Supplemental Cyber Highlights – September 3, 2024

The following posts are useful for general awareness of current cyber threats, vulnerabilities, guidance, and other cyber-related news or updates. These resources have been curated by the WaterISAC analyst team as items of broad relevance and benefit that do not need supplemental analysis at this time.

Critical Infrastructure Resilience

• New Deloitte report addresses increasing danger of cyber threats in space, issues call to action | Industrial Cyber
• Addressing OT cyber risk management threats and attacks with risk registers and tabletop exercises | Industrial Cyber
• How Benjamin Franklin is inspiring defenders to protect critical infrastructure | Cyberscoop

IT Vulnerability Security Update

• Fortra fixed two severe issues in FileCatalyst Workflow, including a critical flaw | Security Affairs
• IT Malware, Threats & Risks
• Palo Alto’s GlobalProtect VPN Spoofed to Deliver New Malware Variant | Infosecurity Magazine
• Scores of Organizations Hit By Novel Voldemort Malware | Infosecurity Magazine

Ransomware/Extortion

• Linux version of new Cicada ransomware targets VMware ESXi servers | Bleeping Computer
• How RansomHub went from zero to 210 victims in six months | Help Net Security

Cyber Resilience, General Awareness & AI

• INSIDER THREAT AWARENESS MONTH: Are you prepared? | IT Security Guru
• Cost of a data breach: Cost savings with law enforcement involvement | Security Intelligence
• Forescout reports cyber threats surge, state-sponsored hackers target VPN vulnerabilities, ransomware attacks rise | Industrial Cyber
• The Future of Cybersecurity: AI Does Play a Role | CISCO