CISA releases cross-sector cybersecurity performance goals. A look at the ransomware threat to industrial organizations. The TSA says it will issue new aviation cybersecurity requirements, and announces a railway cybersecurity directive. The White House focuses on cybersecurity in the chemical sector. Guest Jim Richberg of Fortinet addresses the evolving threat landscape and coming supply chain risks. In the Learning Lab, hear the second in a series with Mike Hoffman, a Principal Industrial Consultant at Dragos, teaching infosec professionals how to think about OT security. This segment discusses the critical aspects of OT systems that have to be considered before thinking about security.

Control Loop News Brief.
CISA releases cross-sector cybersecurity performance goals. 
“Cross-sector Cybersecurity Performance Goals,” (CISA)
The ransomware threat to industrial organizations.
“Dragos Industrial Ransomware Analysis: Q3 2022,” (Dragos)
Leading European metals producer hit with malware.
“Aurubis says it was hit in wider cyberattack on metals industry” (Reuters)
Copper Giant Aurubis Shuts Down Systems Due to Cyberattack (SecurityWeek)
TSA says it will issue new aviation cybersecurity requirements.
“U.S. to issue new cybersecurity requirements for critical aviation systems,” (Reuters)
TSA announces railway cybersecurity directive.
“Rail Cybersecurity Mitigation Actions and Testing,” (TSA)
White House focuses on cybersecurity in the chemical sector.
“FACT SHEET: Biden-⁠Harris Administration Expands Public-Private Cybersecurity Partnership to Chemical Sector,” (The White House)
“White House Adds Chemical Sector to ICS Cybersecurity Initiative,” (SecurityWeek)

Control Loop Interview.
Guest Jim Richberg of Fortinet joins us to discuss the evolving threat landscape and coming supply chain risks.

Control Loop Learning Lab.
Our Learning Lab segment is the first in a series of three with Mike Hoffman, Principal Industrial Consultant at Dragos, teaching infosec professionals how to think about OT security. IN this segment, he discusses the critical aspects of OT systems that have to be considered before thinking about security.