You are here

Home

Cybersecurity

Cyber Resilience – CISA Publishes Fact Sheet on Free Cyber Vulnerability Scanning Services Available to Water and Wastewater Utilities

On Monday, September 11, 2023, the Cybersecurity and Infrastructure Security Agency (CISA) published a fact sheet on its free Cyber Vulnerability Scanning (VS) service for Water and Wastewater utilities. The fact sheet was developed in coordination with the EPA, the Water Sector Coordinating Council (WSCC), and the Association of State Drinking Water Administrators (ASDWA).

Insider Threat Awareness – Understanding and Mitigating the Risk of Insider Threats

Every organization is vulnerable to insider threats. As more organizations migrate their business operations to digital platforms the risk of a compromise due to an insider threat will continue to grow. Research for the latest Data Breach Investigations Report from Verizon found that 74% of data breaches involved a human element, highlighting the enduring risk both malicious and unintentional insider threats pose.  

CISA Releases Capacity Enhancement Guide to Strengthen Agency Resilience to DDoS Attack

CISA has released actionable guidance for Federal Civilian Executive Branch (FCEB) agencies to help them evaluate and mitigate the risk of volumetric distributed denial-of-service (DDoS) attacks against their websites and related web services. The Capacity Enhancement Guide: Volumetric DDoS Against Web Services Technical Guidance:  

CISA ICS Vulnerability Advisories and Alerts, Updates, and Bulletins – September 5, 2023

The Cybersecurity and Infrastructure Security Agency (CISA) has published the following ICS vulnerability advisories, as well as alerts, updates, and bulletins:

ICS Vulnerability Advisories:

CISA Releases Two Industrial Control Systems Advisories

Products are used across multiple sectors, please check these latest advisories for specific equipment used across your ICS environments and address accordingly.

Security Awareness – Smishing Campaign Targeting U.S. Citizens in Postal Scam

A group of cyber criminals, tracked as “Smishing Triad,” is conducting a large-scale smishing (SMS phishing) campaign targeting U.S. citizens and purporting to be from the United States Postal Service (USPS), according to security researchers at Resecurity. Since users typically trust SMS communication channels more than e-mail, this campaign has reportedly compromised over 100,000 victims.

Pages

Subscribe to Cybersecurity