All blog posts

When temperatures rise in the summer, millions of people head to the water. Whether it’s relaxing at the lake, visiting public pools, or enjoying a cold, refreshing drink straight from the tap. The availability of clean water is something wetake for granted as part of our quality of life. This makes what happens behind the scenes all the more critical: securing our water supply and wastewater management systems.

What about undetected backdoors and blind spots in your industrial control systems? Learn how to make your OT infrastructure more secure by implementing initial hardening measures, using real-world examples from a penetration tester’s diary.

How can companies implement the NCSC guideline “Creating and maintaining a definitive view of your Operational Technology (OT) Architecture” without being overwhelmed. Time to prioritize.

How does a network-based intrusion detection system (NIDS) enable the implementation of the NCSC's core principles 3 and 4 to document and evaluate the OT infrastructure? VÖ Teil 2: 06.01.2026

The OT risks communicated in media are diametrically opposed to the number of documented cyberattacks on industrial networks. So is this much ado about nothing? Or are we falling prey to a misunderstanding that has been projected from IT security into OT?

Public cloud connections make some things easier, but they also increase the attack surface and security dependence on third-party providers. For its NIDS for OT, Rhebo opts exclusively for on-premise operation without connection to a public cloud.

Can OT operators and IT security become a united force for cybersecurity? How can OT security be organized so that it detects purely passively, but still allows for quick and controlled response?

In a nutshell: no! In this post we dig into the specifics of why – especially in OT – both solutions are not sufficient.

In the first part of this blog post, we mapped the general functions of an intrusion detection system (IDS) according to internationally accepted definitions to possible solutions. This article highlights the additional recommendations for an IDS by national cybersecurity authorities.

In customer meetings, there is often uncertainty about what exactly an intrusion detection system in OT entails. A firewall? A SIEM? A network monitoring system? What exactly does it need to be capable of? In two blog posts, we compare the legal and technical requirements with possible solutions.

For hospitals, cybersecurity for HVAC systems and diagnostic devices is not just a matter of compliance with NIS2 or national legislation. Reducing the cyber risk of these critical assets is also crucial for supply security, data protection, and patient well-being. A network intrusion detection system (NIDS) lights the way.

In our blog post “How useful is AI in OT security monitoring?” we examined the added value and risks of artificial intelligence in OT security solutions. Time to put the some common arguments for AI to the test.

In OT, process stability is the most valued factor. For this reason, anomalies and risks that jeopardize the availability...

We have already addressed the problem of a lack of visibility in OT in the first part of this trilogy. It is also the main reason...

The media regularly warns of the impending cyber threat to industrial networks, or OT (Operational Technology)...

In May 2023 the Danish energy sector got hit by several waves of cyber attacks. SektorCERT where able to detect and mitigate the attacks...

The IEC 62443 family of standards is an old acquaintance to most security managers for industrial systems. For more than ten years...

Artificial intelligence (AI) is currently hailed as a silver bullet against almost everything. So it's no wonder that OT security is also expected to benefit from a self-learning system. Together with Rhebo and other technology partners, the Fraunhofer IOSB has investigated the possibilities in the AICAS project. The automation of AI-triggered mitigation mechanisms is not (yet) recommended in OT.