Tag: cisa
-
Multiple ICS Advisories Released by CISA Detailing Exploits Vulnerabilities
Tags: cisa, control, cyber, cybersecurity, exploit, infrastructure, programming, risk, software, switch, technology, vulnerabilityThe Cybersecurity and Infrastructure Security Agency (CISA) has released two advisories highlighting significant security vulnerabilities in Industrial Control Systems (ICS) software and hardware. These vulnerabilities, identified in AutomationDirect’s C-More EA9 Programming Software and Planet Technology’s industrial switch WGS-804HPT, could pose serious risks to critical infrastructure if exploited by attackers. AutomationDirect C-More EA9 Programming Software The…
-
Industry leaders on CISA’s secure-by-design pledge: A great program with some issues
Tags: cisaHouse lawmakers and witnesses weighed in on secure-by-design incentives, subpar developers and the initiative’s future under new CISA leadership. First seen on cyberscoop.com Jump to article: cyberscoop.com/cisa-secure-by-design-house-hearing/
-
US may plan legislation to contain Chinese cyber espionage
US senators were briefed behind closed doors this week on the scale of “Salt Typhoon,” an alleged Chinese cyber-espionage campaign targeting the nation’s telecommunications networks.The FBI, CISA, and other key agencies, who were part of the briefing, revealed that the sophisticated operation compromised at least eight US telecom firms, stealing metadata and call intercepts, including…
-
CISA Warns of Zyxel Firewalls, CyberPanel, North Grid, ProjectSend Flaws Exploited in Wild
Tags: cisa, cve, cyber, cybersecurity, exploit, firewall, flaw, Hardware, infrastructure, mitigation, software, vulnerability, zyxelThe Cybersecurity and Infrastructure Security Agency (CISA) has issued warnings about several vulnerabilities being actively exploited in the wild. The vulnerabilities affect popular software and hardware products, including Zyxel firewalls, CyberPanel, North Grid, and ProjectSend. Organizations using these products are urged to apply mitigations immediately or discontinue usage if fixes are unavailable. CVE-2024-51378: CyberPanel Incorrect…
-
CISA Warns of Active Exploitation of Flaws in Zyxel, ProjectSend, and CyberPanel
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added multiple security flaws affecting products from Zyxel, North Grid Proself, ProjectSend, and CyberPanel to its Known Exploited Vulnerabilities (KEV) catalog, citing evidence of active exploitation in the wild.The list of vulnerabilities is as follows -CVE-2024-51378 (CVSS score: 10.0) – An incorrect default permissions First seen on…
-
CISA Issues Guidance to Telecom Sector on Salt Typhoon Threat
Individuals concerned about the privacy of their communications should consider using encrypted messaging apps and encrypted voice communications, CISA and FBI officials say. First seen on darkreading.com Jump to article: www.darkreading.com/cyberattacks-data-breaches/cisa-issue-guidance-telecoms-salt-typhoon-threat
-
Cyber incident board’s Salt Typhoon review to begin within days, CISA leader says
First seen on therecord.media Jump to article: therecord.media/salt-typhoon-csrb-review
-
Security teams should act now to counter Chinese threat, says CISA
Tags: 5G, access, apple, at&t, attack, authentication, china, cisa, cisco, communications, control, cyber, cybersecurity, data, encryption, espionage, exploit, google, government, hacker, infrastructure, linux, microsoft, mitigation, mobile, monitoring, network, nist, password, risk, service, siem, technology, theft, threat, vpn, vulnerabilitySecurity teams and individuals across the US need to take immediate precautions to counter the surveillance threat posed by Chinese ‘Salt Typhoon’ hackers, who have burrowed deep into telecoms infrastructure, according to the US Cybersecurity and Infrastructure Security Agency (CISA).CISA issued an official alert recommending defensive measures on December 3, as federal officials briefed journalists…
-
CISA, German cyber authorities warn Zyxel firewalls facing active exploitation
Attackers have targeted dozens of companies with Helldown ransomware, researchers found. First seen on cybersecuritydive.com Jump to article: www.cybersecuritydive.com/news/cisa-german-zyxel-firewalls-exploitation/734581/
-
