Wednesday , January 1 2025

International

CISA released Incident Response Guide for the WWS Sector

CISA

CISA, the FBI, and the EPA have released a guide to help water and wastewater systems respond to incidents. Over 25 organizations from various sectors contributed to this guide, including private companies, non-profit organizations, and government entities. This collaboration ensured that the guide would be useful for water and wastewater …

Read More »

abnormal security report
Vendor Email Attacks risen by 137% in Financial Sector in 2023

mail

The financial industry has seen a 137% rise in Vendor Email Compromise attacks in the past year, according to new data from Abnormal Security. Most threats came from email attacks that tricked people, with the sector getting 200 advanced attacks per week for every 1000 mailboxes. Last year, there were …

Read More »

World Economic Forum
Global Cybersecurity Outlook 2024: WEF report

cyber security outlook

The World Economic Forum’s Global Cybersecurity Outlook 2024, produced in collaboration with Accenture, examines the cybersecurity trends that will affect economies and societies in the year to come. The report illuminates major findings and puts a spotlight on the widening cyber inequity and the profound impact of emerging technologies. The …

Read More »

Vast Voter Data Leaks Cast Shadow Over Indonesia’s 2024 Presidential Election

Indonesia

Investigators from Resecurity’s HUNTER (HUMINT) have found that Indonesia is increasingly being targeted by cyber-threat actors who have staged attacks that pose significant long-term risks to the integrity of the country’s elections. These findings coincide with the critical and fast-approaching Indonesian presidential election set to take place in February this …

Read More »

Juniper warns of critical RCE bug in firewalls and switches

juniper

Juniper Networks released security updates to fix a critical vulnerability in its SRX Series firewalls and EX Series switches. The vulnerability allows remote code execution (RCE) without authentication. A critical security flaw named CVE-2024-21591 was found in devices’ J-Web configuration interfaces. It can be exploited by unauthenticated attackers to gain …

Read More »

CISA alert
CISA Releases Nine Industrial Control Systems Advisories

CISA

CISA issued nine advisories about Industrial Control Systems (ICS) on January 11, 2024, to give timely information about security issues, vulnerabilities, and exploits related to ICS. ICSA-24-011-03 Rapid Software LLC Rapid SCADA ICSA-24-011-04 Horner Automation Cscape ICSA-24-011-05 Schneider Electric Easergy Studio ICSA-24-011-06 Siemens Teamcenter Visualization and JT2Go ICSA-24-011-07 Siemens Spectrum …

Read More »