Government
U.S., UK Ink Cyber Scam Center MoU
There is now a Memorandum of Understanding (MoU) between the United States’ Scam Center Strike Force and its United Kingdom counterparts to disable scam centers committing cryptocurrency and cyber-enabled investment fraud (CIF).
Settlement Reached to Clean NJ River
Environmental Resource Holdings LLC (ERH) will spend an estimated $125 million to perform critical work to support the cleanup of the Diamond Alkali Superfund site, including the lower 17 miles of the Passaic River in New Jersey, according to a consent decree with the Department of Justice and the Environmental Protection Agency (EPA).
Nuclear Reactor Regulation Overhaul Proposed
New age, new rules. That is how the Nuclear Regulatory Commission (NRC) is thinking these days as the agency proposed a broad overhaul of its regulations governing nuclear reactor licensing and oversight.
China-based AI Firms Distilling U.S. AI Companies: Feds
China-based artificial intelligence (AI) companies are conducting systematic extraction of proprietary functionalities and capabilities of U.S. AI companies’ models, federal security agencies said.
Rule Proposed to Protect Drinking Water Near Uranium Sites
A new rule is in the works that would set clearer groundwater protection standards for communities near uranium in-situ recovery (ISR) sites, said officials at the Nuclear Regulatory Commission (NRC).
Call to Start Preparing for Quantum Now
People and organizations have been talking about quantum computing for years, if not decades and that discussion has always been about the future of the technology.
Effective Communications Key to Handling Services Issues
In an effort to help organizations plan to communicate clearly and effectively during service outages impacting IT and operational technology (OT) systems, the Feds just released a new guidance.
Aerospace Firm Settles DoD False Claims Case
Honeywell Aerospace Inc. agreed to pay just over $2 million to resolve allegations it is liable under the False Claims Act for failing to comply with cybersecurity requirements in a contract with the U.S. Department of Defense.
China-Linked Hacking Group Targets Critical Infrastructure
There is ongoing cyber activity by the China-linked hacking group QTFY going after critical infrastructure and the military and the feds issued a guidance to act as a warning.
Controlling Electronic Devices to Avert Ignition Hazards
Unsafe use of portable electronic devices (PEDs) – including pagers, cell phones, cameras, video equipment, and radios – in hazardous areas offshore is becoming more of a hazard, said officials at the Marine Minerals Administration (MMA) after series of inspections.
Feds’ Guidance on Reducing Internet Exposure
Without any doubt, organizations unknowingly leave common vulnerabilities and weaknesses exposed to the Internet, making them easy targets for exploitation like over 100 water and wastewater systems.
Tips to Address Software Vulnerabilities
Yes, cyberattacks are frightening, especially the big name hacks, but most assaults end up occurring via simple exploits of known vulnerabilities, publicly exposed devices or just poor hygiene.
ISASecure Partners with NSA on Certification Program
Cisco has fixes available to handle multiple critical vulnerabilities in its Cisco Crosswork Security after its engineering team conducted an internal security review.
Siemens PLC a Threat Target: Feds
There are active cyber threats to Siemens S7 Series PLCs and the feds want to provide relevant mitigations to protect and defend them.
Update on Medusa Ransomware Operations
More details ended up revealed on the Medusa ransomware group’s operations, including more specifics about their affiliate model and payment ranges for initial access brokers, as well as a broader list of exploited vulnerabilities.
Complaint to Stop Pet Food Maker from Selling Unhealthy Product
A complaint ended up filed against a Washington state pet food manufacturer to stop manufacturing and selling adulterated pet food.
Feds Issue Ransomware Guidance
While it has only been out for just over a year, Gunra ransomware expanded its ransomware-as-a-service (RaaS) affiliate program and is advertising it on dark web forums, according to an advisory released by the federal government.
After MN Water Attack, Feds Issue Advisory
In the wake of 30 water utilities across the state of Minnesota falling victim to a coordinated cyberattack on Sunday and Monday, CISA issued an advisory for the water and wastewater sector to protect their programmable logic controllers (PLCs).
As SBOMs Evolve, Feds Update Guidance
There is an update to the minimum elements for a software bill of materials (SBOM) to reflect the current and growing needs for SBOMs, while preserving the core principles of the document published five years ago by the National Telecommunications and Information Administration (NTIA).
How to Isolate OT Systems Under Attack
State-sponsored cyber threat actors are increasingly targeting critical infrastructure (CI) for pre-positioning, but by physically isolating vital OT and enabling systems, operators and defenders can disrupt adversaries, contain attacks in progress, and rebuild compromised systems.