Industrial Cybersecurity Courses and Certifications

44CON Information Security Conference

I'm the Captain Now!

A tour of connected ship systems shows how researchers found vulnerabilities that could let them steer cruise ships, disrupt oil-rig PLCs, and alter ship displays.

• YouTube
• 1 hour 1 minute
• Self-Paced
• Conference Talk

How DoD Uses K8s and Flux to Achieve Compliance and Deployment Consistency

Explore DoD's journey with K8s and Flux for improved compliance, deployment consistency, and air-gapped operations in restricted environments.

• YouTube
• 27 minutes
• Self-Paced
• Conference Talk

BruCON Security Conference

INCONTROLLER - New Malware Developed to Target Industrial Control Systems

An analysis of INCONTROLLER, state-sponsored malware targeting Schneider Electric and Omron industrial controllers with capabilities for disruption, sabotage, and physical destruction.

• YouTube
• 52 minutes
• Self-Paced
• Conference Talk

RSA Conference

Bringing Zero Trust to Industrial Control Systems

Explores how Zero Trust principles can strengthen cybersecurity across industrial control systems and bridge IT security with OT safety.

• YouTube
• 44 minutes
• Self-Paced
• Conference Talk

Recon Conference

Neurosurgery for Industrial Routers - Security of Sarian OS

Reverse-engineering the Sarian OS to expose vulnerabilities in a Digi WR21 industrial router.

• YouTube
• 1 hour 1 minute
• Self-Paced
• Conference Talk

Recon Conference

Analyzing TRISIS - The First Safety Instrumented System Malware

A technical walkthrough of TRISIS malware analysis, combining hardware and software reverse engineering of PowerPC payloads and Triconex safety-system firmware.

• YouTube
• 1 hour 3 minutes
• Self-Paced
• Conference Talk

RSA Conference

The Industrial Cyberthreat Landscape - Year in Review Report with Updates

A year-in-review of OT threat groups and newly disclosed vulnerabilities shows how industrial systems became targets and how defenders can improve resilience.

• YouTube
• 52 minutes
• Self-Paced
• Conference Talk

Black Hat

Deep Dive into an ICS Firewall - Looking for the Fire Hole

A technical examination of an industrial control systems firewall and the security gap that could expose protected systems.

• YouTube
• 44 minutes
• Self-Paced
• Conference Talk

Black Hat

Evil Bubbles or How to Deliver Attack Payload via the Physics of the Process

Explore innovative attack vectors in industrial control systems, focusing on exploiting physical processes to bypass security measures and deliver malicious payloads.

• YouTube
• 48 minutes
• Self-Paced
• Conference Talk

Black Hat

What's the DFIRence for ICS?

Explore digital forensics for industrial control systems, focusing on embedded devices in critical infrastructure. Learn data collection and analysis techniques for RTUs in electric substations.

• YouTube
• 25 minutes
• Self-Paced
• Conference Talk

BSidesLV

Red Teaming a Manufacturing Network - Without Crashing It

A practical red-team assessment framework for probing manufacturing networks safely, from internet reconnaissance and HMIs to replay and physical attacks, without disrupting operations.

• YouTube
• 52 minutes
• Self-Paced
• Conference Talk

Hack In The Box Security Conference

Faking at Level 1 - How Digital Twins Save Your PLCs

Learn how virtualized digital twins of PLCs and other OT devices can safely reproduce industrial networks for vulnerability research and penetration testing.

• YouTube
• 31 minutes
• Self-Paced
• Conference Talk

Hack In The Box Security Conference

Attacking Automated Manufacturing Systems

Examines how attackers can compromise robotic and industrial controllers to alter products, damage plants, steal secrets, or injure people.

• YouTube
• 44 minutes
• Self-Paced
• Conference Talk

Hack In The Box Security Conference

Red Team vs. Blue Team Exercises for ICS - SCADA Security

Hands-on red-team and blue-team exercises show how to attack industrial control protocols and detect and defend against ICS/SCADA attacks using MITRE ATT&CK for ICS.

• YouTube
• 1 hour 50 minutes
• Self-Paced
• Conference Talk

Hack In The Box Security Conference

Attacking Industrial Remote Controllers

A security research presentation exposing replay, command injection, emergency-stop abuse, malicious pairing, and reprogramming risks in industrial RF remote controllers.

• YouTube
• 55 minutes
• Self-Paced
• Conference Talk