InfoSecBulletin Cybersecurity for mankind
CISA, the FBI, and the EPA have released a guide to help water and wastewater systems respond to incidents. Over 25 organizations from various sectors contributed to this guide, including private companies, non-profit organizations, and government entities. This collaboration ensured that the guide would be useful for water and wastewater systems.
Specifically, the guide provides information about the federal support available at each stage of the cyber incident response (IR) lifecycle and aims to enhance WWS Sector cybersecurity by:
Cisco released security updates for two critical security flaws
OpenBAS: Cutting-edge breach and attack simulation platform
Critical Security Flaws Patched in Zyxel Networking Devices
CVE-2024-38811: CEV In VMware Fusion Unveiled
CERT-IN Warns Vulnerabilities in Palo Alto Networks applications
How Malaysia’s Data Centre Industry Poised for Growth
RansomHub exfiltrated data over 210 victims: US alert
Godzilla Fileless Backdoor Exploits Atlassian Confluence flaw
New Cicada ransomware targets VMware ESXi servers
Monday hits two UK bank apps causes outages
* Establishing clear guidance for reporting cyber incidents;
* Connecting utilities with available cybersecurity resources, services, and no-cost trainings;
* Empowering utilities to build a strong cybersecurity baseline to improve cyber resilience and cyber hygiene; and
* Encouraging utilities to integrate into their local cyber communities.
CISA, FBI, and EPA recommend that WWS Sector and critical infrastructure organizations review and include this guidance in their cyber incident response plans. For more sector tools, information, and resources, organizations can visit CISA.gov/water.
