You are here

Home » Cybersecurity

Cybersecurity

People's Republic of China State-Sponsored Cyber Actor Volt Typhoon (Updated December 14, 2023)

December 14, 2023

The U.S. cybersecurity landscape faces a critical challenge with the emergence of a highly resilient botnet operated by the China state-sponsored threat actor labeled Volt Typhoon. This botnet has ingeniously repurposed end of life Small Office/Home Office (SOHO) routers from Cisco, Netgear, and Fortinet, and set up a Tor-like covert data transfer network to perform malicious operations.

Water and Wastewater Utilities and other Critical Infrastructure Fortify Defenses Against Cyber Attacks

In 2023, cyber threats to critical infrastructure, including the water and wastewater sector, surged, prompting integration of advanced technologies like artificial intelligence and machine learning. Encryption, anomaly detection, and multi-factor authentication strengthened defenses.

CISA ICS Vulnerability Advisories and Alerts, Updates, and Bulletins – December 12, 2023

The Cybersecurity and Infrastructure Security Agency (CISA) has published the following ICS vulnerability advisories, as well as alerts, updates, and bulletins:

ICS Vulnerability Advisories:

CISA Releases Two Industrial Control Systems Advisories

Products are used across multiple sectors, please check these latest advisories for specific equipment used across your ICS environments and address accordingly.

CISA and Partners Publish Joint Cybersecurity Advisory Warning of Spear-phishing Campaigns from Russian-based Threat Actor Group Star Blizzard

Today, CISA, the FBI, the National Security Agency, and other international partners released a joint cybersecurity advisory (CSA), titled “Russian FSB Cyber Actor Star Blizzard Continues Worldwide Spear-phishing Campaigns,” to raise awareness of the specific spear-phishing techniques used by a Russian-based threat actor group known as Star Blizzard that targets individuals and organizations globally.

FEMA National Preparedness Report Highlights Cyber Threats, Lack of Building Code Adoption, and Other Challenges

This week, FEMA released the 12th annual National Preparedness Report, which provides an overview of the nation’s current disaster risk and capability landscape. This year’s report highlights cyber threats, gaps in individual and household preparedness, and the lack of building code adoption as key areas for improvement to increase national resilience.

Irish Utility Experiences Water Disruption after Politically Motivated Threat Actor Compromises Israeli Pumping System

Last week, a group of unknown threat actors compromised a water pumping system for a "private group water scheme" in the Erris area of Ireland, resulting in the loss of water for 180 homeowners for two days. The perpetrators said the equipment - a "Eurotronics Israeli-made water pumping system" - was targeted due to the fact it originated in Israel, in an incident reminiscent of the recent exploitation of Unitronics PLCs.

Pages

Subscribe to Cybersecurity