You are here

Home » Cybersecurity

Cybersecurity

Head of National Council of ISACs Articulates the Importance of Cybersecurity Awareness Month and Joining an Information Sharing Community

Its Fall, the leaves are changing color, and we continue our observance of Cybersecurity Awareness Month. This month is intended to engage and educate public and private-sector partners through events and initiatives with the goal of raising awareness about cybersecurity to increase the resiliency of the nation and the critical infrastructure that sustains our communities.

Cybersecurity Awareness Month 2022 – Behavior: Using Password Managers for the Win!

by Jennifer Lyn Walker

The National Cybersecurity Alliance’s Cybersecurity Awareness Month post this week is on password managers, specifically the risks of using them. For this post, they turned to one of the top security awareness minds, KnowBe4’s Roger Grimes – check out WaterISAC’s January 26, 2022 WaterISAC Cyber Threat Briefing featuring Roger!

Threat Awareness – Emotet Continues to Adapt and Evade

Yesterday, VMware's Threat Analysis Unit published a detailed report on the infamous Emotet malware using data gathered from attacks since January 2022. The study’s key findings include that Emotet’s attack patterns are constantly evolving, the malware is modular and can serve a number of attack purposes, Emotet authors are hiding their command and control (C2) infrastructure, and the infrastructure is always shifting.

Threat Awareness – Beware of BlackByte Ransomware Disabling Security Products

Threat actors associated with the BlackByte ransomware group are employing a new sophisticated technique, dubbed “Bring Your Own Driver,” which enables attackers to bypass system and network defenses by disabling more than 1,000 drivers used by various security solutions, according to security researchers at Sophos. Researchers analyzed past attacks and found that Blackbyte threat actors have exploited known vulnerabilities in legitimate drivers resulting in disabled drivers and the prevention of endpoint detection and response (EDR) and antivirus products from operating normally.

FBI – CISA PSA: Foreign Actors Likely to Use Information Manipulation Tactics for 2022 Midterm Elections

The FBI and the Cybersecurity and Infrastructure Security Agency (CISA) have published a Public Service Announcement (PSA) to raise awareness of the potential threat posed by foreign cyber actors attempting to manipulate information or spread disinformation in the lead up to and after the 2022 midterm elections.

Joint Cybersecurity Advisory – Top CVEs Actively Exploited by People’s Republic of China State-Sponsored Cyber Actors

CISA, the Federal Bureau of Investigation (FBI), and the National Security Agency (NSA) released a joint Cybersecurity Advisory (CSA) providing the top Common Vulnerabilities and Exposures (CVEs) used since 2020 by People’s Republic of China (PRC) state-sponsored cyber actors. PRC state-sponsored cyber actors continue to exploit known vulnerabilities to actively target U.S. and allied networks, including software and hardware companies to illegally obtain intellectual property and develop access into sensitive networks.

Cybersecurity Awareness Month – Behavior: Enable MFA to (Greatly) Reduce Risk Away

This year, Cybersecurity Awareness Month has changed up its typical approach of weekly themes and is focusing on four behaviors that are most important to #BeCyberSmart and stay safe online. The behaviors focus on the “people” part of cybersecurity to ensure all individuals and organizations make smart decisions personally and professionally. The behaviors that will be highlighted during the month include:

Pages

Subscribe to Cybersecurity