Is this you? As a journalist, you can create a free Muck Rack account to customize your profile, list your contact preferences, and upload a portfolio of your best work.
Claim your profile
Articles by Eric Byres
Substation Security
Improve protection with a layered security approach BY ERIC BYRES, Belden Inc. An age-old joke in the North American power industry states that if Alexander Graham Bell walked in the room today, he would not recognize the telephone, the technology, or its business model. However, if Thomas Edison walked in, he would still understand the current state of electricity and power generation and distribution.
INETCO Appoints Cybersecurity Visionary Eric Byres to Board of Directors
Vancouver, BC, March 28, 2025--(T-Net)--INETCO announced today the appointment of Eric Byres, P.Eng., ISA Fellow, to its Board of Directors. A world-renowned strategic and business development expert in Operational Technology (OT) security and software supply chain risk management, Eric brings decades of innovation, entrepreneurial leadership and deep domain expertise to INETCO at a pivotal time of growth and innovation.
The Role of Stakeholders in IIoT Security – IIoT World
best practices Cyber Insurance IIoT Security industrial cybersecurity password management regulatory compliance in IIoT The Role of Stakeholders in IIoT Security The Industrial Internet of Things (IIoT) continues to revolutionize industries, but with this growth comes an increased responsibility to secure these systems.
Harnessing FACT for Swift Cyberthreat Response
In the cybersecurity world, anticipation and rapid response are crucial in safeguarding against emerging threats. Recent events, such as the discovery of a vulnerability in the XZ Utils library used in many software applications, underscore this need. For background, a weakness was deliberately created in the open-source compression library liblzma (XZ).
Deep Packet Inspection Firewalls
Protecting legacy SCADA systems from cyberattacks BY ERIC BYRES, Belden Over the past decade, the power industry has embraced network technologies such as Ethernet and transmission control protocol (TCP)/Internet protocol suite (IP) for supervisory control and data acquisition (SCADA) and automation systems.
IIoT World Manufacturing Days 2024
Unlocking the Potential: Exploring the Most Valuable IIOT Devices You Already Use Sponsored by OMRON The world of Industrial Internet of Things (IIOT) is expanding rapidly, with devices hidden in plain sight holding immense value. This panel discussion aims to shed light on the most valuable IIOT devices that are already in use, despite their inconspicuous nature.
Exiger, aDolus partner to secure software supply chain
aDolus Technology Inc., a global authority on software intelligence for critical infrastructure, and Exiger, a vendor of supply chain and third-party risk AI company, have announced a partnership to provide broad and deep visibility into risks in the software supply chain. The deal integrates Exiger’s supply chain AI platform and aDolus’ software intelligence application providing deeper visibility and stronger cyber defenses for critical industries.
Exiger and aDolus Announce Strategic Partnership to Secure the Software Supply Chain
1. SPY 2. BA 3. AAPL 4. AKRO 5. M 6. SMCI 7. AHR 8. NVDA 9.
Exiger and aDolus Announce Strategic Partnership to Secure the Software Supply Chain
Exiger's leading supply chain AI platform integrates aDolus' software intelligence to provide deep visibility and strong cyber defense for critical industries , /PRNewswire/ -- aDolus Technology Inc., a global authority on software intelligence for critical infrastructure, and Exiger, the market-leading supply chain and third-party risk AI company, have announced a strategic partnership to provide broad and deep visibility into risks in the software supply chain.
Evolving Threats and Regulations in Software Supply Chain Security
2023 is in the rearview mirror and 2024 is now well underway. I wanted to post my thoughts on some of the software supply chain trends we saw last year and how they will continue to shape the efforts of the cybersecurity community as we embark on 2024. Unfortunately, software supply chain attacks delivering a malicious malware payload are still on the rise. They are growing at a rate of 1900% over the last 3 years according to Sonatype — and this trend makes total sense.
EU Cyber Resilience Act (CRA) Clears Penultimate Step
On December 3rd, the EU's new Cyber Resilience Act (CRA) got a big step closer to being adopted when the European Parliament and the EU Council reached an agreement on the legislation. It is now only one step away from being officially adopted. Unless lobby groups manage to derail final approval by the European Parliament and the Council, it will likely enter into force sometime before summer.
