Abu Saleh Muhammad Zakaria - ICS / OT Cybersecurity Community

ICS / OT Cybersecurity Community

Sign in Subscribe

Abu Saleh Muhammad Zakaria

OT Cybersecurity Enthusiast | Security Researcher | ICS/SCADA Security | SANS GIAC Certified x4 | CCIE (Security) | PCNSE | SABSA | ASIS PSP | ISO 27001 LA/LI | Google Scholar: 300+ Citations | 15+ Years into Security & Counting . .

Node-RED - An OT / ICS Cybersecurity Perspective

Node-RED - An OT / ICS Cybersecurity Perspective

Most OT cybersecurity professionals dismiss Node-RED as a hobbyist tool for Raspberry Pi tinkerers. In reality, it's running inside production hardware from Siemens and Phoenix Contact, quietly becoming the connective layer between decades old PLCs and modern cloud platforms

A Million Dollar Security Gap - Nobody Talks About and How to mitigate

A Million Dollar Security Gap - Nobody Talks About and How to mitigate

India's largest nuclear plant lost 858,000 files, not through its reactor systems, but through a contractor's contractor. Here's the million-dollar security gap even the SANS Five ICS Critical Controls don't cover: third-party risk

Quantum Computing: What It Really Means for Grid and Critical Infrastructure Security

Quantum Computing: What It Really Means for Grid and Critical Infrastructure Security

For anyone working in control rooms and SOCs, chasing down anomalies in substations, staying ahead of people who want to knock out power to a city, the usual worries are familiar- like phishing emails, unpatched HMIs, a contractor plugging in a rogue USB drive etc etc. Increasingly, though, a different

Free Cybersecurity Courses & Certifications to Kickstart Your Career

Free Cybersecurity Courses & Certifications to Kickstart Your Career

Breaking into cybersecurity? Skip expensive certs! Dive into free courses with hands-on labs & certificates from ISC², Fortinet, Cisco, EC-Council, and more. Practice CTFs, set up virtual labs, and build projects to stand out. Start today—no excuses!

Hack the Hackers – Spot and Study Attackers Without Risking Your Real Setup

Threat Intelligence

Hack the Hackers – Spot and Study Attackers Without Risking Your Real Setup

7 Critical Controls For World Class OT Cybersecurity. How and why O.T. is different. How to protect ?

ICS/OT Cybersecurity Featured

7 Critical Controls For World Class OT Cybersecurity. How and why O.T. is different. How to protect ?

Master 7 Critical Control For ICS/OT cybersecurity- OT-Specific IR Plan, Defensible Architecture, Visibility & Monitoring, Secure Remote Access, Risk-Based Vuln Mgmt, Physical Security. Key tips to protect people, assets, and environment from real-world threats.

If You're Not Watching the Dark Web, You're Already Behind

If You're Not Watching the Dark Web, You're Already Behind

Dive into the Dark Web to outsmart cybercriminals. Learn their tools, tactics, and TTPs using Tor66, DeepDarkCTI, and more. Defenders monitor forums, test tools in labs, and tune SIEM/EDR to stay ahead. Use Tails, VPNs, and strict OPSEC for safe research.

Building a Strong Foundation In Cybersecurity

Building a Strong Foundation In Cybersecurity

New to cybersecurity? 15+ yr pro guides you: Start with CompTIA Security+/Network+/PenTest+, then Microsoft Azure/Server, firewalls (FortiGate/Palo Alto), SIEM (Splunk/Sentinel), NAC (Cisco ISE). Hands-on via TryHackMe/HackTheBox. Practice is key! Free options too.

Cybersecurity Checklist - May used as an Operational Guide

Cybersecurity Checklist - May used as an Operational Guide

Stay ahead of threats with a daily cybersecurity checklist: Review SIEM, firewall, and auth logs; monitor endpoints, cloud, and DLP, verify backups, patches, and vulnerabilities; ensure IR readiness and compliance. Prioritize sleep for sharp analysis. Use tools like Splunk, Wazuh, and MISP.

What is LockBit 3.0, StealBit, BlackMatter, DarkSide ? Everything we should know!

What is LockBit 3.0, StealBit, BlackMatter, DarkSide ? Everything we should know!

LockBit ransomware, active since 2021, targets critical infrastructure supply chains using RaaS and StealBit for data theft and extortion. LockBit 5.0 evades detection across Win/Linux/ESXi. US offers $15M bounty. Mitigate with segmentation, MFA, and Dragos tools.

Seven AD Hacking Techniques - Detection & Mitigation strategies.

Ethical Hacking Featured

Seven AD Hacking Techniques - Detection & Mitigation strategies.

Common Types of DDoS Attacks & Protections

Common Types of DDoS Attacks & Protections

DDoS attacks flood servers with traffic from botnets to disrupt services. Types include volumetric, TCP SYN, UDP, and application-layer attacks. Firewalls filter traffic but have limits. Mitigate with rate limiting, WAF, Anycast, and services like Cloudflare for scalability and proactive defense.