CISA, FBI urge Americans to use encrypted messaging apps to combat Chinese telco hackers
U.S. government officials urged Americans to use encrypted messaging apps to avoid having their communications tapped by Chinese spies. First seen on techcrunch.com Jump to article: techcrunch.com/2024/12/04/fbi-recommends-encrypted-messaging-apps-combat-chinese-hackers/
-
CISA, FBI Issue Guidance for Securing Communications Infrastructure
The caution comes after Chinese-state-affiliated breaches of American telecommunication networks. Organizations with Cisco infrastructure should take particular note. First seen on techrepublic.com Jump to article: www.techrepublic.com/article/communications-breach-cisa-fbi-security-guidance/
-
CISA Warns of Zyxel Firewall Vulnerability Exploited in Attacks
A second vulnerability in Zyxel firewalls has been exploited in Helldown ransomware attacks over the past weeks. The post CISA Warns of Zyxel Firewall Vulnerability Exploited in Attacks appeared first on SecurityWeek. First seen on securityweek.com Jump to article: www.securityweek.com/cisa-warns-of-zyxel-firewall-vulnerability-exploited-in-attacks/
-
U.S. CISA adds ProjectSend, North Grid Proself, and Zyxel firewalls bugs to its Known Exploited Vulnerabilities catalog
U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds ProjectSend, North Grid Proself, and Zyxel firewalls bugs to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added the following vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog: Proself versions before Ver5.62, Ver1.65, and Ver1.08 are vulnerable to XXE attacks, allowing unauthenticated attackers…
-
Talent overlooked: embracing neurodiversity in cybersecurity
In cybersecurity, diverse perspectives help in addressing complex, emerging threats. Increasingly, there’s a push to recognize that neurodiversity brings significant value to cybersecurity. However, neurodiverse people frequently face systemic barriers that hinder their success in the field.Neurodiversity refers to the way some people’s brains work differently to the neurotypical brain. This includes autism, ADHD (attention…
-
CISA Releases Advisory to Monitor Networks to Detect Malicious Cyber Actors
Tags: advisory, china, cisa, cyber, cybersecurity, exploit, infrastructure, malicious, network, threatThe National Security Agency (NSA) has partnered with the Cybersecurity and Infrastructure Security Agency (CISA), the Federal Bureau of Investigation (FBI), and other entities to release a critical advisory. This initiative comes in response to the exploitation of major global telecommunications providers by a threat actor affiliated with the People’s Republic of China (PRC). The…
-
US updates telco security guidance after mass Chinese hack
Following the widespread Salt Typhoon hacks of US telecoms operators including AT&T and Verizon, CISA and partner agencies have launched refreshed security guidance for network engineers and defenders alike First seen on computerweekly.com Jump to article: www.computerweekly.com/news/366616446/US-updates-telco-security-guidance-after-mass-Chinese-hack
-
FBI Tells Telecom Firms to Boost Security Following Wide-Ranging Chinese Hacking Campaign
Guidance issued by the FBI and CISA is intended to help root out the hackers and prevent similar cyberespionage. The post FBI Tells Telecom Firms to Boost Security Following Wide-Ranging Chinese Hacking Campaign appeared first on SecurityWeek. First seen on securityweek.com Jump to article: www.securityweek.com/fbi-tells-telecom-firms-to-boost-security-following-wide-ranging-chinese-hacking-campaign/
-
FBI, CISA say Chinese hackers are still lurking in US telecom systems
First seen on therecord.media Jump to article: therecord.media/fbi-cisa-china-lurking-in-telecom-systems
-
US shares tips to block hackers behind recent telecom breaches
CISA released guidance today to help network defenders harden their systems against attacks coordinated by the Salt Typhoon Chinese threat group that breached multiple major global telecommunications providers earlier this year. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/us-shares-tips-to-block-hackers-behind-recent-telecom-breaches/
-
CISA’s New TIC 3.0 SCC Version Enhances Cybersecurity Resilience for Federal Agencies
