Pardon the play on arguably one of the most famous lines from the movie, “A Few Good Men,” but that’s what this recent blog post from WaterISAC Champion, Gate 15 is all about. Gate 15 has a lot of experience helping clients prepare for a ransomware attack BEFORE it happens by exercising response plans.
Today, CISA, the Federal Bureau of Investigation (FBI), and the Environmental Protection Agency released a joint Incident Response Guide for the Water and Wastewater Systems (WWS) Sector. The guide includes contributions from over 25 WWS Sector organizations spanning private industry, nonprofit, and government entities – including WaterISAC.
The following posts are useful for general awareness of current cyber threats, vulnerabilities, guidance, and other cyber-related news or updates. These resources have been curated by the WaterISAC analyst team as items of broad relevance and benefit that do not need supplemental analysis at this time.
Critical Infrastructure Resilience
Check Point Software Technologies offers a comprehensive analysis of the climbing cyber attack trends of recent years, of which 2023 pointedly made its mark. Not only did 2023 continue the significant upward trend of cyber attacks from the past few years, but the threat landscape saw a transformation in attacks observed by industry and region.
The Cybersecurity and Infrastructure Security Agency (CISA) has published the following ICS vulnerability advisories, as well as alerts, updates, and bulletins:
ICS Vulnerability Advisories:
CISA Releases One Industrial Control Systems Advisory
Products are used across multiple sectors, please check these latest advisories for specific equipment used across your ICS environments and address accordingly.
Action strongly recommended for utilities that use the affected versions (9.x and 22.x) of Ivanti Connect Secure and Policy Secure Gateways
What’s new:
The following posts are useful for general awareness of current cyber threats, vulnerabilities, guidance, and other cyber-related news or updates. These resources have been curated by the WaterISAC analyst team as items of broad relevance and benefit that do not need supplemental analysis at this time.
The Cybersecurity and Infrastructure Security Agency (CISA) has published the following ICS vulnerability advisories, as well as alerts, updates, and bulletins:
ICS Vulnerability Advisories:
CISA Releases Two Industrial Control Systems Advisories
Products are used across multiple sectors, please check these latest advisories for specific equipment used across your ICS environments and address accordingly.
Today, CISA and the FBI released a joint Cybersecurity Advisory (CSA), “Known Indicators of Compromise Associated with Androxgh0st Malware,” to provide network defenders with known indicators of compromise (IOCs) and tactics, techniques, and procedures (TTPs) associated with threat actors deploying Androxgh0st malware.
I know it’s only January, but if phishing campaigns feel like Groundhog Day, that’s because they are. Yet, despite the same ‘ol themes, it’s important to keep staff apprised and reminded of the tried-and-true tricks that threat actors keep using because they keep working. And if there’s one thing miscreants have a penchant for, it’s cultural and seasonal themes. If you’re wondering if you should warn your wonderful users about which themes to be wary, check out these recent posts from Cofense and Checkpoint for a clue!
1620 I Street, NW, Suite 500
Washington, DC 20006
1-866-H2O-ISAC (1-866-426-4722)
© 2025 WaterISAC. All Rights Reserved.
