UPDATE January 13, 2022 – Log4j Vulnerability Response

(TLP:WHITE) Joint Cybersecurity Advisory (AA22-011A) Issued to U.S. Critical Infrastructure for Understanding and Mitigating Russian State-Sponsored Cyber Threats

APT Victims – Size Doesn’t Matter

Ransomware Banks on Payroll Firm – Highlights how Attack on Vendor has Direct Impact to its Customers

OT/ICS Security and Resilience – Humans, Basics, and Use Cases

Critical Infrastructure Resilience – Control Systems Upgrade Done Right Involves Cybersecurity

Reminder for Critical Infrastructure to Stay Vigilant Against Threats During Holidays and Weekends

Joint Cybersecurity Advisory Regarding Iranian APT – Another Threat Emphasizing the Importance of Patching

(TLP:WHITE) EPA and WaterISAC Joint Advisory Regarding Continued Email Account Compromise Incidents Against U.S. Water and Wastewater Systems

Threat Awareness – Emotet, Everybody’s Email Enemy (Re)Emerges and Could Lead to More Ransomware

Beyond Policies and Procedures – The Cybersecurity Audit Program