Supplemental Cyber Highlights – June 6, 2023

The following posts are useful for general awareness of current threats, vulnerabilities, guidance, and other cyber-related news or updates. These resources have been curated by the WaterISAC analyst team as items of broad relevance and benefit that do not need supplemental analysis at this time.

• Microsoft links Clop ransomware gang to MOVEit data-theft attacks – Bleeping Computer
• 5 unusual cybersecurity tips that actually work – Malwarebytes
• Adversaries increasingly using vendor and contractor accounts to infiltrate networks – Cisco Talos Intelligence
• Qakbot: Retool, Reinfect, Recycle – Lumen
• Forescout predicts that AI-assisted attacks will soon target OT, unmanaged devices – Industrial Cyber
• Threat actors can exfiltrate data from Google Drive without leaving a trace – Help Net Security
• U.S., ROK Agencies Alert: DPRK Cyber Actors Impersonating Targets to Collect Intelligence – National Security Agency