Siemens Shares Incident Response Playbook for Energy Infrastructure
Dark Reading
MARCH 6, 2020
The playbook simulates a cyberattack on the energy industry to educate regulators, utilities, and IT and OT security experts.
Education Energy and Utilities Security 
CISA JCDC Will Focus on Energy Sector
Security Affairs
APRIL 5, 2023
This effort began with the 2018 establishment of the Cybersecurity and Infrastructure Security Agency (CISA) , a Department of Homeland Security division. Strengthen operational integration and collaboration with members of the energy sector. Not long after, attackers targeted six stations in the Pacific Northwest.
Join 55,000+
Insiders
Sign Up for our Newsletter
This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.
Trending Sources
FBI’s Vetted Info Sharing Network ‘InfraGard’ Hacked
Krebs on Security
DECEMBER 13, 2022
“InfraGard connects critical infrastructure owners, operators, and stakeholders with the FBI to provide education, networking, and information-sharing on security threats and risks,” the FBI’s InfraGard fact sheet reads. . That InfraGard member, who is head of security at a major U.S. Department of Defense.
Business ID Theft Soars Amid COVID Closures
Krebs on Security
JULY 27, 2020
based cyber intelligence firm Hold Security has been monitoring the communications between and among a businesses ID theft gang apparently operating in Georgia and Florida but targeting businesses throughout the United States. For the past several months, Milwaukee, Wisc. For the past several months, Milwaukee, Wisc. ” PHANTOM OFFICES.
Operation Cronos: law enforcement disrupted the LockBit operation
Security Affairs
FEBRUARY 19, 2024
Since January 2020, affiliates utilizing LockBit have targeted organizations of diverse sizes spanning critical infrastructure sectors such as financial services, food and agriculture, education, energy, government and emergency services, healthcare, manufacturing, and transportation. on January 5, 2020.
China-linked APT Volt Typhoon remained undetected for years in US infrastructure
Security Affairs
FEBRUARY 8, 2024
In the most recent campaign, the group targeted organizations in the communications, manufacturing, utility, transportation, construction, maritime, government, information technology, and education sectors. The Volt Typhoon group has been active since at least mid-2021 it carried out cyber operations against critical infrastructure.
FBI chief says China is preparing to attack US critical infrastructure
Security Affairs
APRIL 19, 2024
In the most recent campaign, the group targeted organizations in the communications, manufacturing, utility, transportation, construction, maritime, government, information technology, and education sectors. The Volt Typhoon group has been active since at least mid-2021 it carried out cyber operations against critical infrastructure.
Russia-linked APT28 compromised Ubiquiti EdgeRouters to facilitate cyber operations
Security Affairs
FEBRUARY 28, 2024
The Federal Bureau of Investigation (FBI), National Security Agency (NSA), US Cyber Command, and international partners released a joint Cybersecurity Advisory (CSA) to warn that Russia-linked threat actors are using compromised Ubiquiti EdgeRouters (EdgeRouters) to evade detection in cyber operations worldwide. .
FBI obtained 7,000 LockBit decryption keys, victims should contact the feds to get support
Security Affairs
JUNE 6, 2024
” said Bryan Vorndran, the Assistant Director at the FBI Cyber Division, during the 2024 Boston Conference on Cyber Security. The NCA and its global partners have secured over 1,000 decryption keys that will allow victims of the gang to recover their files for free. on January 5, 2020.
US GOV OFFERS A REWARD OF UP TO $15M FOR INFO ON LOCKBIT GANG MEMBERS AND AFFILIATES
Security Affairs
FEBRUARY 21, 2024
The NCA and its global partners have secured over 1,000 decryption keys that will allow victims of the gang to recover their files for free. Additionally, the US authorities has unveiled indictments against two Russian nationals, accusing them of conspiring to carry out LockBit attacks.
Operators behind Dark Caracal are still alive and operational
Security Affairs
NOVEMBER 29, 2020
” During the last campaign, the hackers targeted multiple sectors including Government, financial, energy, food industry, healthcare, education, IT, and legal institutions. Samples from the Dark Caracal campaign (2017) utilized around 100 commands, compared to the current 120 command version we analyzed.
