Government
Feds Issue Ivanti Advisory
Ivanti just disclosed a new exploited vulnerability affecting Ivanti Connect Secure versions 25.1.1.1 and prior, 25.1.2.2 and prior, and 22.8R2.4 and prior, and CISA just released an advisory to raise the level of awareness for security professionals.
Guidance Issued for North Korean Threat Actor
“WaterPlum,” or “Contagious Interview,” a cyber threat group targeting IT professionals is under the watch of global security agencies.
Attacker Targeting Manufacturing and Others: Feds
A nation-state type of threat actor with ties to China appears to be targeting important sectors across the globe and security agencies on an international basis issued a warning.
MI Nuclear Plant Seeks to Move Tilted Fuel Assembly
Palisades Energy (Holtec) requested permission to use custom equipment and procedures to move a tilted nuclear fuel assembly from the reactor core to the spent fuel pool.
Construction of Small Modular Reactor OK’d
A construction permit ended up approved for the Tennessee Valley Authority to build a small modular nuclear reactor at its Clinch River site in Oak Ridge, Tennessee.
More Help to Work Through Citrix Vulnerabilities
Marking what the federal government feels is a really big issue, an updated alert released to provide a SIGMA detection rule resource to help identify potentially suspicious activity affecting Citrix NetScaler ADC and Citrix NetScaler Gateway products.
OSHA Orders Railroad to Reinstate Fired Worker
Union Pacific Railroad Co. violated the Federal Railroad Safety Act when it removed from service and later terminated a North Little Rock, Arkansas, yardman who refused to work because of nearby lightning when the employee notified management of federal safety standards.
Harwood Health, Safety Grants Awarded
Grants totaling $10.2 million in funds are going to 67 organizations across the country to support worker safety to help employees and employers recognize serious workplace hazards and employ safety and health programs.
Grants Awarded to Develop Cyber Workforce
In an effort to build the workforce needed to protect the nation’s infrastructure and organizations from cybersecurity threats, nine different organizations earned a series of educational grants.
Indiana Gains Oversight of Radioactive Materials
Indiana is now the nation’s 41st Agreement State, assuming responsibility for regulating certain radioactive materials used across the state after receiving approval from the Nuclear Regulatory Commission (NRC).
New CA Safety Laws after Cold Storage Facility Fire
Being accountable for not only a fire, but the aftermath seems to be the message behind two bills California Governor Gavin Newsom signed Sunday that create new rules for the state’s industrial companies following a massive fire at a cold storage facility in Los Angeles’ Boyle Heights neighborhood this past June.
Feds Issue Advisory on Citrix Vulnerabilities
Citrix has updates available to handle eight new vulnerabilities affecting Citrix NetScaler ADC and Citrix NetScaler Gateway products that are currently undergoing attacks.
Change on Horizon for CVE Program
It remains an industry standard and when there is a vulnerability, security professionals often look at the Common Vulnerabilities and Exposures (CVE) to see where they stand.
How to Reduce Risk of Third-Party Integrators
Third-party integrators are a mainstay across the industrial sector where they provide varying types of services for ICS, such as control system design, installation, operational data analysis, device support and service, and daily operational control.
Protecting Online Identity, Access Tokens
When anyone signs in to an online service like webmail, behind the scenes there is a snippet of information, or a token, identifying you and what online resources you can use, such as your inbox, contacts or other potentially sensitive information.
Learning Cyber Decoy Strategies
Taking the idea of a honeypot to a new level by employing decoy capabilities into broader cyber defense planning, it might be possible to detect and disrupt malicious activity early in the intrusion lifecycle.
Active Directory Remains Focus for Attackers
Threat actors are using new methods to gain access to accounts in a Windows domain while evading detection and global security agencies issued an update to warn users on the tactics.
U.S., UK Ink Cyber Scam Center MoU
There is now a Memorandum of Understanding (MoU) between the United States’ Scam Center Strike Force and its United Kingdom counterparts to disable scam centers committing cryptocurrency and cyber-enabled investment fraud (CIF).
Settlement Reached to Clean NJ River
Environmental Resource Holdings LLC (ERH) will spend an estimated $125 million to perform critical work to support the cleanup of the Diamond Alkali Superfund site, including the lower 17 miles of the Passaic River in New Jersey, according to a consent decree with the Department of Justice and the Environmental Protection Agency (EPA).
Nuclear Reactor Regulation Overhaul Proposed
New age, new rules. That is how the Nuclear Regulatory Commission (NRC) is thinking these days as the agency proposed a broad overhaul of its regulations governing nuclear reactor licensing and oversight.