#cisa

#cisa

US government's CISA is actively assisting critical infrastructure organizations in addressing vulnerabilities exploited by ransomware gangs to prevent attacks. [ more ]

Make software secure by design to combat ransomware attacks and enhance cybersecurity measures. [ more ]

US security agencies issued advisories on Black Basta after the group claimed responsibility for a cyberattack on a healthcare provider. [ more ]

#StopRansomware advisories provide TTPs and IOCs to help organizations protect against ransomware.

ALPHV Blackcat ransomware targeting healthcare sector since mid-December 2023. [ more ]

The FBI and CISA have released guidance on the Royal ransomware operation, suggesting it may undergo a rebrand.

Rebranding in the ransomware industry is common as groups try to evade law enforcement attention.

There are similarities between Royal and BlackSuit ransomware, indicating a potential rebrand or spinoff variant. [ more ]

Chris Krebs and David Luber are among four new additions to the Cyber Safety Review Board, contributing their cybersecurity expertise. [ more ]

Law firms are adopting a cloud-first mentality, but often overlook the importance of securing their cloud environment, leaving room for vulnerabilities. [ more ]

CISA has made progress in understanding cyber risks, collaborating with industry, and promoting secure products, but more work is needed, as mentioned by departing official Eric Goldstein. [ more ]

Federal legislation aims to diversify cybersecurity workforce with $20 million annually for CISA program. [ more ]

Eric Goldstein, executive assistant director for cybersecurity at CISA, will leave next month after key initiatives and significant contributions since 2021. [ more ]

Eric Goldstein, an influential figure at CISA, is stepping down from his role as executive assistant director for cybersecurity next month. [ more ]

CISA warns of actively exploited GitLab vulnerability CVE-2023-7028, urging swift remediation to prevent potential account hijacking. [ more ]

Biden administration updated federal infrastructure protection policy via NSM-22, linking it to modern cyber threat landscape, but fell short by not including space and cloud industries. [ more ]

CISA and the FBI are urging manufacturers of small office/home office (SOHO) routers to enhance their security against attacks by state-backed hacking groups like Volt Typhoon.

The agencies are advising vendors to eliminate vulnerabilities in router web management interfaces during the design and development stages. [ more ]

The Androxgh0st malware is a botnet that collects cloud credentials and abuses the Simple Mail Transfer Protocol.

The malware targets websites using the Laravel web application framework to steal credentials and other sensitive data. [ more ]

The Cybersecurity and Infrastructure Security Agency and the FBI warn about potential threats from Chinese-made drones on critical infrastructure.

The guidance advises critical infrastructure owners and operators to reduce risk by purchasing drones from U.S. companies. [ more ]