Twitxy Saved

Marco (Marc) Ayala

Verified account This account is verified. Learn more

@ICS_SCADA

Complex Control Systems | ICS/SIS/SCADA 30yr Field Exp: O&G, Chem, Maritime | Tech News | ISA Fellow | InfraGard | Security | GoM | Free Thinker
Texas, USA Joined May 2012
7.4K Following 6.4K Followers 20K Posts

Latest posts 5

Marco (Marc) Ayala Verified account @ICS_SCADA
๐—•๐—Ÿ๐—จ๐—™: The six FBI Cyber Branch recommendations for industrial refrigeration and cold-chain controllers map cleanly to core International Society of Automation (ISA) ISA/IEC 62443 requirements.

Many of these you have heard me say well over a thousand times...

ย ย โ€ข ๐—ง๐—ฎ๐—ธ๐—ฒ ๐—ฐ๐—ผ๐—ป๐˜๐—ฟ๐—ผ๐—น๐—น๐—ฒ๐—ฟ๐˜€ ๐—ผ๐—ณ๐—ณ ๐˜๐—ต๐—ฒ ๐—ฝ๐˜‚๐—ฏ๐—น๐—ถ๐—ฐ ๐—ถ๐—ป๐˜๐—ฒ๐—ฟ๐—ป๐—ฒ๐˜ โ†’ 62443-2-1:2024 SPE 3 (segmentation from non-IACS/external networks) + zones and conduits (3-2) + 62443-๐Ÿฏ-๐Ÿฏ ๐—™๐—ฅ 5 (Restricted Data Flow).
ย ย โ€ข ๐—ฃ๐˜‚๐˜ ๐—ฎ๐—ฐ๐—ฐ๐—ฒ๐˜€๐˜€ ๐—ฏ๐—ฒ๐—ต๐—ถ๐—ป๐—ฑ ๐—ฎ ๐—ณ๐—ถ๐—ฟ๐—ฒ๐˜„๐—ฎ๐—น๐—น โ†’ Same SPE 3 and FR 5 requirements. Firewalls enforce the zone boundary and conduit rules.
ย ย โ€ข ๐—–๐—ต๐—ฎ๐—ป๐—ด๐—ฒ ๐—ฑ๐—ฒ๐—ณ๐—ฎ๐˜‚๐—น๐˜ ๐—ฝ๐—ฎ๐˜€๐˜€๐˜„๐—ผ๐—ฟ๐—ฑ๐˜€ โ†’ 62443-2-1:2024 SPE 6 (user access control) + 62443-3-3 SR 1.5 (Authenticator management under FR 1).
ย ย โ€ข ๐—Ÿ๐—ฒ๐—ฎ๐—ฟ๐—ป ๐—ต๐—ผ๐˜„ ๐˜ƒ๐—ฒ๐—ป๐—ฑ๐—ผ๐—ฟ๐˜€ ๐—ฐ๐—ผ๐—ป๐—ณ๐—ถ๐—ด๐˜‚๐—ฟ๐—ฒ ๐—ฑ๐—ฒ๐˜ƒ๐—ถ๐—ฐ๐—ฒ๐˜€ โ†’ 62443-2-1:2024 SPE 2 (configuration management) and SPE 4 (component hardening). For OEMs and integrators, see 62443-2-4 (security program requirements for IACS service providers).
ย ย โ€ข ๐—ฆ๐—ฒ๐˜ ๐˜€๐—ฎ๐—ณ๐—ฒ (๐—ผ๐—ฝ๐—ฒ๐—ฟ๐—ฎ๐˜๐—ถ๐—ป๐—ด) ๐˜๐—ฒ๐—บ๐—ฝ๐—ฒ๐—ฟ๐—ฎ๐˜๐˜‚๐—ฟ๐—ฒ ๐—น๐—ถ๐—บ๐—ถ๐˜๐˜€ โ†’ Protect critical setpoints through 62443-3-3 FR 3 (System Integrity), FR 2 (Use Control), and the 3-2 risk assessment that accounts for physical consequences.
ย ย โ€ข ๐—˜๐—ป๐˜€๐˜‚๐—ฟ๐—ฒ ๐—ฎ๐—น๐—ฒ๐—ฟ๐˜๐˜€ ๐—ฟ๐—ฒ๐—ฎ๐—ฐ๐—ต ๐˜๐—ต๐—ฒ ๐—ฟ๐—ถ๐—ด๐—ต๐˜ ๐—ฐ๐—ผ๐—ป๐˜๐—ฎ๐—ฐ๐˜๐˜€ โ†’ 62443-2-1:2024 SPE 7 (event and incident management) + 62443-3-3 FR 6 (Timely Response to Events).

These are practical implementations of the standardsโ€™ requirements for secure, reliable operation of systems with physical consequences. lnkd.in/p/gUht6sBd

#isa62443 #iec62443 #iacs #icscyber
www.linkedin.com #infragard #fbi #cyber #isa62443 #iec62443 #otsecurity #icssecurity #criticalinfrastructure | Marco... ๐—•๐—Ÿ๐—จ๐—™: The six FBI Cyber Branch recommendations for industrial refrigeration and cold-chain controllers map cleanly to core International Society of Automation (ISA) ISA/IEC 62443 requirements....
FBI Cyber Branch Verified account @FBICyberBranch 3d
The @FBI and our partners are seeing malicious cyber activity targeting industrial refrigeration and cold-chain monitoring systems around the world. These systems help keep food, medicine, and other products at safe temperatures and are widely used across critical infrastructure sectors.

Attackers are targeting electronic temperature and refrigeration controllers, particularly in grocery stores and cold storage facilities. In at least one recent incident, attackers targeted refrigeration components at three foreign blood service facilities.

While this attack was unsuccessful due to the proper alert mechanisms in place, security weaknesses in unpatched or internet-accessible controllers can allow attackers to change system settings, potentially causing inventory loss and equipment damage.

The FBI urges organizations using these systems to take the following steps:

โžก๏ธ Take controllers off the public internet
โžก๏ธ Put access behind a firewall
โžก๏ธ Change default passwords
โžก๏ธ Learn how vendors configure devices
โžก๏ธ Set safe temperature limits
โžก๏ธ Ensure alerts reach the right contacts

For technical details and more information on how to protect these systems, read our advisory: ic3.gov/CSA/2026/26110โ€ฆ
View quoted post on X
Marco (Marc) Ayala Verified account @ICS_SCADA
Kim is awesome and if you can make her keynote - do it!
Kim Zetter Verified account @KimZetter Oct 29
I'll be in London in December to do a keynote at Black Hat Europe with @nixonnixoff (pictured below) about her work tracking and unmasking members of The Com. Hope to see some of you at our fireside chat. Here's a profile I wrote about her recently: technologyreview.com/2026/02/16/113โ€ฆ
View quoted post on X