Supplemental Cyber Highlights – April 18, 2024

The following posts are useful for general awareness of current cyber threats, vulnerabilities, guidance, and other cyber-related news or updates. These resources have been curated by the WaterISAC analyst team as items of broad relevance and benefit that do not need supplemental analysis at this time.

Critical Infrastructure

• Cherokee Nation Breaks Ground on $26M Water Treatment Plant | Indian Gaming
• OT Cyber Threat Landscape for the U.S. Water & Wastewater Sector | Dragos
• NY governor says cyberattack on legislative office is holding up state budget | The Record
• The big OT asset visibility misconception | Langner
• US Election Officials Told to Prepare for Nation-State Influence Campaigns | Infosecurity Magazine
• Consolidation blamed for Change Healthcare ransomware attack | CSO  

IT Vulnerabilities, Security Updates, Malware, Threats & Risks

• Cisco warns of a command injection escalation flaw in its IMC. PoC publicly available | Security Affairs
• Ivanti Releases Fixes for More Than 2 Dozen Vulnerabilities | Dark Reading
• Palo Alto firewalls: Public exploits, rising attacks, ineffective mitigation | HelpNetSecurity
• Various Botnets Pummel Year-Old TP-Link Flaw in IoT Attacks | Dark Reading

Ransomware

• The Evolving Threat of Ransomware — A Call to Action for Cybersecurity | Palo Alto Networks
• Cheap ransomware for sale on dark web marketplaces is changing the way hackers operate | HelpNetSecurity

Cyber Resilience & General Awareness

• Dark Web Monitoring: What’s the Value? | BleepingComputer
• Supply Chain Cybersecurity – the importance of everyone | Tripwire
• Navigating AI and Cybersecurity: Insights from the World Economic Forum (WEF) | Tripwire
• House votes in favor of curtailing government transactions with data brokers | The Record