You are here

Home » Cybersecurity

Cybersecurity

Joint Cybersecurity Advisory – CISA, FBI, and Partners Release Advisory on Russian Military Cyber Actors Targeting U.S. and Global Critical Infrastructure

Today, CISA, the FBI, and other U.S. and international partners released a joint Cybersecurity Advisory (CSA) titled “Russian Military Cyber Actors Target U.S. and Global Critical Infrastructure”.  The joint advisory provides cybersecurity threat intelligence, along with tactics, techniques, and procedures (TTPs) and indicators of compromise (IOCs) linked to cyber actors from the Russian General Staff Main Intelligence Directorate (GRU) 161st Specialist Training Center (Unit 29155).

White House Report – Roadmap to Enhancing Internet Routing Security

The Office of the National Cyber Director released a report Tuesday, “Roadmap to Enhancing Internet Routing Security,” designed to help fortify a vulnerable element of the internet known as Border Gateway Protocol (BGP). Administration officials have cautioned that certain technical rules for internet data routing, which is BGP, are vulnerable to hackers, and that the United States is not adequately prepared to safeguard against it.

Threat Awareness – Surge in Password Reset Attacks Fuels Fraud and Account Takeovers

A recent report from LexisNexis Risk Solutions reveals a concerning trend in password attacks, highlighting that as many as one in four password reset attempts via desktop browsers are fraudulent. Researchers identified approximately 70,000 weekly password reset attacks in the UK, a significant escalation attributed to "detail change" attacks, which surged by 232% in 2023.

Cyber Resilience – Michigan’s EGLE Launches Cybersecurity Plan for Water Treatment Operators

On Tuesday, the Michigan Department of Environment, Great Lakes, and Energy (EGLE) unveiled an initiative aimed at enhancing cybersecurity preparedness for drinking water and wastewater treatment operators throughout Michigan. This initiative intends to establish a comprehensive strategy that bolsters operators' resilience against both online and offline threats.

Ransomware Awareness – New Ransomware Group “Cicada3301” Surfaces with Connections to ALPHV Network

Security researchers have identified a new ransomware group named "Cicada3301," linked to the ALPHV/BlackCat variant and the Brutus botnet. Cicada3301 has been observed targeting VMware ESXi environments, aiming to disrupt virtual machines by shutting them down, deleting snapshots, and encrypting data. The group's first data leak site post appeared on June 25, followed by an invitation for new affiliates to join on the cybercrime forum Ramp. WaterISAC is sharing for broader awareness of threat actor groups and tactics.

Ransomware Resilience – The Always Shifting Ransomware Landscape

Given the constantly evolving nature of the ransomware landscape, it is essential to keep abreast of the latest trends and tactics employed by threat actors. Recent observations such as adapting cybercriminal operations to increased competition, shifting criminal structures in light of law enforcement action, as well as lack of trust among ransomware affiliates highlight the ever-changing nature of this growing threat. 

The following five recently observed developments within the ransomware landscape underscore some of the current notable shifts within the ecosystem:

Pages

Subscribe to Cybersecurity