Supplemental Cyber Highlights – May 7, 2024

The following posts are useful for general awareness of current cyber threats, vulnerabilities, guidance, and other cyber-related news or updates. These resources have been curated by the WaterISAC analyst team as items of broad relevance and benefit that do not need supplemental analysis at this time.

Critical Infrastructure

• As Pro-Russia Hactivists Target OT Systems, Here’s What You Need To Know | Tenable
• US Releases International Cyberspace Strategy | SecurityWeek
• From Warnings to Action: Preparing America’s Infrastructure for Imminent Cyber Threats | SecurityWeek
• The missed opportunities in White House’s critical infrastructure directive | Cyberscoop
• Growing threat of malware and ransomware attacks continues to put industrial environments at risk | Industrial Cyber

IT Malware, Threats & Risks

• China-Linked Hackers Suspected in ArcaneDoor Cyberattacks Targeting Network Devices | The Hacker News
• Why Your VPN May Not Be As Secure As It Claims | Krebs on Security
• Botnet Disrupted by FBI Still Used by Russian Spies, Cybercriminals | SecurityWeek

Ransomware

• Ransomware activity is back on track despite law enforcement efforts | Help Net Security
• LockBit’s seized darknet site resurrected by police, teasing new revelations | The Record  

Cyber Resilience & General Awareness

• Why Haven’t You Set Up DMARC Yet? | Dark Reading
• Stealing cookies: Researchers describe how to bypass modern authentication | Cyberscoop
• Building a Cloud Security Flywheel: Lessons from the Field | SANS
• MITRE Hack: China-Linked Group Breached Systems in December 2023 | SecurityWeek
• Microsoft introduces passkeys for consumer accounts | Microsoft  
• Cybercrime stats you can’t ignore | Help Net Security
• Why Is Cyber Resilience Essential and Who’s Responsible for It? | Tripwire