Supplemental Cyber Highlights – July 6, 2023

The following posts are useful for general awareness of current threats, vulnerabilities, guidance, and other cyber-related news or updates. These resources have been curated by the WaterISAC analyst team as items of broad relevance and benefit that do not need supplemental analysis at this time.

Vulnerabilities

• Exploited Solar Power Product Vulnerability Could Expose Energy Organizations to Attacks – SecurityWeek
• Nearly 70% of FortiGate Firewalls are vulnerable to new bug, experts say – TheRecord
• Cisco warns of bug that lets attackers break traffic encryption – Bleeping Computer

Preparedness

• Social Engineering Adds Depth to Red Team Exercises – DarkReading  
• Your Checklist for the Best “out-of-path” (OOP) DDoS Solution – Radware

Ransomware

• Microsoft Can Fix Ransomware Tomorrow – DarkReading
• Seven ways to prepare for double extortion ransomware – SCMagazine

Security Awareness

• Phishing Trends and Tactics: Q1 of 2023 – Tripwire

ICS/OT Cybersecurity

• Prioritizing Your Organization’s Industrial Secure Remote Access – Industrial Cyber