Supplemental Cyber Highlights – August 13, 2024

Cyber Resilience – Don't be Soft about Hardware Security

Cyber Resilience – VPN Exploitation, Don’t Blindly Trust Your VPN

(TLP:GREEN) MS-ISAC Report – Government Entities and SLTTs Targeted in Microsoft Teams Tycoon 2FA Phishing Campaign

CISA Shares Best Practices for Cisco Device Configuration

Supplemental Cyber Highlights – August 8, 2024

ICS/OT Threat Awareness – Censys Researchers Reveal Over 40,000 Vulnerable ICS Devices, Many Linked to Water and Wastewater

CISA Alert – CISA Releases Secure by Demand Guide: How Software Customers Can Drive a Secure Technology Ecosystem

CISA Alert – Royal Ransomware Actors Rebrand as “BlackSuit,” FBI and CISA Release Update to Joint Advisory

Supplemental Cyber Highlights – August 1, 2024

Situational Awareness – DigiCert Certificate Revocations and Possible Impact to Critical Infrastructure

Fraud Alert – EPA Office of Inspector General Issues Notice of Violation Phishing Scam