Why OT Is a Target: Cyber Awareness Podcast, Eric Byres, aDolus - Industrial Cybersecurity Pulse
If you were to attend a cybersecurity gathering 20 years ago, there were probably only a few people who were even aware of operational technology (OT) systems, much less saw them as a possible attack vector. These days, there are entire conferences dedicated to OT/industrial control system (ICS) cybersecurity, and attackers definitely have these systems in the crosshairs.
The Wretched State of OT Firmware Patching
This blog is a follow-up to our first post on the 2023 Microsoft Digital Defense Report where I described our collaboration with Microsoft on identified exploitable OT vulnerabilities. There is a saying in the IT world: patch early, patch often. It refers to the best practice of ensuring software is always running the latest version with the least number of bugs and vulnerabilities. It’s good advice in the IT world, but for OT it is often impossible.
Microsoft Digital Defense Report: Behind the Scenes Creating OT Vulnerabilities
Earlier this summer, aDolus collaborated with Microsoft on vulnerability analysis and contributed to their Microsoft Digital Defense Report 2023 (MDDR 2023). This report is a significant document and popular reading for heads of state and Davos regulars, so we were delighted when they approached us for our expertise.
IIoT World ICS Cybersecurity Day 2023
Keynote: See What You've Been Missing Without Risk-Based Prioritization to OT Risks and Threats Sponsored by Verve Industrial In this keynote session, Verve will tap into over 30+ years of OT experience to describe how to ensure your organization gathers deep visibility of risks, but also makes rapid progress rather than being overwhelmed by the tens of thousands of critical vulnerabilities and risks in your sensitive OT environment.
Evolving SBOMs and supply chain threat: ICS Pulse Podcast, Eric Byres, aDolus Technology - Industrial Cybersecurity Pulse
Miami Beach welcomed the S4 show into town in February 2023, where industrial cybersecurity professionals and companies from around the globe gathered to discuss the major trends and threats to the industry. While there, ICS Pulse sat down with Eric Byres, CTO and board member of aDolus Technology, to discuss the value of software bill of materials (SBOMs), why operational technology (OT) is getting weaponized and reasons for optimism heading into the future.
Managing vulnerabilities and weaponizing OT: ICS Pulse Podcast, Eric Byres, aDolus Technology - Industrial Cybersecurity Pulse
In February 2023, Industrial Cybersecurity Pulse traveled to the S4 show in Miami to learn about the major trends in our field. While there, we sat down with Eric Byres, CTO and board member of aDolus Technology, to discuss the show’s themes, managing vulnerabilities and the difference between cyber criminals and nation-state actors. Listen to the full podcast here. The following was edited for clarity. ICS Pulse: So what have you seen at S4 so far? It seems like it’s been a busy show.
Securing the ICS Software Supply Chain
Description In this session, our speakers will address the growing concerns of the risk of software backdoors in the ICS (Industrial Control System) software supply chain. The discussion will focus on what steps should be taken to minimize this risk and what actions should be avoided. The speakers will also delve into the complexities of the ICS software supply chain and provide insights into simple and cost-effective methods to secure it.
aDolus Named One of the Top 15 Security Startups
aDolus Technology Inc. Among Top 15 Security Startups in Canada CanadaVenture.news Provides Roundup of Cybersecurity Companies to Watch No one fully appreciated the threats embedded in 3rd-party software — everyone cheerfully embedded code or installed software with no idea of the hidden risks they were introducing” — Eric Byres, CTO aDolus Technology Inc.
aDolus Named One of the Top 15 Security Startups
aDolus Technology Inc. Among Top 15 Security Startups in Canada CanadaVenture.news Provides Roundup of Cybersecurity Companies to Watch No one fully appreciated the threats embedded in 3rd-party software — everyone cheerfully embedded code or installed software with no idea of the hidden risks they were introducing” — Eric Byres, CTO aDolus Technology Inc.
aDolus Named One of the Top 15 Security Startups
aDolus Technology Inc. Among Top 15 Security Startups in Canada CanadaVenture.news Provides Roundup of Cybersecurity Companies to Watch No one fully appreciated the threats embedded in 3rd-party software — everyone cheerfully embedded code or installed software with no idea of the hidden risks they were introducing” — Eric Byres, CTO aDolus Technology Inc.
