The following posts are useful for general awareness of current threats, vulnerabilities, guidance, and other cyber-related news or updates. These resources have been curated by the WaterISAC analyst team as items of broad relevance and benefit that do not need supplemental analysis at this time.
CISA has developed and published a factsheet, Free Tools for Cloud Environments, to help organizations transitioning into a cloud environment identify the proper tools and techniques necessary for the protection of critical assets and data security.
Check Point has written a blog covering its recent analysis of global cyber attack statistics and findings that Q2 of 2023 saw the highest number of average weekly cyber attacks in 2 years. Globally, this translates to organizations having faced an average of 1258 attacks per week, an 8 percent increase overall.
The following posts are useful for general awareness of current threats, vulnerabilities, guidance, and other cyber-related news or updates. These resources have been curated by the WaterISAC analyst team as items of broad relevance and benefit that do not need supplemental analysis at this time.
ICS/OT – Vulnerabilities, Threats & Risks
It’s been no secret that the March 3, 2023 EPA memo on Addressing PWS Cybersecurity in Sanitary Surveys or an Alternate Process has been challenged from the beginning and has faced legal opposition. Yesterday, the U.S. Court of Appeals for the 8th Circuit in St. Louis granted a stay of the memo, thus temporarily suspending the current EPA guidance.
Note: WaterISAC does not maintain a position on this action, we are providing this development for your awareness.
Relevant coverage:
The Cybersecurity and Infrastructure Security Agency (CISA) has published the following ICS vulnerability advisories, as well as alerts, updates, and bulletins:
ICS Vulnerability Advisories:
CISA Releases Nine Industrial Control Systems Advisories (July 13, 2023)
Help Net Security has written an article discussing the consequences of the service-oriented ransomware industry’s growth. Due to the intense profitability of the industry, criminals have reproduced a legal economy with major ransomware groups using third parties and subcontractors while offering a menu of services to criminal consumers.
The Cybersecurity and Infrastructure Security Agency (CISA) and Federal Bureau of Investigation (FBI) released a joint Cybersecurity Advisory (CSA), Enhanced Monitoring to Detect APT Activity Targeting Outlook Online, to provide guidance to agencies and critical infrastructure organizations on enhancing monitoring in Microsoft Exchange Online environments.
The Cybersecurity and Infrastructure Security Agency (CISA) has published the following ICS vulnerability advisories, as well as alerts, updates, and bulletins:
ICS Vulnerability Advisories:
Despite growing awareness of the threat from phishing emails and greater adoption of multifactor authentication (MFA), threat actors are still successfully compromising firms via phishing attacks and breaching MFA protections with phishing toolkits. To help bring greater awareness to this activity, Proofpoint recently published a blog detailing how network defenders can help mitigate this threat.
1620 I Street, NW, Suite 500
Washington, DC 20006
1-866-H2O-ISAC (1-866-426-4722)
© 2025 WaterISAC. All Rights Reserved.
