Supplemental Cyber Highlights – January 11, 2024

The following posts are useful for general awareness of current cyber threats, vulnerabilities, guidance, and other cyber-related news or updates. These resources have been curated by the WaterISAC analyst team as items of broad relevance and benefit that do not need supplemental analysis at this time.

Critical Infrastructure Resilience

• A CISO’s Guide to OT Cybersecurity & Risk Management (Nozomi Networks)
• Building Resilient OT Environments: Safeguards for Electric Utilities (Tenable)
• Dutch Engineer Used Water Pump to Get Billion-Dollar Stuxnet Malware Into Iranian Nuclear Facility: Report (Security Week)

IT Vulnerabilities, Malware & Threats

• Microsoft Exchange 2019 has reached end of mainstream support (Bleeping Computer)
• NoaBot: Latest Mirai-Based Botnet Targeting SSH Servers for Crypto Mining (The Hacker News)

Ransomware

• There is a Ransomware Armageddon Coming for Us All (The Hacker News)
• Hackers target Microsoft SQL servers in Mimic ransomware attacks (Bleeping Computer)

Cyber Resilience, General Awareness & Reports

• Facebook Job Scam (Qualys)
• Kick off the year with a digital cleanup (Kaspersky)
• What is Dark Web Monitoring? Definition and Tools (Recorded Future)
• Mandiant Details How Its X Account Was Hacked (Security Week)
• Cyber Insecurity and Misinformation Top WEF Global Risk List (Infosecurity Magazine)
• Cybersecurity: Users Less Vigilant on Mobile Phones (ISS Source)
• What is the Principle of Least Privilege? (Sucuri)