Eric Byres Inducted into Industrial Cyber 2023 Hall of Fame
aDolus CTO Eric Byres - Industrial Cyber 2023 Hall of Fame Industry veteran focused on increasing software supply chain visibility My current obsession — bringing visibility to the software supply chain — is benefitting from all the great people who have stepped into this exciting field.” — Eric Byres, CTO aDolus Technology Inc.
aDolus Partners with Major Manufacturer to Provide Software Bill of Materials (SBOMs) & Software Supply Chain Visibility
News Search | All News Topics > Technology News Topics: By Country | By State ; Press Releases by Industry Channel > All Technology Press Releases Software Supply Chain Visibility for Food and Beverage Manufacturing Leading SBOM Provider Satisfies Food and Beverage Industry Demand for Continuous Software Attestation In the wake of multiple high-profile attacks, security teams, CISOs and CIOs, together with boards are increasingly demanding proof that their software supply chains are safe.” —...
Navigating the Challenges of Network Segmentation and Microsegmentation Without Disrupting Operations
Network segmentation offers many benefits for businesses. Segmentation improves security by preventing attacks from spreading across a network and infiltrating unprotected devices. In the event of an attack, segmentation ensures that malware cannot spread into other business systems. Network segmentation also reduces congestion that often results in performance drop-off.
A Flurry of Regulatory Action and the Need for SBOMs
A Flurry of Regulatory Action and the Need for SBOMs Executive Order 14028 on Improving the Nation’s Cybersecurity was issued in May of 2021 and provided a roadmap for a series of regulatory initiatives that government agencies (and anyone doing business with them) should prepare for. Recently we’ve seen the rollout of two important mandates: OMB Memorandum M-22-18 dated Sept.
How to Protect Your OT Network - Without Disrupting Operations
How to Protect Your OT Network — Without Disrupting Operations A good portion of existing operational technology (OT) networks were originally built during the air gap days, where isolation from other enterprise systems made for sufficient security. As digital transformation initiatives drive IT and OT networks towards convergence, the result is a network where anything can theoretically connect to anything else.
BMS Security: 3 Tips for OEMs to Better Protect Their Devices
Verify your partners’ security measures, too. Like it or not, as the OEM you are responsible for making sure that any provider or partner solution you integrate into your devices (including Cloud and building automation gateways) are designed to be secure. You can’t tell by looking and you certainly shouldn’t believe the sales hype. Instead, do your due diligence. How? By asking for proof of industry certifications and third-party security testing.
Q&A on Cyber Resiliency for Operational Technology
Q&A on Cyber Resiliency for Operational Technology As recent cyberattacks have demonstrated increased risk to both IT and operational technology (OT) environments, resilience readiness today has evolved. It is more than a cybersecurity strategy and involves the enforcement of rules and policies that provide the visibility, control, and situational awareness to respond at the speed of business while ensuring that safety and reliability are maintained.
Mitigate your ICS, IIoT, and Software Supply Chain Cybersecurity Risks
Please select AfghanistanÅland IslandsAlbaniaAlgeriaAmerican SamoaAndorraAngolaAnguillaAntarcticaAntigua and BarbudaArgentinaArmeniaArubaAustraliaAustriaAzerbaijanBahamasBahrainBangladeshBarbadosBelarusBelauBelgiumBelizeBeninBermudaBhutanBoliviaBonaire, Saint Eustatius and SabaBosnia and HerzegovinaBotswanaBouvet IslandBrazilBritish Indian Ocean TerritoryBruneiBulgariaBurkina FasoBurundiCambodiaCameroonCanadaCape VerdeCayman IslandsCentral African RepublicChadChileChinaChristmas IslandCocos...
A priority investment: cyber security
A priority investment: cyber security The accelerating transition to digital transformation, with much data and information being processed on the cloud, has opened up exciting new business opportunities, but it has also increased the risk that manufacturing companies may suffer in terms of security. Cyber security is, and will increasingly be, a complex issue that requires, and will require, advanced, articulated, flexible solutions and ongoing investment in technology and staff training.
