You are here

Home » Cybersecurity

Cybersecurity

Ransomware Resilience – Sophos Report Analyzes Ransomware in Critical Infrastructure

Sophos published its The State of Ransomware in Critical Infrastructure 2024 report yesterday offering a comprehensive glimpse into the state of ransomware within the energy, oil/gas, and utilities sector in 2024. The report sheds light on persistent challenges and evolving trends in the sector, highly applicable to the water and wastewater systems sector. While the report indicates that recovery rates have remained steady, there is a growing trend of critical infrastructure organizations choosing to pay the ransom rather than use their backups for data recovery.

Cyber Resilience – The Importance of Proper Communication During an Incident

While cybersecurity teams tend to focus on the technical aspects of preventing and responding to incidents, an often overlooked, yet crucial feature of incident response is the importance of crisis communication. Effective communication during a cyber attack can help maintain customer trust, mitigate further damage to the brand, and ultimately lead to a smoother recovery process. Three key elements to building a foundation for successful crisis management include: creation of a crisis communication committee, developing a crisis communication plan, and conducting breach simulations.

CISA Cybersecurity Advisory – Red Team’s Operations Against a Federal Civilian Executive Branch Organization Highlights the Necessity of Defense-in-Depth

CISA released a Cybersecurity Advisory (CSA) today, “CISA Red Team’s Operations Against a Federal Civilian Executive Branch Organization Highlights the Necessity of Defense-in-Depth.” This CSA details key findings and lessons learned from a 2023 assessment – which was performed as a no-notice, long-term simulation of nation-state cyber operations – along with the red team’s tactics, techniques, and procedures (TTPs) and associated network defense activity.

NSA Cybersecurity Information Sheet: Advancing Zero Trust Maturity Throughout the Automation and Orchestration Pillar

The NSA published another Cybersecurity Information Sheet (CSI) today, its final zero-trust report, focusing on the Automation and Orchestration pillar of the Zero Trust (ZT) framework. The CSI is intended to help organizations better detect cyber threats and respond to common threats faster. It provides recommendations for automating routine tasks to better focus resources on investigating anomalies associated with advanced tactics, techniques, and procedures.

Pages

Subscribe to Cybersecurity