Critical Infrastructure Security

Third-party vendors responsible for 90% of multiple breaches in sector.

Five reasons why supply chain attacks continue – and three tips for how to respond.

The Cyberspace Solarium Commission 2.0 and Auburn University's McCrary Institute for Cyber and Critical Infrastructure have released a report urging the next U.S. president to prioritize addressing incongruent cybersecurity regulations, bolstering the country's cyber defenses, and collaborating with the private sector in strengthening critical infrastructure protections.

All of the companies were alleged by the SEC to have downplayed the intrusion, with Unisys discovered by a federal investigation to have regarded the attack's risk as "hypothetical" despite awareness of massive data theft and Avaya disclosing only limited email message access despite knowledge of more extensive compromise.

Attacks by Funnull exploited Polyfill.io access to facilitate malware compromise and redirection to the websites, which impersonate casino conglomerate Sands and the Bwin and Bet365 gambling portals.

Such intrusions, most of which were distributed denial-of-service attacks, have only resulted in the temporary disruptions of the country's central online portal, electricity and telecommunications authorities, local airport operator, an oil firm, and a major bank, according to Cyprus officials.

Such an ad, which priced the exfiltrated data archive at $15,000 worth of cryptocurrency, was immediately removed by TAINTU due to Breach Forums users' lack of seriousness to his claims.