Kevin Owens (@Kevin_ICS) profile picture

IT Cybersecurity. Cybersecurity for Industrial Control Systems (ICS). Securing critical infrastructure is my passion! I always follow back!

Washington, USA
Joined June 2018
Photo by Kevin Owens (@Kevin_ICS)Photo by Kevin Owens (@Kevin_ICS)Photo by Kevin Owens (@Kevin_ICS)Photo by Kevin Owens (@Kevin_ICS)Photo by Kevin Owens (@Kevin_ICS)Photo by Kevin Owens (@Kevin_ICS)Photo by Kevin Owens (@Kevin_ICS)Photo by Kevin Owens (@Kevin_ICS)Photo by Kevin Owens (@Kevin_ICS)Photo by Kevin Owens (@Kevin_ICS)
⚠️ Iran tensions impact U.S. water utilities. Not theoretical. Access already gained via exposed remote access and shared credentials. No exploit needed. Expect login attempts tied to IRGC. If someone can log in, they don’t need to break in. Remote access locked down today?
1
1
502
It’s World Password Day today! That’s where you change all of your passwords. Remember to try to use long passphrases that you can remember. Length is more important than complexity.
1
375
Join us for an exclusive livestream event on control engineering & OT security. 💡 Is AI the future of control engineering & OT security? 🤔 Find out as industry leaders Ralph Langner & Kevin Owens share insights. Monday@10 am Eastern Time Register now: lnkd.in/gkrvVENB
4
418
9
154
21
733
132,971
Kevin Owens retweeted
found this on reddit.
57
500
53
3,512
218,919
Why Apple’s announcements today are a big deal, a thread. 1/
58
638
91
3,310
Kevin Owens retweeted
Ransomware actors when a victim won’t pay the ransom:
8
16
100
Logs Cheat Sheet
10
147
4
528
Security vendors demonstrating how their products "would stop the Uber breach."
41
509
38
3,430
Kevin Owens retweeted
Can’t wait for AI to take over the world
486
8,224
1,332
40,489
Kevin Owens retweeted
The House passed a defense spending bill saying you can't sell software to the DoD that has *any* known CVEs in it. congress.gov/bill/117th-cong…
126
337
559
1,620
Kevin Owens retweeted
When you’re first learning Linux and someone tells you to run sudo rm -rf /
249
419
119
4,136
3) All hyperlinks to external websites should be disabled/broken; and 4) All attachments from external emails should be sandboxed. If those things are done correctly, that will reduce a lot of risks at minimal cost.
1
1
1
4
I believe this all comes down to four things related to email: 1) All inbound emails should be flagged “EXTERNAL” in red or some kind of warning; 2) Better education is needed on email threats, especially social engineering;
2
Yesterday, the Albanian government was forced to shut down online public services and government websites following an ongoing synchronized cyber attack from outside the country. Albania has been rocked by a number of cyber attacks in the last 18 months. exit.al/en/2022/07/17/albani…
2
5
Forensics Mindmap
8
380
7
1,417
How do you validate Email?
4
14
81