OMB memorandum pushes federal agencies to enhance security of software supply chain, driving a sense of urgency
With last month’s rollout of the Office of Management and Budget (OMB) memorandum, the U.S. government brings in new security requirements that federal agencies must comply with when dealing with software supply chain security.
OT Cybersecurity Best Practices – IIoT World
OT Cybersecurity Best Practices Some of the OT security best practices for implementing a reliable protection system include: Network mapping and connectivity analysis Detection of suspicious activities, exposures, and malware attacks Implementing a zero-trust framework Aligning the right remote access tools Controlling identity and access management (IAM) Network Mapping and Connectivity Analysis Understanding the physical and digital locations of all devices mapped within a network should...
Clippers Sold To Son Of Former CFLGreat
Sperber Announced As New President & CEO of VIEA NANAIMO – Wes Mussio has sold the BC Hockey League’s Nanaimo Clippers to Brad Kwong. Brad is the son of Canadian Football League great Normie Kwong, who played for the Calgary Stampeders and Edmonton Eskimos and was also one of the original owners of the National Hockey League’s Calgary Flames.
aDolus Named Winner of Coveted Global InfoSec Award at RSA Conference 2022
aDolus Wins Global InfoSec Award for Most Innovative Software Supply Chain Security Most Innovative Software Supply Chain Security Award Presented to OT Security Leader aDolus Technology in 10th Annual Global InfoSec Awards It is so encouraging to see the protection of our software supply chain get the attention it so urgently needs.” — Eric Byres, P.Eng, ISA Fellow SAN FRANCISCO, CA, USA, June 6, 2022 / EINPresswire.com/ -- aDolus Technology Inc.
How AI Uncovers ICS Vulnerabilities
Summary Finding vulnerabilities in industrial control systems (ICS) is more difficult than many organizations realize. Most information technology (IT) and operational technology (OT) practitioners rely on the National Vulnerability Database (NVD), a large database containing the primary collection of vulnerabilities in the world, hoping to identify all the vulnerabilities associated with a software product or with a device’s firmware.
Industrial Control System Cyber Security Summit and Training
7:30 am - 9:00 am ET 11:30 am - 1:00 pm UTC Google Calendar iCal Calendar Outlook Calendar Summit Registration (Palm Foyer) For In-Person Summit Attendees Show More 9:00 am - 9:15 am ET 1:00 pm - 1:15 pm UTC Google Calendar iCal Calendar Outlook Calendar Opening Remarks 9:15 am - 10:00 am ET 1:15 pm - 2:00 pm UTC Google Calendar iCal Calendar Outlook Calendar Keynote Session details to come.
S4x22 event lives up to its theme ‘No Limits!,’ with focus on driving change in ICS community
The must-awaited S4x22 event, spread over three days, has just concluded in Miami, Florida. The conference lived up to its theme ‘No Limits!,’ providing the OT and ICS (industrial control systems) security industry with back-to-back sessions, opportunities to meet and exchange ideas, and create an environment that spurs new thinking and creativity.
Canadian cyber threat bulletin echoes CISA advisory and UK alert on Russian cyber threat
Courtesy: Brett Sayles As the Russia-Ukraine war continues, Russian cyber threat actors have been launching their attacks on the Ukrainian government. Given the widespread western support that Ukraine has received — in the form of money, weapons and harsh economic sanctions against Russia — there are expectations that Russia will target those supporters. Cyber-solidarity between allies is critical in this situation.
How software bill of materials can help mitigate supply chain risk
Any software that is purchased today will include a lot of code created by third parties, whether they are open-source communities — like the Apache Foundation — or for-profit companies — like Microsoft. Today’s industrial software vendors focus their development resources on their area of specialization and buy common components like license managers, installers or cryptographic libraries.
Cybersecurity for Manufacturing
Description Cybersecurity presents unique challenges to the manufacturing industry, considering the size and scale of the machinery and systems typically found in manufacturing facilities. This session will give an overview of protecting automated assets in an Industry 4.0 landscape. Our panelists will also talk about protecting and restoring the OT and IT program software files and images. Talking points: What are the steps that manufacturers can take that can minimize the damage, if attacked?
