Government
Call to Start Preparing for Quantum Now
People and organizations have been talking about quantum computing for years, if not decades and that discussion has always been about the future of the technology.
Effective Communications Key to Handling Services Issues
In an effort to help organizations plan to communicate clearly and effectively during service outages impacting IT and operational technology (OT) systems, the Feds just released a new guidance.
Aerospace Firm Settles DoD False Claims Case
Honeywell Aerospace Inc. agreed to pay just over $2 million to resolve allegations it is liable under the False Claims Act for failing to comply with cybersecurity requirements in a contract with the U.S. Department of Defense.
China-Linked Hacking Group Targets Critical Infrastructure
There is ongoing cyber activity by the China-linked hacking group QTFY going after critical infrastructure and the military and the feds issued a guidance to act as a warning.
Controlling Electronic Devices to Avert Ignition Hazards
Unsafe use of portable electronic devices (PEDs) – including pagers, cell phones, cameras, video equipment, and radios – in hazardous areas offshore is becoming more of a hazard, said officials at the Marine Minerals Administration (MMA) after series of inspections.
Feds’ Guidance on Reducing Internet Exposure
Without any doubt, organizations unknowingly leave common vulnerabilities and weaknesses exposed to the Internet, making them easy targets for exploitation like over 100 water and wastewater systems.
Tips to Address Software Vulnerabilities
Yes, cyberattacks are frightening, especially the big name hacks, but most assaults end up occurring via simple exploits of known vulnerabilities, publicly exposed devices or just poor hygiene.
ISASecure Partners with NSA on Certification Program
Cisco has fixes available to handle multiple critical vulnerabilities in its Cisco Crosswork Security after its engineering team conducted an internal security review.
Siemens PLC a Threat Target: Feds
There are active cyber threats to Siemens S7 Series PLCs and the feds want to provide relevant mitigations to protect and defend them.
Update on Medusa Ransomware Operations
More details ended up revealed on the Medusa ransomware group’s operations, including more specifics about their affiliate model and payment ranges for initial access brokers, as well as a broader list of exploited vulnerabilities.
Complaint to Stop Pet Food Maker from Selling Unhealthy Product
A complaint ended up filed against a Washington state pet food manufacturer to stop manufacturing and selling adulterated pet food.
Feds Issue Ransomware Guidance
While it has only been out for just over a year, Gunra ransomware expanded its ransomware-as-a-service (RaaS) affiliate program and is advertising it on dark web forums, according to an advisory released by the federal government.
After MN Water Attack, Feds Issue Advisory
In the wake of 30 water utilities across the state of Minnesota falling victim to a coordinated cyberattack on Sunday and Monday, CISA issued an advisory for the water and wastewater sector to protect their programmable logic controllers (PLCs).
As SBOMs Evolve, Feds Update Guidance
There is an update to the minimum elements for a software bill of materials (SBOM) to reflect the current and growing needs for SBOMs, while preserving the core principles of the document published five years ago by the National Telecommunications and Information Administration (NTIA).
How to Isolate OT Systems Under Attack
State-sponsored cyber threat actors are increasingly targeting critical infrastructure (CI) for pre-positioning, but by physically isolating vital OT and enabling systems, operators and defenders can disrupt adversaries, contain attacks in progress, and rebuild compromised systems.
Call to Unify Worker Chemical Safety Rules
Consistency is a key factor when it comes to safety in an industrial setting, but when you add the chemical sector on top of that, it becomes imperative to ensure a solid – and consistent – safety framework.
Updated Nuclear Transportation Rules Proposed
A major update ended up proposed to the Nuclear Regulatory Commission’s (NRC) regulations on the transportation of radioactive materials, modernizing decades-old requirements to support advanced reactors, new nuclear fuels, and emerging technologies while maintaining the agency’s rigorous safety standards.
Russian APT Group Attacks Ongoing: Advisory
Russian state-supported cyber actors have been targeting and compromising various Western government and commercial organizations, including the energy sector, using the Zimbra Collaboration Suite (ZCS) software.
Iranian Threat Actors Continuing OT Attacks: Feds
There is an ongoing threat from Iranian-affiliated advanced persistent threat (APT) actors targeting Internet-connected operational technology (OT) devices, and federal security agencies issued an advisory.
NY Nuke Renewal Application OK’d to Review
Constellation’s application to extend the operating license of the R.E. Ginna nuclear power plant in Ontario, New York, just outside of Rochester, by 20 years, from 60 to 80 years total ended up accepted by the the Nuclear Regulatory Commission (NRC).