Supplemental Cyber Highlights – October 31, 2023

The following posts are useful for general awareness of current threats, vulnerabilities, guidance, and other cyber-related news or updates. These resources have been curated by the WaterISAC analyst team as items of broad relevance and benefit that do not need supplemental analysis at this time.

ICS/OT/SCADA Vulnerabilities & Threats

• Power for the People | Cyber Threats in the Energy Sector and How To Defend Against Them

IT Vulnerabilities, Malware & Threats

• F5 fixes critical BIG-IP vulnerability, PoC is public (CVE-2023-46747)
• KillNet group touts new feature-rich ‘DDoS-for-hire’ service
• Report Links ChatGPT to 1265% Rise in Phishing Emails
• North Korean hackers exploit known bug in ‘high-profile’ software vendor

Ransomware

• Boeing Investigating Ransomware Attack Claims
• California city warns of data breach after ransomware attack claims

General Awareness

• IoT’s convenience comes with cybersecurity challenges