Critical Infrastructure Security

Doug and the Security Weekly crew talk about vulnerabilities, are we patching the right things? This is the burning question. We will try to answer it. Segment Resources: https://blog.sonicwall.com/en-us/2024/04/patch-tuesday-which-vulnerabilities-really-need-prioritizing/

Industrial manufacturers should take steps to protect Modbus devices and segment networks.

U.S. sanctions imposed against Russian state-backed hacktivist operation Cyber Army of Russia Reborn's leader Yuliya Pankratova and primary hacker Denis Degtyarenko for their involvement in critical infrastructure cyberattacks were dismissed by Russia's embassy in the U.S.

At least 5,000 workstations at the U.S. Citizenship and Immigration Services have been taken down by the incident, which a source close to the matter notes may be resolved in over a week.

Aside from the disruption of DigitalStress' website, the law enforcement sting — which also involved the FBI and the Police Service of Northern Ireland — also resulted in the arrest of a suspected administrator, according to the UK's NCA.

Cybersecurity experts doubtful that the largest U.S. court system will be back online by July 23.

Cyber Army of Russia Reborn targeted U.S. and European water, wastewater, hydroelectric, and energy organizations' industrial control systems with simple attacks last year.