The Cybersecurity and Infrastructure Security Agency (CISA) has released version 3.2 of the Trusted Internet Connections (TIC) 3.0 Security Capabilities Catalog (SCC), a key resource designed to help federal agencies strengthen their cybersecurity defenses. First seen on thecyberexpress.com Jump to article: thecyberexpress.com/cisa-releases-security-capabilities-catalog/
-
CIO POV: Building trust in cyberspace
Tags: access, ai, attack, best-practice, business, cio, cisa, cloud, cyber, data, deep-fake, encryption, framework, GDPR, group, identity, infrastructure, intelligence, Internet, mfa, mitre, nist, privacy, regulation, resilience, risk, service, software, strategy, technology, threat, tool, update, windowsTrust lies at the heart of every relationship, transaction, and encounter. Yet in cyberspace”, where we work, live, learn, and play”, trust can become elusive.Since the dawn of the internet nearly 50 years ago, we’ve witnessed incredible digital transformations paired with increasingly formidable threats. Knowing who and what to trust has become so difficult that…
-
FBI, CISA warn of heightened risk of BEC attacks during holiday season
Authorities encouraged prompt reporting, which can help recover stolen payments. First seen on cybersecuritydive.com Jump to article: www.cybersecuritydive.com/news/fbi-cisa-bec-attacks-holiday/734184/
-
Working in critical infrastructure? Boost your effectiveness with these cybersecurity certifications
Tags: attack, automation, awareness, china, cisa, communications, compliance, control, cyber, cybersecurity, defense, finance, germany, governance, government, healthcare, HIPAA, incident response, infrastructure, international, jobs, network, PCI, privacy, ransomware, resilience, risk, risk-management, russia, sans, service, skills, soc, supply-chain, technology, training, ukraine, update, warfareHybrid warfare between nation-states is imperilling critical infrastructure around the world, both physically and electronically. Since the start of the Ukraine-Russia conflict, hybrid cyber/physical attacks on satellite and communications, energy, transportation, water, and other critical sectors have spread across Europe and beyond.Chinese perpetrators are actively infiltrating telecommunications networks in the US and abroad, according to…
-
CISA warns about credential access in FY23 risk vulnerability assessment
CISA released its Fiscal Year 2023 (FY23) Risk and Vulnerability Assessments (RVA) Analysis, providing a crucial look into the tactics and techniques … First seen on securityintelligence.com Jump to article: securityintelligence.com/news/cisa-warns-about-credential-access-fy23-risk-assessment/
-
CISA launches portal to simplify cyber incident reporting
Information sharing just got more efficient. In August, the Cybersecurity and Infrastructure Security Agency (CISA) launched the CISA Services Portal…. First seen on securityintelligence.com Jump to article: securityintelligence.com/news/cisa-launches-portal-simplify-cyber-incident-reporting/
-
CISA and FBI release secure by design alert on cross-site scripting
CISA and the FBI are increasingly focusing on proactive cybersecurity and cyber resilience measures. Conjointly, the agencies recently released a new … First seen on securityintelligence.com Jump to article: securityintelligence.com/news/cisa-fbi-release-secure-by-design-on-cross-site-scripting/
-
CISA warnt vor Schwachstellen in industriellen Kontrollsystemen
Die amerikanische Sicherheitsbehörde CISA hat eine Warnung vor teils schwerwiegenden Sicherheitslücken in industriellen Kontrollsystemen (ICS) herausg… First seen on 8com.de Jump to article: www.8com.de/cyber-security-blog/cisa-warnt-vor-schwachstellen-in-industriellen-kontrollsystemen
-
FBI und CISA warnen vor Snatch Ransomware
ie amerikanischen Sicherheitsbehörden FBI und CISA warnen in einem gemeinsamen Dokument vor der Ransomware Snatch. Darin beleuchten sie auch die steti… First seen on 8com.de Jump to article: www.8com.de/cyber-security-blog/fbi-und-cisa-warnen-vor-snatch-ransomware
-
CISA und Fortinet warnen vor FortiOS Zero-Day Sicherheitslücken
Die amerikanische Sicherheitsbehörde CISA und Fortinet warnen Nutzer von FortiOS vor einer Sicherheitslücke, die von Kriminellen bereits aktiv ausgenu… First seen on 8com.de Jump to article: www.8com.de/cyber-security-blog/cisa-und-fortinet-warnen-vor-fortios-zero-day-sicherheitslucken