Cloudflare has releases its inaugural Phishing Threats Report for 2023, with a key takeaway that over 30% of phishing attacks rely on newly registered domains, making them more difficult for network defenders to detect.
Bleeping Computer has written an article discussing a recently discovered campaign utilizing Google ads to deliver technical support scams to victims, highlighting the continuing threat of malvertising.
The following posts are useful for general awareness of current threats, vulnerabilities, guidance, and other cyber-related news or updates. These resources have been curated by the WaterISAC analyst team as items of broad relevance and benefit that do not need supplemental analysis at this time.
Critical Infrastructure
What’s Black and White and Read all Over? Many years before computers, “newspaper” was the usual punchline to this riddle, but in today’s culture the QR code is more representative. QR codes have been in use for many years – a Japanese automotive company actually patented them in 1994 – but the usage became much more widespread during the COVID-19 pandemic. QR codes have benefits, but like anything electronically/digitally useful, scammers eventually leverage them with nefarious intent.
The Cybersecurity and Infrastructure Security Agency (CISA) has published the following ICS vulnerability advisories, as well as alerts, updates, and bulletins:
ICS Vulnerability Advisories:
Today, CISA released the Remote Monitoring and Management (RMM) Cyber Defense Plan, the first proactive plan developed by industry and government partners through the Joint Cyber Defense Collaborative (JCDC). This plan addresses systemic risks facing the exploitation of RMM software.
The following posts are useful for general awareness of current threats, vulnerabilities, guidance, and other cyber-related news or updates. These resources have been curated by the WaterISAC analyst team as items of broad relevance and benefit that do not need supplemental analysis at this time.
Critical Infrastructure
Cyberint has written a blog post detailing its research into a widespread campaign targeting LinkedIn accounts. Researchers have observed a surge in Google searches for LinkedIn account hacking and some victims have shared that they’ve received ransom notes with instructions on how to regain access to their account.
SentinelOne has written a blog discussing how nation-state sponsored cyberattacks have risen and evolved. While rare at the turn of the millennium, easily deniable cyberattacks are now an accepted geopolitical capability and a major security concern that countries have to address.
The Chinese government would likely consider destructive or disruptive attacks on American critical infrastructure assets if it believed the U.S. was likely to intervene during a potential Chinese invasion of Taiwan, warned CISA Director Jen Easterly at a cybersecurity conference this past weekend.
1620 I Street, NW, Suite 500
Washington, DC 20006
1-866-H2O-ISAC (1-866-426-4722)
© 2025 WaterISAC. All Rights Reserved.
