(TLP:CLEAR) Supplemental Cyber Highlights – February 27, 2025

The following posts are useful for general awareness of current cyber threats, vulnerabilities, guidance, and other cyber-related news or updates. These resources have been curated by the WaterISAC analyst team as items of broad relevance and benefit that do not need supplemental analysis at this time.

Critical Infrastructure Resilience & OT/ICS Vulnerability Management

• Dragos’s 8th Annual OT Cybersecurity Year in Review Is Now Available | Dragos
• Dragos: Surge of new hacking groups enter ICS space as states collaborate with private actors | CyberScoop
• Claroty’s Team82 reveals vulnerabilities in Windows CE, putting industrial systems at risk | Industrial Cyber
• Identity Security Is the Missing Link To Combatting Advanced OT Threats | Tenable
• Manufacturers warned on IT/OT convergence risk, amid rampant cyber attacks | The Stack

IT Vulnerability Security Updates

• Cisco Patches Vulnerabilities in Nexus Switches | SecurityWeek
• GitLab security advisory (AV25-106) | Cyber CA
• Windows 10 KB5052077 update fixes broken SSH connections | Bleeping Computer  

IT Malware, Threats & Risks

• 2025 CrowdStrike Global Threat Report: China’s Cyber Espionage Surges 150% with Increasingly Aggressive Tactics, Weaponization of AI-powered Deception Rises | CrowdStrike
• Ponemon Insider Threat Report | Ponemon
• New Snake Keylogger variant | Broadcom

Ransomware

• BlackFog’s State of Ransomware Annual Report 2024: A Comprehensive Analysis | BlackFog
• True Cost of a Ransomware Attack: Why It’s More Than Just the Ransom | Halcyon
• Anubis: A New Ransomware Threat | KELA

Cyber Resilience, General Awareness, & AI

• FBI PSA – North Korea Responsible for $1.5 Billion Bybit Hack | FBI IC3
• Trump 2.0 Brings Cuts to Cyber, Consumer Protections | Krebs on Security
• ISAC chief on CISA security rollbacks: ‘The sky isn’t falling, yet’ | SC Media
• CISA’s AI cybersecurity playbook calls for greater collaboration, but trust is key to successful execution | CyberScoop
• The Adversarial Misuse of AI: How Threat Actors Are Leveraging AI for Cyber Operations | SOCRadar

Related WaterISAC PIRs: 6, 7, 8, 10, 11, 12