Supplemental Cyber Highlights – March 21, 2024

The following posts are useful for general awareness of current cyber threats, vulnerabilities, guidance, and other cyber-related news or updates. These resources have been curated by the WaterISAC analyst team as items of broad relevance and benefit that do not need supplemental analysis at this time.

Critical Infrastructure

• Hackers claim to have breached Israeli nuclear facility’s computer network | The Record
• The Hunt: Threat Hunting in OT Environments | Dragos
• Cyberattack knocks out Pensacola city government phone lines | The Record
• Research Shows IT and Construction Sectors Hardest Hit By Ransomware | Infosecurity Magazine

IT Vulnerabilities & Security Updates

• Ivanti fixes critical Standalone Sentry bug reported by NATO | Bleeping Computer
• Atlassian Releases Fixes for Over 2 Dozen Flaws, Including Critical Bamboo Bug | The Hacker News

IT Malware, Threats & Risks

• Chinese APT ‘Earth Krahang’ Compromises 48 Gov’t Orgs on 5 Continents | Dark Reading
• Russian Intelligence Targets Victims Worldwide in Rapid-Fire Cyberattacks | Dark Reading
• New Phishing Attack Uses Clever Microsoft Office Trick to Deploy NetSupport RAT | The Hacker News

Ransomware

• RaaS groups increasing efforts to recruit affiliates | Help Net Security
• Study Uncovers 27% Spike in Ransomware; 8% Yield to Demands | Help Net Security

Cyber Resilience & General Awareness

• Managing Attack Surface | Huntress
• Adversarial evolution: How defenders must also evolve | SC Media
• The most prevalent malware behaviors and techniques | Help Net Security
• Malware stands out as the fastest-growing threat of 2024 | Help Net Security
• Microsoft announces deprecation of 1024-bit RSA keys in Windows | Bleeping Computer