fbpx

March 2022

CISA Releases Security Advisories for Rockwell Automation Products

https://www.cisa.gov/uscert/ncas/current-activity/2022/03/31/cisa-releases-security-advisories-rockwell-automation-products CISA has released two Industrial Controls Systems Advisories (ICSAs) detailing vulnerabilities in Rockwell Automation products. An attacker could exploit these vulnerabilities to inject code on affected system.  CISA encourages users and administrators to review ICSA-22-090-05: Rockwell Automation Logix Controllers and ICSA-22-090-07: Rockwell Automation Studio 5000 Logix Designer for more information and to Read more…

By Krypteia Group, ago

FBI Releases PIN on Ransomware Straining Local Governments and Public Services

https://www.cisa.gov/uscert/ncas/current-activity/2022/03/31/fbi-releases-pin-ransomware-straining-local-governments-and-public The Federal Bureau of Investigation (FBI) has released a Private Industry Notification (PIN) to inform U.S. Government Facilities Sector partners of cyber actors conducting ransomware attacks on local government agencies that have resulted in disrupted operational services, risks to public safety, and financial losses. CISA encourages local government officials Read more…

By Krypteia Group, ago

CISA Adds Eight Known Exploited Vulnerabilities to Catalog

https://www.cisa.gov/uscert/ncas/current-activity/2022/03/31/cisa-adds-eight-known-exploited-vulnerabilities-catalog CISA has added eight new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. These types of vulnerabilities are a frequent attack vector for malicious cyber actors and pose significant risk to the federal enterprise. Note: to view the newly added vulnerabilities in the catalog, Read more…

By Krypteia Group, ago

FBI Releases PIN on Phishing Campaign against U.S. Election Officials

https://www.cisa.gov/uscert/ncas/current-activity/2022/03/30/fbi-releases-pin-phishing-campaign-against-us-election-officials The Federal Bureau of Investigation (FBI) has released a Private Industry Notification (PIN) to warn U.S. election and other state and local government officials about invoice-themed phishing emails that could be used to harvest officials’ login credentials.  CISA encourages federal, state, and local government officials to review FBI PIN: Read more…

By Krypteia Group, ago

Google Releases Security Updates for Chrome

https://www.cisa.gov/uscert/ncas/current-activity/2022/03/30/google-releases-security-updates-chrome Google has released Chrome version 100.0.4896.60 for Windows, Mac, and Linux. This version addresses vulnerabilities that an attacker could exploit to take control of an affected system.  CISA encourages users and administrators to review the Chrome Release Note and apply the necessary update.

By Krypteia Group, ago

Mitigating Attacks Against Uninterruptable Power Supply Devices

https://www.cisa.gov/uscert/ncas/current-activity/2022/03/29/mitigating-attacks-against-uninterruptable-power-supply-devices CISA and the Department of Energy (DOE) are aware of threat actors gaining access to a variety of internet-connected uninterruptable power supply (UPS) devices, often through unchanged default usernames and passwords. Organizations can mitigate attacks against their UPS devices, which provide emergency power in a variety of applications when Read more…

By Krypteia Group, ago

Google Releases Security Updates for Chrome

https://www.cisa.gov/uscert/ncas/current-activity/2022/03/28/google-releases-security-updates-chrome Google has released Chrome version 99.0.4844.84 for Windows, Mac, and Linux. This version addresses a vulnerability that an attacker could exploit to take control of an affected system. CISA encourages users and administrators to review the Chrome Release Note and apply the necessary updates. 

By Krypteia Group, ago

Shields Health Care Group became aware of suspicious activity on its network

Shields Health Care Group, Inc. (“Shields”) recently became aware of suspicious activity on its network.  Shields provides management and imaging services on behalf of the health care facilities (“Facility Partners”) listed below.  With the assistance of third-party forensic specialists, we took immediate steps to contain the incident and to investigate Read more…

By Krypteia Group, ago

State-Sponsored Russian Cyber Actors Targeted Energy Sector from 2011 to 2018

https://www.cisa.gov/uscert/ncas/current-activity/2022/03/24/state-sponsored-russian-cyber-actors-targeted-energy-sector-2011 CISA, the Federal Bureau of Investigation, and the Department of Energy have released a joint Cybersecurity Advisory (CSA) detailing campaigns conducted by state-sponsored Russian cyber actors from 2011 to 2018 that targeted U.S. and international Energy Sector organizations. The CSA highlights historical tactics, techniques, and procedures as well as mitigations Read more…

By Krypteia Group, ago

VMware Releases Security Updates

https://www.cisa.gov/uscert/ncas/current-activity/2022/03/24/vmware-releases-security-updates VMware has released security updates to address multiple vulnerabilities in VMware Carbon Black App Control software. A remote attacker could exploit these vulnerabilities to take control of an affected system. CISA encourages users and administrators to review VMware Security Advisory VMSA-2022-0008 and apply the necessary updates.

By Krypteia Group, ago