BlastWave·Oct 26AI Attacks Are Dumb. That’s the Problem.If you’ve sat through a session on AI threats this year, somebody has probably told you the attacks are mostly hype. Sometimes that…
BlastWave·Oct 20Hack One, Reach Hundreds: What Supermarkets, Water, and Ports Have in CommonFor most of my career, critical infrastructure attacks had a name and an address. A water plant in Oldsmar. A pipeline company in Georgia…
BlastWave·Sep 30It isn’t Just a Budget Problem: What 55 Water Utilities Told UsIt isn’t Just a Budget Problem: What 55 Water Utilities Told Us
BlastWave·Sep 15The AI Cavalry Is At Least Six Months Out. You Were Scanned in July.On August 19, the NSA, CISA, the FBI, the Department of Energy and the EPA signed the same piece of paper. Advisory AA26–231a. Five…
BlastWave·Sep 4Attackers Can Weaponize a CVE in 10 Minutes. Your Network Can Simply Not Be There.A veteran OT penetration tester spent a decade breaking into industrial networks. Then he hit one protected by BlastWave — and couldn’t…
BlastWave·Sep 3The Water Advisory Is Correct. But There Is Nobody to Do It.You read the water advisory. You nodded at every line. Then you forwarded it to someone else.
BlastWave·Sep 2The Attack Wasn’t Sophisticated. That’s What Should Scare Every Water Utility.How water utilities can make PLCs, HMIs, and SCADA systems harder for attackers to discover and reach
BlastWave·Aug 25Thirteen Years After Bowman Avenue: The Same Country, the Same ModemOn 28 August 2013, an Iranian contractor working for an IRGC-affiliated firm gained access to the control system of a flood-control dam…
BlastWave·Aug 17Asimov Wrote Rules. Herbert Wrote a Commandment.Last week, I wrote that Asimov handed us the answer in 1942, and we filed it under fiction. The Three Laws as a permission model, a hard…
