prevention & Mitigation best practice – part 2

Threat Sources, Vulnerabilities, and Incidents – part 3

How to #StopRansomware – Prevention & Mitigation best practice – part 1

Threat Sources, Vulnerabilities, and Incidents – part 2

VOLT TYPHOON – ‘Living of the Land’ – Tactics, Technics and Procedures

Threat Sources, Vulnerabilities, and Incidents

The Impact of the Russia-Ukraine Conflict on the Cybercrime Ecosystem

Distributed Control Systems Defense in Depth Implementation

Ransomware Trends

SCADA Systems Defense in Depth Implementation

Hackers for Hire

Cybersecurity Architecture Considerations

Cybercriminals on Cloud 9

Defense-in-Depth Architecture Capabilities

ENISA’s Threat Landscape Report 2022 – Part 11 – State Sponsored Actors

Cybersecurity Architecture

ENISA’s Threat Landscape Report 2022 – Part 10 – Supply Chain Attacks

OT Security – Introduction – OT Overview

ENISA’s Threat Landscape Report 2022 – Part 9 – Disinformation & Misinformation

The impact of IT threats on OT environment

ENISA’s Threat Landscape Report 2022 – Part 8 – Impact of Russian war

‘Insecure-by-Design’ – Impact and Mitigation

ENISA’s Threat Landscape Report 2022 – Part 7 – DDoS attacks

The Legacy of ‘Insecure-by-Design’

ENISA’s Threat Landscape Report 2022 – Part 6 – Threats Against Data

ELECTRUM, ERYTHRITE & WASSONITE – 2022 update

ENISA’s Threat Landscape Report 2022 – Part 5 – Social Engineering

KOSTOVITE, KAMACITE & XENOTIME – 2022 update

ENISA’s Threat Landscape Report 2022 – Part 4 – Malware

CHERNOVITE and BENTONITE – New Threats of 2022

ENISA’s Threat Landscape Report 2022 – Part 3 – Ransomware

Asset visibility for defendable OT

ENISA’s Threat Landscape Report 2022 – Part 2 – Prime Threats by Proximity and Sector

How to effectively utilise MITRE ATT&CK for ICS

ENISA’s Threat Landscape Report 2022 – Part 1 – Introduction

MITRE ATT&CK for ICS – a tool for challenging times

Cloud Computing – 2022 Top Threats – part 6

Ransomware in OT – Response Strategy

Cloud Computing – 2022 Top Threats – part 5

Preparing for and detecting ransomware attacks in OT environments

Cloud Computing – 2022 Top Threats – part 4

Cloud Computing – 2022 Top Threats – part 3

Ransomware in Operational Technology (OT) Environments

Cloud Computing – 2022 Top Threats – part 2

The Five Critical Operational Technology (OT) Cybersecurity Controls

Cloud Computing – 2022 Top Threats – part 1

Bring Your Own Device Security Strategies – Part 7

Top 10 Emerging Cyber-Security Threats for 2030

Defense in Depth strategies – Part 10 – Third Parties Security Management

Bring Your Own Device Security Strategies – Part 6

Defense in Depth strategies – Part 9 – Security Monitoring

Bring Your Own Device Security Strategies – Part 5

Defense in Depth strategies – Part 8 – Host Security

Bring Your Own Device Security Strategies – Part 4

Defense in Depth strategies – Part 7 – Security Architectures

Bring Your Own Device Security Strategies – Part 3

Defense in Depth strategies – Part 6 – ICS Network Architectures

Bring Your Own Device Security Strategies – Part 2

Defense in Depth strategies – Part 5

Bring Your Own Device Security Strategies – Part 1

Defense in Depth strategies – Part 4

Anti-patterns in security architecture – part 6

Defense in Depth strategies – Part 3

Anti-patterns in security architecture – part 5

Defense in Depth strategies – Part 2

Anti-patterns in security architecture – part 4

Defense in Depth strategies – Part 1

Anti-patterns in security architecture – part 3

IEC62443 – Examples of practical requirements implementation – Part 4

Anti-patterns in security architecture – part 2

IEC62443 – Examples of practical requirements implementation – Part 3

Anti-patterns in security architecture – part 1

IEC62443 – Examples of practical requirements implementation – Part 2

Enterprise Connected Devices – a cyber security challenge – Part 2

IEC62443 – Examples of practical requirements implementation – Part 1

Enterprise Connected Devices – a cyber security challenge – Part 1

The State of Global Operational Technology 2022 – part 3

Karakurt Data Extortion Group

The State of Global Operational Technology 2022 – part 2

Paving the way for Post-Quantum Cryptography

The State of Global Operational Technology 2022 – part 1

Chinese Campaign exploits Network Providers and Devices Worldwide

Cybersecurity of Smart Buildings

Phishing Attacks & Mitigation – part 2

Phishing Attacks & Mitigation – part 1

Smart Meters in the context of Smart Grid and AMI architecture. Security, Vulnerability and Best Practice – Part 4

