Tag: infrastructure
-
Volt Typhoon hackers were in Massachusetts utility’s systems for 10 months
The Littleton Electric Light & Water Department was one of a range of critical infrastructure organizations targeted by the Chinese nation-state hackers. First seen on therecord.media Jump to article: therecord.media/volt-typhoon-hackers-utility-months
-
Medusa ransomware hit over 300 critical infrastructure orgs
CISA says the Medusa ransomware operation has impacted over 300 organizations in critical infrastructure sectors in the United States until last month. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/cisa-medusa-ransomware-hit-over-300-critical-infrastructure-orgs/
-
Trump nominates cyber vet Sean Plankey for CISA chief amid DOGE cuts and firings
Tags: cisa, cyber, cybersecurity, defense, disinformation, election, government, infrastructure, jobs, RedTeam, toolPlankey’s potential impact on CISA’s staff and spending cuts: CISA has long been a target of Republicans, primarily due to the minimal amount of now-discontinued work the agency conducted on misinformation efforts. It has also experienced heavy staff and spending cuts spurred by Elon Musk’s DOGE initiative.Over the past seven weeks, CISA has endured at…
-
CISA cuts $10 million annually from ISAC funding for states amid wider cyber cuts
The Cybersecurity and Infrastructure Security Agency confirmed this week that it is cutting funding for cybersecurity intelligence sharing bodies amid a wider campaign of firings and budget cuts impacting the federal cybersecurity landscape. First seen on therecord.media Jump to article: therecord.media/cisa-cuts-10-million-isac-funding
-
Trump Administration Shakes Up CISA with Staff and Funding Cuts
In a new round of cuts since Donald Trump became president, over 300 people working with the US Cybersecurity and Infrastructure Agency saw their contracts terminated First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/trump-cisa-layoffs-funding-cuts/
-
CISA Warns of Microsoft Windows Win32 Kernel Subsystem Vulnerability
The Cybersecurity and Infrastructure Security Agency (CISA) highlighted a critical vulnerability affecting the Microsoft Windows Win32 kernel subsystem. Identified as CVE-2025-24983, this use-after-free vulnerability in the Win32k component could potentially allow an authorized attacker to locally elevate privileges. The vulnerability is classified under CWE-416, which addresses issues related to use-after-free conditions that can lead to…
-
Dura Vermeer setzt auf Omada für zukunftssicheres Identitätsmanagement
Das Unternehmen stand vor der Herausforderung, eine veraltete IT-Infrastruktur zu ersetzen, die weder eine transparente Verwaltung von Zugriffsrechten noch eine effektive Umsetzung von Compliance- und Governance-Anforderungen ermöglichte. First seen on infopoint-security.de Jump to article: www.infopoint-security.de/dura-vermeer-setzt-auf-omada-fuer-zukunftssicheres-identitaetsmanagement/a40117/
-
Neues E-Book »PQC für Dummies«
Post-Quanten-Kryptografie: DigiCert-Sachbuch hilft Unternehmen bei der Vorbereitung auf das Quantum-Computing-Zeitalter. Das neue E-Book »PQC for Dummies« (Wiley Verlag) führt Einsteiger in die Thematik ein, wie sie sich auf zukünftige Herausforderungen des Quantencomputer-Zeitalters vorbereiten [1]. Verantwortliche im Unternehmen erhalten fundiertes Wissen und praxisnahe Strategien, wie sie Post-Quanten-Kryptographie (PQC) zur Absicherung ihrer digitalen Infrastruktur einsetzen können…. First…
-
Managed Extended Detection and Response Mehr IT-Sicherheit für Unternehmen durch MXDR
Cyberattacken gehören für IT-Verantwortliche in allen Branchen zum Alltag. Die IT-Infrastruktur muss daher besonders gut geschützt werden, um die Verfügbarkeit sowie Integrität aller Daten zu gewährleisten. Dabei kommen die meisten Firmen nicht an der Expertise externer Dienstleister vorbei. Eine Lösung ist Managed Extended Detection and Response (kurz MXDR). First seen on ap-verlag.de Jump to article:…
