Supplemental Cyber Highlights – May 30, 2024
Created: Thursday, May 30, 2024 - 18:32
Categories: Cybersecurity, OT-ICS Security, Security Preparedness
The following posts are useful for general awareness of current cyber threats, vulnerabilities, guidance, and other cyber-related news or updates. These resources have been curated by the WaterISAC analyst team as items of broad relevance and benefit that do not need supplemental analysis at this time.
Critical Infrastructure
- Digital Twin Technology Can Improve Water Utility Management, Says Info-Tech Research Group | Dark Reading
- NRECA Signs MOU With Electricity Information Sharing and Analysis Center | Dark Reading
- DoD issues information collection requirements for assessing contractor compliance with cybersecurity standards | Industrial Cyber
IT Vulnerabilities & Security Updates
- Check Point releases emergency fix for VPN zero-day exploited in attacks | Bleeping Computer
- PoC exploits for critical FortiSIEM command execution flaws released (CVE-2024-23108, CVE-2023-34992) | Help Net Security
IT Malware, Threats & Risks
- Okta Warns of Credential Stuffing Attacks Targeting Customer Identity Cloud | The Hacker News
- New Research Warns About Weak Offboarding Management and Insider Risks | The Hacker News
Ransomware
- BlackSuit Claims Dozens of Victims With Carefully Curated Ransomware | Dark Reading
- Microsoft Uncovers ‘Moonstone Sleet’ — New North Korean Hacker Group | The Hacker News
- How to improve ransomware attack outcomes | SC Magazine
Cyber Resilience & General Awareness
- Operation Endgame, the largest law enforcement operation ever against botnets | Security Affairs
- Is Your Computer Part of ‘The Largest Botnet Ever?’ | Krebs on Security
- Europol Shuts Down 100+ Servers Linked to IcedID, TrickBot, and Other Malware | The Hacker News