intro

Seguridad industrial, contada por quien la aplica

Artículos de ciberseguridad industrial, eventos y opinión técnica del equipo.

Titanium en la red

// Recientes

New Challenges ahead!

De -













When we gave birth to Titanium Industrial Security 4 years ago, we knew that we were going to do something great, but seen all this time that has not been so much in perspective, We did not imagine that we would have growth and clients of such a high level as we have.
The effort and desire that the Titanium team has put in has been enormous and it is clear that every effort has its reward.
Today, ending June 2020, we are picking up the 2nd Titanium office to go to what will be our new home: Miramón Technology Park, Mikeletegi 43, 20009 Donostia-San Sebastián.
Here we will share projects, hopes and synergies with  Aingura IIoT (http://www.ainguraiiot.com/) and Ikergune (https://www.ikergune.com/) our colleagues from INZU Group (https://www.inzugroup.com/ )
Thank you very much to all of you who have entrusted your most precious treasures to Titanium Industrial Security and to those who will shortly do so.
When we are finally established we invite you to visit us.
Regards and thanks for everything.




Comentarios

Publicar un comentario

Entradas populares de este blog

Vulnerabilidad zero day en Primion-Digitek EVALOS Secure 8

De -
Imagen
  Durante un ejercicio de hacking ético industrial a uno de nuestros clientes, detectamos una vulnerabilidad zero day crítica en una aplicación de control de accesos y personal de planta. En este caso se trata de la aplicación Evalos8 (Primion-Digitek) , en concreto en la versión v1.0.1.55 del módulo Secure8 . No hemos podido acceder a otras versiones anteriores de este producto para verificar si se reproduce la vulnerabilidad, por lo que estas podrían verse igualmente afectadas. Primion-Digitek se especializa en implantación de controles de acceso, fichaje, control de personal, etc. Tienen implantados sus sistemas tanto en infraestructuras críticas, como pueden ser aeropuertos, industrias eléctricas, hospitales, así como en edificios de administración pública, entre otros. En este caso, hemos descubierto una vulnerabilidad de tipo Blind SQL Injection en el módulo de autenticación contra el gestor administrativo de la aplicación. Mediante esta vulnerabilidad, es posible la ex...
Leer más

Cybersecurity for Triconex systems. What steps to follow to be more secure against Triton.

De -
Imagen
WHAT IS TRITON? Triton is a new malware that attacks the SIS (Security Instrumented Systems) of the manufacturer Schneider Electric, specifically the Triconex systems. Triconex systems are implemented in many industrial plants around the world. WHAT IS A TRICONEX? The main mission of a Triconex system is to act as an emergency stop system (ESD - Emergency Shutdown System). The SIS or ESD systems are the upper layer of protection to conventional control systems (PLC, DCS). They monitor the conditions of the process that controls and regulates the industrial control system, and should an anomaly occur in the operation they are responsible for bringing the plant to a “safe state”, carrying out a “controlled” shutdown of the process. This is guaranteed by the fast speed of execution of the program in the security systems, which is usually less than 100mS, in comparison to the control cycle of a control system that is usually between 500ms and 1s. The main feature ...
Leer más

Titanium Industrial Security in IIC Q4 Meeting Burlingame, California

De -
Imagen
The CEO/ICS Security Architect of Titanium Industrial Security, Borja Lanseros, presented at the event IIC Q4 member meeting held in Burlingame California, 4th-7th December 2017 what have been the advances in reference to cybersecurity that have been applied to the testbed of Smart Factory Machine Learning for predictive Maintenance , leading Xilinx and Plethora IIoT since the last meeting of IIC members that was held in Singapore 11th-15th of September 2017. After Titanium Industrial Security carried out a threat model assessment of the proposed architecture for the testbed, this time it has led the application of the security measures to mitigate or reduce the risks detected during the previous analysis. During the presentation it was shown in real time by means of a video camera installed in the laboratory which was the functioning of said testbed. Titanium Industrial Security has been based on the Defense in Depth paradigm implementing the following mea...
Leer más