-
CISA cybersecurity workforce faces cuts amid shifting US strategy
Tags: ai, cisa, cyber, cybersecurity, exploit, governance, government, group, incident, infrastructure, jobs, RedTeam, risk, strategy, technology, threat, vulnerabilityA shift in US cybersecurity strategy?: Analysts suggest these layoffs and funding cuts indicate a broader strategic shift in the U.S. government’s cybersecurity approach. Neil Shah, VP at Counterpoint Research, sees both risks and opportunities in the restructuring.”In the near to mid-term, this could weaken the US cybersecurity infrastructure. However, with AI proliferating, the US…
-
Switzerland’s NCSC requires cyberattack reporting for critical infrastructure within 24 hours
Switzerland’s NCSC mandates critical infrastructure organizations to report cyberattacks within 24 hours of discovery. Switzerland’s National Cybersecurity Centre (NCSC) now requires critical infrastructure organizations to report cyberattacks within 24 hours due to rising cybersecurity threats. The new policy related to security breach notification is introduced as a response to the increasing number of cyber incident.…
-
Trade groups worry information sharing will worsen without critical infrastructure panel, CISA law renewal
The groups told lawmakers that both the committee and the law provide vital protections for cyber threat information swapping. First seen on cyberscoop.com Jump to article: cyberscoop.com/cyber-information-sharing-critical-infrastructure-panel-cisa-law-renewal/
-
Trump Taps Ex-DOE, NSC Leader Sean Plankey as CISA Director
Plankey Led Efforts to Engage Energy Sector in Cyber Prep During Trump’s First Term. President Donald Trump has nominated a former Energy Department and National Security Council cybersecurity official to lead the U.S. Cybersecurity and Infrastructure Security Agency. National Guard and Coast Guard Veteran Sean Plankey has been tapped to replace Jen Easterly as the…
-
Trump nominates Sean Plankey to run top US cyber agency
Sean Plankey, who served in cybersecurity roles in the first Trump administration, has been officially nominated to run the Cybersecurity and Infrastructure Security Agency (CISA), according to posting of nominations. First seen on therecord.media Jump to article: therecord.media/plankey-nominated-to-run-cisa
-
Trump nominates Plankey to run top US cyber agency
Sean Plankey, who served in cybersecurity roles in the first Trump administration, has been officially nominated to run the Cybersecurity and Infrastructure Security Agency (CISA), according to a Monday posting of nominations. First seen on therecord.media Jump to article: therecord.media/plankey-nominated-to-run-cisa
-
SCADA Vulnerabilities Allow Attackers to Cause DoS and Gain Elevated Privileges
Tags: control, cyber, data, dos, government, infrastructure, microsoft, military, network, risk, vulnerability, windowsA recent security assessment by Palo Alto Networks’ Unit 42 has uncovered multiple vulnerabilities in the ICONICS Suite, a widely used Supervisory Control and Data Acquisition (SCADA) system. These vulnerabilities, identified in versions 10.97.2 and earlier for Microsoft Windows, pose significant risks to critical infrastructure sectors such as government, military, manufacturing, water and wastewater, and…
-
CISA Urges All Organizations to Patch Exploited Critical Ivanti Vulnerabilities
The US Cybersecurity and Infrastructure Security Agency (CISA) has added five new flaws in Ivanti and VeraCore products to its Known Exploited Vulnerabilities catalog First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/cisa-kev-ivanti-critical/
-
Elon Musk spricht von großer Cyberattacke gegen X
