Archive

vulnerability

Episode 44: The Truth About OT Vulnerabilities

Episode 44: The Truth About OT Vulnerabilities

Bryson Bort sits down with Adam Robbie, Head of OT Threat Research at Palo Alto Networks, to pull back the curtain on OT threat research. With a background in electrical engineering, Adam’s first job in cybersecurity was at an IT help desk. He now leads a team dedicated to identifying, analyzing, and mitigating cyber threats targeting Operational Technology (OT) environments.

critical infrastructure, ICS, Operational Technology, OT, threat hunting, vulnerability

May 16, 2025

Assume Vulnerability

Assume Vulnerability

In this episode of The Fourth Leg, Philip Reiner and Alexa Wehsener sit down with the High Priest of Coreboot, Ron Minnich. They dive into the substance of his paper, “Hardware that is Less Untrusted: Open Source Down to the Silicon” and discuss software, firmware, and hardware vulnerabilities and the value of open source code.

firmware, hardware, open source, silicon, software, vulnerability

June 8, 2020

Communication Disruption Attacks on NC3

Communication Disruption Attacks on NC3

In an essay out of the workshop "Last Chance: Communicating at the Nuclear Brink," Paul Bracken argues, "in a nuclear world we should be careful about attacking enemy communications because doing so leads to greater risks of uncontrolled escalation. The worst possible situation is the one the United States is now in, that is, to not be clear in our own minds about what we are doing when it comes to disrupting communications.”

CATALINK, communication, communication attacks, electromagnetic pulse, electronic warfare, escalation, military, NC3, nuclear, red line, retaliation, strike, target, targeting, United States, vulnerability

May 28, 2020

Security at Extreme Scales

Security at Extreme Scales

In Security at Extreme Scales, Eric Grosse argues, "Much of the security progress over the past decade has been at large-scale, finding and patching vulnerabilities in widely used applications or defending networks of millions of machines containing high-value data. The lessons there may help military systems, but for the very highest security needs such as NC3, we ought to return to basics and harden small-scale systems. And we ought to do it as a joint effort, even between adversaries."

complexity, control, large-scale, NC3, nuclear, scale, stability, users, vulnerability

May 30, 2019

Counter Nuclear Command, Control and Communications

Counter Nuclear Command, Control and Communications

This report by Carol Ann Jones seeks to introduce the nuclear command, control, and stability framework; collect open source NC3 system information on the eight declared nuclear nations to fill in the framework; describe counter NC3 activities; and introduce a few alternate NC3 approaches that may contribute to nuclear stability.

November 7, 2019

NC3 Insider Threats

NC3 Insider Threats

Ron Schouten examines fundamental concepts of insider threats and provides an overview of the extent and significance of insider threats in US and other NC3 systems.

Bystander Effect, capability, chemical, civilian, classified materials, critical infrastructure, deterrence, espionage, IAEA, information systems, insider threat, NC3, nuclear, organizational culture, stability, threat, vulnerability

November 14, 2019