Two interesting items in the latest NERC newsletter.

• NERC is creating a group called Hydra. They say “Hydra will create a network of electric industry subject matter experts (SME) to handle modern fast-moving threats to the bulk power system.” There is an open invitation for two hundred SME’s. There are more and more of these pro bono opportunities, and not an increasing number of SME’s. One measure of an efforts success is the amount of participation, although a small number of active participants usually carry the day.
• Mike Assante has an interesting article on “Suspicious Probes”. Looking at activity at utility Internet gateways on control system ports. It is important to take the extra step to verify it is in fact a control system protocol on that port. In past years there was activity on the DNP3 port that caused concern, but closer analysis revealed it was an attack on another application that selected the same port.

And the control system vuln of the week:

• Wesley McGrew has published information on the GE iFix vuln and fix.