Smart Meters in the context of Smart Grid and AMI architecture. Security, Vulnerability and Best Practice – Part 3

Cybersecurity Maturity Model Certification (CMMC) Program – Part 3

Smart Meters in the context of Smart Grid and AMI architecture. Security, Vulnerability and Best Practice – Part 2

Cybersecurity Maturity Model Certification (CMMC) Program – Part 2

Smart Meters in the context of Smart Grid and AMI architecture. Security, Vulnerability and Best Practice – Part 1

Cybersecurity Maturity Model Certification (CMMC) Program – Part 1

TRITON’s Tactics and Techniques in the Enterprise domain + mitigations – Part 8

Man in the Middle Attacks & Mitigation

TRITON’s Tactics and Techniques in the Enterprise domain + mitigations – Part 7

Denial of Service & Distributed Denial of Service Attacks & Mitigation

TRITON’s Tactics and Techniques in the Enterprise domain + mitigations – Part 6

Software Defined Network Security Benefits

TRITON’s Tactics and Techniques in the Enterprise domain + mitigations – Part 5

Secure Messaging

TRITON’s Tactics and Techniques in the Enterprise domain + mitigations – Part 4

Social Media Privacy & Security

TRITON’s Tactics and Techniques in the Enterprise domain + mitigations – Part 3

Everyday Network Security – Part 2

TRITON’s Tactics and Techniques in the Enterprise domain + mitigations – Part 2

Everyday Network Security – Part 1

TRITON’s Tactics and Techniques in the Enterprise domain + mitigations – Part 1

Sensible Computing

Havex’s Tactics and Techniques in the Enterprise domain + mitigations

Smart Home Security & Privacy

Critical ROCKWELL AUTOMATION PLCs vulnerabilities

Compute in the cloud relevant security considerations

TRITON’s Tactics and Techniques in the ICS domain

Mobile Device Security

‘Pipedream’ – a surfacing threat targeting Industrial Control Systems (ICS)

Email Security Enhancement

Havex’s Tactics and Techniques in the ICS domain + mitigations

‘Denonia’ – the first cryptominer built for AWS Lambda

New malicious tools targeting ICS / SCADA systems and mitigations

Shared Responsibility for Security in the Public Cloud

Industrial Control Systems Best Practices

Best Authentication Practices

Industrial Network Security Architecture – Network Protection

FSB’s Global Energy Sector Intrusion Campaign 2011-2018

Industrial Network Security Architecture – Asset and Network Management

The Cloud and the Dark Web

Industrial Network Security Architecture – Network Segmentation

Software Defined Perimeter

Industrial Network Security Architecture – Introduction

Best Practices for Securing your Cloud

Common Attack Vectors in the Cloud

Common Cloud Vulnerabilities

The Top 20 Secure PLC Coding Practices. Part 21 – Trap false negatives and false positives for critical alerts

The Top 20 Secure PLC Coding Practices. Part 20 – Monitor PLC memory usage and trend it on the HMI

Cyber Threats – Detection, Response, Mitigation II

The Top 20 Secure PLC Coding Practices. Part 19 – Log PLC hard stops and trend them on the HMI

Cyber Threats – Detection, Response, Mitigation I

The Top 20 Secure PLC Coding Practices. Part 18 – Log PLC uptime and trend it on the HMI

The Top 20 Secure PLC Coding Practices. Part 17 – Summarise PLC cycle times and trend them on the HMI

Security Operations Centre – part 5

The Top 20 Secure PLC Coding Practices. Part 16 – Define a safe process state in case of a PLC restart

Security Operations Centre – part 4

The Top 20 Secure PLC Coding Practices. Part 15 – Restrict third-party data interfaces

Security Operations Centre – part 3

The Top 20 Secure PLC Coding Practices. Part 14 – Disable unneeded / unused communication ports and protocols

Security Operations Centre – part 2

The Top 20 Secure PLC Coding Practices. Part 13 – Validate inputs based on physical plausibility

Security Operations Centre – part 1

The Top 20 Secure PLC Coding Practices. Part 12 – Instrument for plausibility checks

Zero Trust Architecture

The Top 20 Secure PLC Coding Practices. Part 11 – Assign designated register blocks by function (read/write/validate)

Data Privacy, Data Security. Vol. 4

The Top 20 Secure PLC Coding Practices. Part 10 – Validate indirections

Data Privacy, Data Security. Vol. 3

The Top 20 Secure PLC Coding Practices. Part 9 – Validate HMI input variables at the PLC level, not only at HMI

Data Privacy, Data Security. Vol. 2

The Top 20 Secure PLC Coding Practices. Part 8 – Validate and alert for paired inputs / outputs