Elon Musk sagte im TV-Sender Fox Business Network, man sei noch nicht sicher, was genau passiert sei.Die Online-Plattform X des Tech-Milliardärs Elon Musk ist am Montag zeitweise gestört gewesen. Musk selbst schrieb bei X, es laufe eine “massive Cyberattacke” gegen den Dienst. Nach dem Ausmaß zu urteilen stecke entweder eine große Gruppe dahinter oder ein Land, behauptete…
-
CISA Added 3 Ivanti Endpoint Manager Bugs to Wildly Exploited Vulnerabilities Catalog
Tags: cisa, cyber, cybersecurity, endpoint, exploit, flaw, infrastructure, ivanti, kev, risk, vulnerabilityThe Cybersecurity and Infrastructure Security Agency (CISA) has expanded its Known Exploited Vulnerabilities (KEV) catalog with the addition of three high-risk security flaws affecting Ivanti Endpoint Manager (EPM). These vulnerabilities, which involve absolute path traversal issues, have been observed being actively exploited in the wild, prompting federal agencies and organizations to implement remediation measures before…
-
U.S. CISA adds Advantive VeraCore and Ivanti EPM flaws to its Known Exploited Vulnerabilities catalog
U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds Advantive VeraCore and Ivanti EPM flaws to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added the following vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog: A Vietnamese cybercrime group, tracked as XE Group, is exploiting the above VeraCore vulnerabilities, deploying reverse shells and web shells…
-
CISOs müssen OT-Risiken stärker adressieren
Tags: china, ciso, cyber, cyberattack, exploit, firewall, hacker, infrastructure, Internet, iran, kev, kritis, military, ransomware, risk, technology, update, vulnerabilityDa Angriffe auf OT-Bereiche zunehmen, sollten CISOs einen Exposure-Management-Ansatz verfolgen.Die Bedrohungen gegen die Betriebstechnik (Operational Technology, OT) der kritischen Infrastruktur (KRITIS) verschärfen sich kontinuierlich. China baut offensive Komponenten in amerikanische Militär- und Unternehmensnetzwerke ein. Zudem haben chinesische Hacker Telekommunikationsunternehmen und Internetdienstleister infiltriert, um Zivilisten auszuspionieren. Seit etlichen Jahren, also bereits deutlich vor dem Angriffskrieg, greift…
-
CISA Adds Five Actively Exploited Vulnerabilities in Advantive VeraCore and Ivanti EPM to KEV List
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Monday added five security flaws impacting Advantive VeraCore and Ivanti Endpoint Manager (EPM) to its Known Exploited Vulnerabilities (KEV) catalog, based on evidence of active exploitation in the wild.The list of vulnerabilities is as follows -CVE-2024-57968 – An unrestricted file upload vulnerability in Advantive VeraCore First…
-
Threat Actors Exploit EncryptHub for Multi-Stage Malware Attacks
EncryptHub, a rising cybercriminal entity, has been under scrutiny by multiple threat intelligence teams, including Outpost24’s KrakenLabs. Recent investigations have uncovered previously unseen aspects of EncryptHub’s infrastructure and tactics, revealing a sophisticated multi-stage malware campaign. The threat actor’s operational security (OPSEC) lapses have provided valuable insights into their attack chain and methodologies. EncryptHub’s campaigns utilize…
-
Swiss critical sector faces new 24-hour cyberattack reporting rule
Switzerland’s National Cybersecurity Centre (NCSC) has announced a new reporting obligation for critical infrastructure organizations in the country, requiring them to report cyberattacks to the agency within 24 hours of their discovery. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/swiss-critical-sector-faces-new-24-hour-cyberattack-reporting-rule/
-
Infrastruktur: Doch kein Schuldenjoint mit Merz
Tags: infrastructureMit ihrem 500-Milliarden-Programm haben Union und SPD die Grünen vor ein Dilemma gestellt. Die Ablehnung der Pläne ist berechtigt. First seen on golem.de Jump to article: www.golem.de/news/infrastruktur-doch-kein-schuldenjoint-mit-merz-2503-194137.html