Cyber Security and Nuclear Energy

On November 8, CBS’s “60 Minutes” ran a segment on information security weaknesses called “Sabotaging The System.”

NetSPI consultant Michelle Eggers recaps the SANS ICS Security Summit 2023, from the beta SANS ICS 310 course to why ransomware tops ICS threats and how OT security differs from IT.

Warns of social engineering as employees return to offices—fake return-to-office emails, help-desk MFA enrollment tricks—citing Verizon DBIR's finding that 85% of breaches involve a human element.

Lessons from the Oldsmar water facility hack, where attackers used TeamViewer to alter chemical levels: underfunded US water systems rely on remote access and need urgent ICS hardening.

Explains why on-site social engineering engagements need an authorization letter, what contact details and scope it should carry, and how a decoy letter tests whether staff actually verify it.

Pairs the ESPKey Wiegand interceptor with a long-range HID MaxiProx reader to capture and replay badge data over Wi-Fi, offering a hardware-agnostic alternative to classic RFID stealing rigs.