Data Privacy, Data Security. Vol. 1

The Top 20 Secure PLC Coding Practices. Part 7 – Validate timers and counters

Small Business Cyber Security Response and Recovery. Part VI – Learn from the incident

The Top 20 Secure PLC Coding Practices. Part 6 – Use cryptographic and / or checksum integrity checks for PLC code

Small Business Cyber Security Response and Recovery. Part V – Report the incident to the wider stakeholders

The Top 20 Secure PLC Coding Practices. Part 5 – Use PLC flags as integrity checks

Small Business Cyber Security Response and Recovery. Part IV – Resolve the incident

The Top 20 Secure PLC Coding Practices. Part 4 – Leave operational logic in the PLC wherever feasible

Small Business Cyber Security Response and Recovery. Part III – Identify what’s happening

The Top 20 Secure PLC Coding Practices. Part 3 – Track operating modes

Small Business Cyber Security Response and Recovery. Part 2 – Prepare for incidents.

The Top 20 Secure PLC Coding Practices. Part 2 – Modularise PLC code

Small Business Cyber Security Response and Recovery. Part 1 – Introduction.

Small Business Cyber Resilience Improvement Guide. Part I – Introduction

Let’s face it – Smart Buildings are insecure …

Multiple vulnerabilities in GameLoop

CVE-2020-29007 – remote code execution in Mediawiki Score

ReVoLTE – an attack exploiting the reuse of the same keystream by vulnerable base stations

Cyber Kill Chain – what is it and how to use it to stop advanced methods of attack?

CVE

13

YOUR CYBERSECURITY PARTNER

Cyberattacks have been identified as one of the top 10 global risks over the next decade and any organisation can be at risk of being affected by them. By utilising advanced technologies and our many years of experience we provide assistance in protecting organisations against cyber-threats as well as detecting and responding to incidents. We conduct effective security audits and risk area identification procedures, providing security measures fit to every company’s needs. Our services can ensure the highest security level for your products.

Cyberattacks have been identified as one of the top 10 global risks over the next decade and any organisation can be at risk of being affected by them.

By utilising advanced technologies and our many years of experience we provide assistance in protecting organisations against cyber-threats as well as detecting and responding to incidents. We conduct effective security audits and risk area identification procedures, providing security measures fit to every company’s needs.
Our services can ensure the highest security level for your products.

Services

Check out our services and choose one suited to your needs

Security tests and audits

Inspect the security of your code, devices, apps, systems and organisations:

Find out more about our services

A proactive approach to cybersecurity

Critical infrastructure protection

A comprehensive analysis of critical infrastructure components in terms of possible threats and recommendations for solutions designed to ensure business continuity

Smart Building cybersecurity

An evaluation of architecture of Smart Building’s systems and its components in the context of cybersecurity, identification and mitigation of cyber risks for Smart Buildings

Cybersecurity

In a world where 8 million new devices are connected to the Internet every day, cybersecurity needs to be considered a priority. Unfortunately not all manufacturers and distributors of intelligent devices consider their products’ security. Moreover, users often lack the appropriate knowledge to properly configure their devices.

In most cases, being aware of different cyberthreats is not enough if this knowledge does not go in pair with appropriate actions

We believe, that only a comprehensive approach can help our Clients in reducing the risk level related to cybersecurity

In response to the growing market demand for knowledge of ICS and IoT cybersecurity, we offer high quality services of testing and enhancing our Clients cybersecurity

Our Partners

secure remote access for ICS
and USB data exchange security

creating a secure
IT and OT environment

traffic monitoring
and vulnerability detection
in the OT environment

security incident
management systems

DDoS testing
and protection

security incident
management systems

online ethical hacking, computer network and security challenge platform

testing cyber-physical components for their security and trustworthiness

REFERENCES

CIO of one of the major Polish banks

Responsible, trustworthy, dependable, dedicated, these words would precisely describe Jozef’s and his way of working with clients. I have the pleasure of working with Jozef and as a consultant he can set the standards that people should follow. I wish him the very best and I can give him my highest marks as his satisfied client

Corporate Architect in the European Union administrative body

Joe is one of the best IT/Business professionals I have had an opportunity to work with. He is very mature, detail-oriented, and analytical. He looks at the client’s needs, and ensures that we can meet them in the most innovative, yet cost effective way. Joe has become my friend, mentor, and a business partner.

Managing director in the public sector

I recommend Jozef as a focused and constructive-solutions-seeking person. I am glad I worked with him and his team. What made our cooperation smooth was that his whole team seemed devoted to issues we had to deal with. I believe that the team worked that good because it was led by such a professional like Jozef.

QA and Security Manager

When I think about IT security I have only 3 persons on my mind – Jozef is on top of that list. Very responsible and effective man. In my opinion one of the best IT security professionals in Poland.