Critical Infrastructure Archives

infrastructure, threat-hunting program. threat hunting, teams, intelligence, Edge Devices data threats IT cybersecurity defense attack alerts machine identity management insider threats security phishing Cybersecurity Threats on the Rise

7 Steps To Secure Critical Infrastructure

Michelle Drolet | July 2, 2024 | Compliance and Regulations, Critical Infrastructure, cyber insurance, Vendor Risk Management

Critical infrastructure and public sector organizations such as government and municipalities, manufacturing units, communication networks, transportation services, power and water treatment plants, et. al, have been battling a growing wave of breaches ...

Security Boulevard

Infographic of how EV Chargers can be exploited

Supercharged Protection: Preventing EV Chargers Cyberattacks with LogRhythm

Nicholas Tan | June 18, 2024 | Critical Infrastructure, LogRhythm SIEM, Security Spotlight

In today’s digital age, cyberattacks are becoming increasingly frequent and sophisticated, posing serious threats to both digital and physical infrastructures. Incidents like Stuxnet, which targeted power plants, have demonstrated the dangerous interrelationship ...

LogRhythm

Response to CISA Advisory (AA24-131A): #StopRansomware: Black Basta

Francis Guibernau | May 17, 2024 | #StopRansomware, adversary emulation, Black Basta, Broad-Based Attacks, CISA Alert, Critical Infrastructure, healthcare, Indicators of Compromise (IOCs), Public Health, Ransomware, TTPs

AttackIQ has released a new attack graph in response to the recently published CISA Advisory (AA24-131A) which disseminates known Tactics, Techniques, and Procedures (TTPs) and Indicators of Compromise (IOCs) associated to Black ...

AttackIQ

Oak Ridge, McCrary Institute Establish Cybersecurity Center Focused on Electrical Grid

Nathan Eddy | April 23, 2024 | Critical Infrastructure, cybersecurity research, Cybersecurity Research Center, electric grid, funding, government, university, workforce training

In addition to supporting research centers, the $12.5 million project focuses on training the next generation of cybersecurity pros to safeguard the nation's critical infrastructure. ...

Security Boulevard

Cybersecurity Insights with Contrast CISO David Lindner | 3/29/24

David Lindner, Director, Application Security | March 29, 2024 | API security, APIs, chat apps, Critical Infrastructure, passwords

Insight #1 According to Google, zero days being exploited in the wild jumped 50% last year. I just don't understand your thought process if you are not looking at control layers like ...

AppSec Observer

Cybersecurity Insights with Contrast CISO David Lindner | 3/22/24

David Lindner, Director, Application Security | March 22, 2024 | API security, APIs, chat apps, Critical Infrastructure, passwords

Insight #1 Things are well and good in the hacker community, as they are now attacking critical water systems. But honestly, one of the attacks was due to a default admin password ...

AppSec Observer

EPA and White House Raise Alarm on Water Cybersecurity

Iran and China fingered: Biden admin. chides governors: Water infra. lacks “even basic cybersecurity precautions.” ...

Security Boulevard

Ordr Security Bulletin – Volt Typhoon State-Sponsored Cyber Actor

Pandian Gnanaprakasam | February 2, 2024 | Critical Infrastructure, CSA Advisory, security bulletin

Authors: Pandian G, Gowri Sunder Ravi, Srinivas Loke Summary of Advisory from FBI/CISA Actors with malicious intentions, particularly the People’s Republic of China-backed Volt Typhoon group, are manipulating small office/home office (SOHO) ...

Ordr Blog - Ordr

FBI Issues Ominous Warning of Imminent Cyber Attack on Critical Infrastructure

Srinivas Loke | February 1, 2024 | Critical Infrastructure, Cyber-attack, security bulletin, security strategy

In testimony before the House Select Committee on the Chinese Communist Party yesterday, FBI Director Christopher Wray delivered an ominous message: “China’s hackers are positioning on American infrastructure in preparation to wreak ...

Ordr Blog - Ordr

DOE Puts Up $70 Million to Secure US Energy Infrastructure

Jeffrey Burt | January 8, 2024 | Colonial Pipeline ransomware attack, Critical Infrastructure, Cybersecurity, Department of Energy (DOE)

The federal government will spend as much as $70 million for technologies that will create a more resilient energy delivery infrastructure that is better protected against a range of threats, including from ...

Security Boulevard