‘Reckless cowboy’: U.S. may underestimate Putin’s cyber strategy
Omar Salto 10 seconds ago News 0 Views Sign up for lately’s main executives on-line on the Knowledge Summit on March ninth. Sign up right here. Cybersecurity veteran Eric Byres says that with Russia’s invasion of Ukraine this week, so much has modified about his view of Vladimir Putin’s doable cyberattack technique towards the U.S. and different Western countries. And no longer in an effective way.
'Reckless cowboy': U.S. may underestimate Putin's cyber strategy
Join today's leading executives online at the Data Summit on March 9th. Register here. Cybersecurity veteran Eric Byres says that with Russia’s invasion of Ukraine this week, a lot has changed about his view of Vladimir Putin’s potential cyberattack strategy against the U.S. and other Western nations. And not in a good way.
Prepping up for 2022, as OT industry focuses on federal government regulations, SBOMs - Industrial Cyber
Looking ahead to 2022, the industrial sector is focused on meeting federal government legislation and regulations, and the rollout of SBOMs (software bill of materials) that would help in delivering transparency to the software supply chain for the critical infrastructure sector. The federal controls aim at enhancing visibility in the existing framework while understanding software vulnerabilities, in order to prevent cyber-attacks and software malfunctions.
Log4j (Log4Shell) | Resources from aDolus
Log4j is a widely-used software library from the Apache Foundation that shows up in products across a vast array of industries. On December 10, a serious zero-day vulnerability in Log4j was reported that impacts a dizzying array of potential victims — from Minecraft servers to mobile phones to industrial control systems (ICS). Log4j's job is to log things — a totally normal, and indeed necessary, task in any software system.
Why the Kaseya supply chain attack could cause big problems for SMBs
I recently participated in a panel discussion on the Cybersecurity Executive Order’s Impact on Embedded Device Security. I signed off with a comment about my biggest worry: Someone will combine professional ransomware with a software supply chain attack to create a truly massive ransomware attack. Then, being a holiday, I set off on a good long bike ride, unaware of how prescient my remarks were.
The intersection of AI & Industrial Controls Systems Cybersecurity Best Practices
Please select AfghanistanÅland IslandsAlbaniaAlgeriaAmerican SamoaAndorraAngolaAnguillaAntarcticaAntigua and BarbudaArgentinaArmeniaArubaAustraliaAustriaAzerbaijanBahamasBahrainBangladeshBarbadosBelarusBelauBelgiumBelizeBeninBermudaBhutanBoliviaBonaire, Saint Eustatius and SabaBosnia and HerzegovinaBotswanaBouvet IslandBrazilBritish Indian Ocean TerritoryBruneiBulgariaBurkina FasoBurundiCambodiaCameroonCanadaCape VerdeCayman IslandsCentral African RepublicChadChileChinaChristmas IslandCocos...
Ignite Talks - 10,000 Days to Transform, September 21-23 - Ignite News
Save your spot now (it's free!) Register IGNITE TALKS Presented by Cognite Online Got questions? Send an email to ignitetalks@ignitenews.com Register for free Day 1 - September 21, 2021 Day 1 - September 21, 2021 Day 2 - September 22, 2021 Day 2 - September 22, 2021 Day 3 - September 23, 2021 Save your...
Current and Emerging Cyber Threats to Manufacturing
Description The cyber security threat landscape faced by industrial and manufacturing sectors deteriorated significantly in the past year. New ransomware and supply chain attack capabilities have resulted in high-impact crises like the Colonial Pipelines and the JBS Foods incidents.
Cybersecurity Nightmare = Ransomware + Software Supply Chain Attack
Cybersecurity Nightmare = Ransomware + Software Supply Chain Attack Recently, the Russia-based hacking group REvil, attacked the Florida-based software company Kaseya Ltd. If you’re not familiar with Kaseya, they provide network and security management services for small to medium-sized businesses (SMBs), not unlike what SolarWinds offers for large businesses.
Show More
loading
Actions
Is this you?
As a journalist, you can create a free Muck Rack account to customize your profile, list your contact preferences, and upload a portfolio of your best work.Get in touch with Eric
Contact Eric, search articles and posts on X, monitor coverage, and track replies from one place.
Learn more about Muck Rack