Another Microsoft Teams vulnerability has been recently disclosed that allows for the introduction of malware. Jumpsec Labs has shared its research regarding exploiting the Microsoft Teams External Tenants feature “which allows for the possible introduction of malware into any organizations using Microsoft Teams in its default configuration.”
The NSA has shared another Cybersecurity Information Sheet that addresses vulnerabilities in embedded computing functions. Earlier this month, it published joint guidance on Hardening Baseboard Management Controllers (BMCs).
The following posts are useful for general awareness of current threats, vulnerabilities, guidance, and other cyber-related news or updates. These resources have been curated by the WaterISAC analyst team as items of broad relevance and benefit that do not need supplemental analysis at this time.
The Cybersecurity and Infrastructure Security Agency (CISA) has published the following ICS vulnerability advisories, as well as alerts, updates, and bulletins:
ICS Vulnerability Advisories:
CISA Releases Four Industrial Control Systems Advisories
Products are used across multiple sectors, please check these latest advisories for specific equipment used across your ICS environments and address accordingly.
CSO Online has written an article discussing the complexities of crisis communication for local governments suffering from a ransomware incident.
Dark Reading has written an article discussing the simultaneous rise in total number of ransomware victims and fall in number of victims affected by major ransomware gangs, which suggests a growing number of smaller ransomware operators having success in the market.
The Cybersecurity and Infrastructure Security Agency (CISA) has published the following ICS vulnerability advisories, as well as alerts, updates, and bulletins:
ICS Vulnerability Advisories:
Alerts, Updates, and Bulletins:
Threat actors are increasingly exploiting legitimate online services to conduct attacks for stealing credentials and exfiltrating data while remaining undetected from unsuspecting victims, according to security researchers at Check Point.
The following posts are useful for general awareness of current threats, vulnerabilities, guidance, and other cyber-related news or updates. These resources have been curated by the WaterISAC analyst team as items of broad relevance and benefit that do not need supplemental analysis at this time.
Security Intelligence has written an article discussing the trend of repeated targets in cyber attacks and why they occur. According to Cymulate, 67 percent of companies that suffered a cyber attack are attacked again within one year, which rises to 80 percent if it’s a ransomware attack.
1620 I Street, NW, Suite 500
Washington, DC 20006
1-866-H2O-ISAC (1-866-426-4722)
© 2025 WaterISAC. All Rights Reserved.
