iiinova — where your digital self keeps evolving

Secure ICS OT @secure-ics-ot.bsky.social · 13h

I see ICS/OT cybersecurity guru's posting on LinkedIn about protecting PLCs. My question is. What are they actually doing about it? I think it's a lot of "talk the talk" and not much of "walk the walk".

130

Secure ICS OT @secure-ics-ot.bsky.social · 15h

Anybody out there using Authentik for remote access control?

012

Secure ICS OT @secure-ics-ot.bsky.social · 29/09/2026

When the vendor supplies a FTP link to download firmware updates and it's not limited.

160

Secure ICS OT @secure-ics-ot.bsky.social · 29/09/2026

Australia Health services should pursue legal or criminal action against Sam Altman and OpenAI.

051

Secure ICS OT @secure-ics-ot.bsky.social · 28/09/2026

Vendors submitting reports, manuals, and so forth to you in Word format... Also a red flag

020

Secure ICS OT @secure-ics-ot.bsky.social · 28/09/2026

Vendors submitting a quote to you in Excel format is a red flag.

010

Secure ICS OT @secure-ics-ot.bsky.social · 28/09/2026

I'm not sure why anyone still uses Adobe Acrobat. Just saying.

040

Secure ICS OT @secure-ics-ot.bsky.social · 28/09/2026

Have you remembered to thank AI today? You're not going to survive the AI apocalypse if you forget to thank the AI. /s

010

Secure ICS OT @secure-ics-ot.bsky.social · 27/09/2026

Not all provlems need a digital technology solution.

010

Secure ICS OT @secure-ics-ot.bsky.social · 27/09/2026

Present stakeholders with security solutions not problems.

010

Secure ICS OT @secure-ics-ot.bsky.social · 25/09/2026

The only time I have ever lost my luggage while flying for work. There was an oscilloscope in my checked luggage! I called the airport every day and fought with them over the phone to locate my luggage. Took a week!

020

Secure ICS OT @secure-ics-ot.bsky.social · 25/09/2026

Restoring from backups isn't necessarily going to be a free pass in the ICS/OT. Even restoring from a golden backup in a critical environment, any engineer worth their mustard is going to insist on functional testing prior to putting their license on the line. Just saying.

130

Secure ICS OT @secure-ics-ot.bsky.social · 25/09/2026

FYI if you purchase Seagate external drives you can use Seagates "Disk wizard" which is actually Acronis for free.

031

Secure ICS OT @secure-ics-ot.bsky.social · 24/09/2026

I decided a long time ago that As a policy we are not resetting SCADA passwords or MFA without both the requester and administrator being in the SCADA office together.

010

Secure ICS OT @secure-ics-ot.bsky.social · 24/09/2026

You are not deploying a ICS/OT specific firewall to the IT/OT boundary. There should be no ICS/OT protocols going across this boundary. If you have ICS/OT protocols going across this boundary you have bigger issues than the correct firewall.

010

Secure ICS OT @secure-ics-ot.bsky.social · 24/09/2026

I like to start my ICS/OT network switch hardening process by... Not using a Cisco switch. After selecting a purpose made industrial switch it's a piece of cake to finish off the hardening process.

010

Secure ICS OT @secure-ics-ot.bsky.social · 24/09/2026

Best compliment I have received in a while. I should be a ICS/OT cyber security instructor. 😅

010

Secure ICS OT @secure-ics-ot.bsky.social · 24/09/2026

Once again.... I can explain it to you. I can't understand it for you.

000

Secure ICS OT @secure-ics-ot.bsky.social · 20/09/2026

You don't make friends via email or Teams.

131

Secure ICS OT @secure-ics-ot.bsky.social · 19/09/2026

You can't do effective ICS/OT security from behind a desk. You have to put on some steel toes and leave the office. Visit operations. Walk down the plant(s). Get to know managers, operators and the various trades. Put eyes on the situation.

240

Secure ICS OT @secure-ics-ot.bsky.social · 19/09/2026

Why can I not setup a local AI to analyze ICS/OT syslog and network traffic using Snort IDS rules instead of using the various ICS/OT vendors?

110

Secure ICS OT @secure-ics-ot.bsky.social · 19/09/2026

🚨 PSA for the younger folks 🚨 If you are not authorized to touch SCADA you're actually not authorized to touch it. We're not fucking around.

040

Secure ICS OT @secure-ics-ot.bsky.social · 19/09/2026

Look at this shit people post on LinkedIn! This is f'n horrible!

030

Secure ICS OT @secure-ics-ot.bsky.social · 18/09/2026

Just wiping old devices, tossing them and removing them from my asset inventory.

static.klipy.com

Trash

ALT: Trash

020

Secure ICS OT @secure-ics-ot.bsky.social · 17/09/2026

Had a vendor add sim cards to devices even after we said not too. We removed the sims, disconnected the cell antennas and caped the SMA ends with terminator caps.

160

Secure ICS OT @secure-ics-ot.bsky.social · 16/09/2026

I implemented sticky MACs at another of my sites today. Every day it gets a bit better.

010

Secure ICS OT @secure-ics-ot.bsky.social · 16/09/2026

I'm so glad the vendor implemented certificates for the HMI screens to work. /S Because someone might do a MITM on a HMI screen? The cert has expired and the screen is dead. The vendor got bought and the product is a paper weight. Take your crappy security ideas and shove them.

010

Secure ICS OT @secure-ics-ot.bsky.social · 14/09/2026

ICS/OT nightmare: Bunch of new fancy network switches from preferred equipment vendor! Every configuration currently available is doesn't work for one reason or another. 😡

030

Secure ICS OT @secure-ics-ot.bsky.social · 14/09/2026

I disable unused ports and use sticky macs where I can. There is one vendors sticky mac I can't use because it fucks up on the regular and locks all the ports.

030

Secure ICS OT @secure-ics-ot.bsky.social · 14/09/2026

Not only are my cabinets locked, they are tied into SCADA so I can tell when they are opened. It's always me opening them but it's nice getting the email notifications.

020

Secure ICS OT @secure-ics-ot.bsky.social · 14/09/2026

What is an acceptable response time for reporting a phishing email? Asking for a friend.

210

Secure ICS OT @secure-ics-ot.bsky.social · 13/09/2026

ICS/OT Network monitoring is not a preventive control and doesn't actually reduce your risk. Network segmentation and isolation are preventive controls and reduces your risk. Know the difference.

010

Secure ICS OT @secure-ics-ot.bsky.social · 13/09/2026

If I have to explain why the ICS/OT engineering laptops don't use the Corporate Domain. You're not really a ICS/OT security professional. Just saying.

020

Secure ICS OT @secure-ics-ot.bsky.social · 13/09/2026

If I have to explain to you why we don't use DHCP in the ICS/OT. You're not really a ICS/OT security professional. Just saying.

000