You are here

Home » Cybersecurity

Cybersecurity

Threat Awareness – Microsoft Warns of Increased BEC Attack Tactics via File Hosting Services

Microsoft has recently observed more attack campaigns misusing file hosting services and which are increasingly using defense evasion tactics involving files with restricted access and view-only restrictions. They issued a warning in their threat intelligence blog on Tuesday, explaining that these attacks are intended to compromise identities and devices, and usually lead to further business email compromise (BEC) attacks.

Vulnerability Awareness – Understanding and Safeguarding Against the Critical CUPS Vulnerabilities

New high-severity vulnerabilities have been disclosed in the Common Unix Printing System (CUPS), an open-source printing system widely used on Unix-like print servers (see below for a list of affected operating systems), allowing attackers to gain entry and take control of devices remotely. WaterISAC is sharing for member awareness of actively exploited critical vulnerabilities that may impact your utility and urges system admins to take swift action to mitigate this threat to help protect against remote hijacking attacks, data theft, and other serious attacks.

ICS/OT Cyber Resilience – Federal and International Partners Release Guidance on Principles of OT Cybersecurity for Critical Infrastructure Organizations

On Tuesday, CISA, the FBI, and the NSA joined eight international partners to publish a guide for critical infrastructure organizations called “Principles of Operational Technology Cyber Security”. The guidance is primarily for the water, energy, and transportation sectors and outlines six principles to be used in the creation of a safe and security-minded OT environment.

Pages

Subscribe to Cybersecurity