You are here

Home » Cybersecurity

Cybersecurity

(TLP:CLEAR) CISA and USCG Identify Areas for Cyber Hygiene Improvement

Summary: CISA led a proactive threat hunt engagement at a U.S. critical infrastructure organization with the support of U.S. Coast Guard (USCG) analysts. This advisory highlights areas of potential cyber hygiene improvement for other critical infrastructure organizations. During the engagement, CISA did not identify evidence of malicious cyber activity or threat actor presence on the organization’s network but did identify several areas of cybersecurity risk.

(TLP:CLEAR) Mass Exploitation of SonicWall Firewalls, Suspected Zero-Day

Summary: ACTION MAY BE REQUIRED for utilities using Gen 7 SonicWall firewalls with SSL VPN enabled. On Monday, SonicWall published a blog post confirming an active campaign targeting an unknown vulnerability in SonicWall Gen 7 firewalls. The blog post came after warnings from Arctic Wolf, Google, and Huntress, who have all indicated that there has been an increase in cyber incidents involving the Gen 7 SonicWall firewalls that use the secure sockets layer (SSL) protocol.

(TLP:CLEAR) EPA Report - Securing the Future of Water: Addressing Cyber Threats Today

Summary:  Yesterday, alongside an announcement of more than $9 million in grant funding for midsize and large water systems, the EPA published a report titled “Securing the Future of Water: Addressing Cyber Threats Today.” The report includes recommendations calling for a holistic approach to strengthen cybersecurity in the water sector by enhancing coordination and collaboration across government, associations, and wa

(TLP:CLEAR) CISA Releases Part One of Zero Trust Microsegmentation Guidance

Summary: On Tuesday, CISA released a new guide titled “Microsegmentation in Zero Trust, Part One: Introduction and Planning.” The guide is part of an ongoing effort to support Federal Civilian Executive Branch (FCEB) agencies implementing zero trust architectures (ZTAs). CISA plans to release a subsequent technical guide to offer detailed implementation scenarios and technical considerations for implementation teams.

(TLP:CLEAR) Updated Joint Cybersecurity Advisory – Scattered Spider

Summary: On Tuesday, CISA, the FBI, and several other federal and international partners released an updated joint Cybersecurity Advisory (CSA) on Scattered Spider—a cyber threat group targeting commercial facilities sectors and subsectors. The update to this advisory provides updated tactics, techniques, and procedures (TTPs) obtained through FBI investigations conducted through June 2025.

Pages

Subscribe to Cybersecurity