1.7 KiB
1.7 KiB
just-talking/cyber-reading-list just-talking/cyber-reading-list
Curated, high-quality cybersecurity resources Aner has found worth reading (and referring others to), surfaced during his just-talking/cyber-terminology-ramp. Distinct from the daily RSS feed habit (see the 2026-09-28 entry in just-talking/conversations for that list) — this node is for standalone reports/articles worth keeping, not a recurring feed.
OT/ICS Security
- SANS: Top Takeaways from the Dragos OT Cybersecurity Report 2026 — free, ungated, substantial summary of Dragos's annual OT threat report. Covers 8 key 2026 OT threat shifts (adversaries staging environments months ahead, targeting HMIs/VFDs/meters/gateways to map process dependencies, initial-access-as-a-service mirroring IT ransomware ecosystems, disruption without ICS-specific payloads, engineering firms/integrators/MSPs as supply-chain targets, hacktivist groups going destructive) and names three threat groups: KAMACITE, SYLVANITE, BAUXITE. Recommended by Aner (2026-09-29) as genuinely good reading — worth recommending to others, not just personal reference.
- Dragos 2026 OT Cybersecurity Year in Review (full 91-page report + exec summary) — the primary source the SANS writeup above is based on. Gated behind a lead-gen form requiring a phone number; the SANS summary covers the substance without it. Worth going to the full report only if going deeper than the summary.