Attacks Against Critical Infrastructures are Going Physical - 3 Use Cases

Attacks on critical infrastructure are not new. For several years now, all governments have been trying to address this essential issue for the continuity of services to citizens. If we all remember Stuxnet in 2010 or WannaCry in 2017, since the pandemic the number of attacks has been increasing, targeting organisations or services linked to people. The CISA in the United States and ENISA in the European Union are adapting their legal arsenal and regularly publish directives to strengthen measures related to the security of critical infrastructures (NIS-2 Directive). What are the purposes behind this type of attack? How and why do attackers particularly target these vital organisations? And how can we reduce the risk of these attacks against critical infrastructures? During this webinar, we will illustrate this topic through three domains that have been particularly affected in the last two years: Financial organisations, Education and Healthcare. We will take concrete examples using vulnerabilities on IT and OT networks, as well as attacks targeting Active Directory.