Supplemental Cyber Highlights – June 8, 2023

The following posts are useful for general awareness of current threats, vulnerabilities, guidance, and other cyber-related news or updates. These resources have been curated by the WaterISAC analyst team as items of broad relevance and benefit that do not need supplemental analysis at this time.

• Please note this update if your utility uses an impacted device: Barracuda says hacked ESG appliances must be replaced immediately – Bleeping Computer
• New ‘PowerDrop’ malware targeting US aerospace industry – The Record
• Revising Public-Private Collaboration to Protect U.S. Critical Infrastructure – Foundation for Defense of Democracies
• Actionable Insights: Reduce Your Organization’s Risk from TOAD Attack Campaigns – Proofpoint
• No matter where your employees go, there you are – SC Media
• 5 Tips for Building a Security Reporting Culture – Cofense
• 10 security tool categories needed to shore up software supply chain security – CSO Online
• Why a proactive detection and incident response plan is crucial for your organization – Microsoft
• 7 tips for spotting a fake mobile app – WeLiveSecurity