Yesterday, CISA, the FBI, and the National Security Agency (NSA) published a Cybersecurity Information Sheet (CSI), Contextualizing Deepfake Threats to Organizations, to provide organizations with an overview of synthetic media threats, techniques, and trends.
Today the U.S. Department of Homeland Security released its 2024 Homeland Threat Assessment (HTA), which identifies a continuing high risk of foreign and domestic terrorism in 2024. Going forward, DHS intends to release an annual HTA in place of regular National Terrorism Advisory System (NTAS) bulletins.
The following posts are useful for general awareness of current threats, vulnerabilities, guidance, and other cyber-related news or updates. These resources have been curated by the WaterISAC analyst team as items of broad relevance and benefit that do not need supplemental analysis at this time.
ICS/OT/SCADA Vulnerabilities
Siemens has posted 2 more security advisories on its site this week: Siemens Security Advisories
The Cybersecurity and Infrastructure Security Agency (CISA) has published the following ICS vulnerability advisories, as well as alerts, updates, and bulletins:
ICS Vulnerability Advisories:
The Hacker News has written an article discussing five common pitfalls that IT departments face when offboarding employees from the organization and how to avoid them.
The Record has written an article discussing the apparent targeting of the International Joint Commission, a US-Canada organization responsible for managing water systems along the border of the two countries, by the NoEscape Ransomware gang.
The following posts are useful for general awareness of current threats, vulnerabilities, guidance, and other cyber-related news or updates. These resources have been curated by the WaterISAC analyst team as items of broad relevance and benefit that do not need supplemental analysis at this time.
ICS/OT/SCADA Vulnerabilities & Threats
The Cybersecurity and Infrastructure Security Agency (CISA) has published the following ICS vulnerability advisories, as well as alerts, updates, and bulletins:
ICS Vulnerability Advisories:
Security Intelligence has written an article discussing how drones can be used to enable and exacerbate cyberattacks against organizations, including those with otherwise secured facilities, especially with the backdrop of the Ukrainian war’s advancement in drone tactics.
Truesec has posted a blog analyzing an observed phishing campaign utilizing Microsoft Teams to drop DarkGate Loader malware on victims’ networks.
1620 I Street, NW, Suite 500
Washington, DC 20006
1-866-H2O-ISAC (1-866-426-4722)
© 2025 WaterISAC. All Rights Reserved.