More details about Operation Cronos that disrupted Lockbit operation
Security Affairs
FEBRUARY 20, 2024
The NCA and its global partners have secured over 1,000 decryption keys that will allow victims of the gang to recover their files for free. .” Additionally, the US authorities has unveiled indictments against two Russian nationals, accusing them of conspiring to carry out LockBit attacks. on January 5, 2020.
Iran-linked Mint Sandstorm APT targeted US critical infrastructure
Security Affairs
APRIL 19, 2023
Mint Sandstorm also used custom tools in selected targets, notably organizations in the energy and transportation sectors. The group rapidly weaponized N-day vulnerabilities in popular enterprise applications by using publicly disclosed POCs.
Electrification: a lottery ticket that utilities must claim
CGI
SEPTEMBER 27, 2017
Electrification: a lottery ticket that utilities must claim. Utilities face a fundamental dilemma. Due to unprecedented pressure to support the move to an energy-efficient and low-carbon system, they face the paradox of encouraging consumers to consume less of what they sell and distribute—electricity. Wed, 09/27/2017 - 07:00.
Leaked documents from Russian firm NTC Vulkan show Sandworm cyberwarfare arsenal
Security Affairs
APRIL 2, 2023
Energy utilities and oil and gas, but also water utilities and transportation systems, are privileged targets of nation-state actors. ” concludes the report.
China-linked APT Volt Typhoon exploited a zero-day in Versa Director
Security Affairs
AUGUST 27, 2024
In the most recent campaign, the group targeted organizations in the communications, manufacturing, utility, transportation, construction, maritime, government, information technology, and education sectors. The APT group is using almost exclusively living-off-the-land techniques and hands-on-keyboard activity to evade detection.
China-linked hackers target government agencies by exploiting flaws in Citrix, Pulse, and F5 systems, and MS Exchange
Security Affairs
SEPTEMBER 15, 2020
CISA published a security advisory warning of a wave of attacks carried out by China-linked APT groups affiliated with China’s Ministry of State Security. ” reads the security advisory. Government agencies.” CVE-2019-19781 enabled the actors to execute directory traversal attacks.[ 1 ] continues the advisory.
Government 
109
109 
DOE Releases Report on Consumer Privacy Issues Related to Smart Grid Technologies
Hunton Privacy
OCTOBER 12, 2010
On October 5, 2010, the Department of Energy (“DOE”) released a report entitled “Data Access and Privacy Issues Related to Smart Grid Technologies.” The idea behind the Smart Grid is that electricity can be delivered more efficiently using data collected through monitoring consumers’ energy use.
Spotlight Podcast: CSO Chris Walcutt on Managing 3rd Party OT Risk
The Security Ledger
MAY 16, 2024
Related Stories Citing Attacks On Small Utilities, Dragos Launches Community Defense Program FBI: Iranian APT Targets Israeli-Made PLCs Used In Critical Industries China Calls Out U.S. Accordingly, Chris stresses the importance of security training for employees that is focused on creating memorable learning experiences. For Hacking.
Risk 59
59 
China Publishes Draft Regulations on Protecting the Security of Key Information Infrastructure
Hunton Privacy
JULY 11, 2017
On July 10, 2017, the Cyberspace Administration of China published a new draft of its Regulations on Protecting the Security of Key Information Infrastructure (the “Draft Regulations”), and invited comment from the general public. This post has been updated. . They must conduct this inspection and evaluation at least once a year.
Updates on Federal Cybersecurity Legislation
Hunton Privacy
SEPTEMBER 10, 2010
This bill would amend the Federal Power Act to grant the Federal Energy Regulatory Commission (“FERC”) authority to issue emergency orders requiring critical infrastructure facility operators to take actions necessary to protect the bulk power system. The American Clean Energy Leadership Act.
How Red Hat OpenShift on AWS (ROSA) accelerates enterprise modernization initiatives on cloud, delivering business application innovation
IBM Big Data Hub
MAY 26, 2023
Similar use cases in other industries include integrated member experience in Healthcare, smart asset performance and security in Energy & Utilities, connected vehicle services in Automotive, operations and process optimization as part of industry 4.0
Cloud 72
72 
The Week in Cyber Security and Data Privacy: 20 – 26 November 2023
IT Governance
NOVEMBER 28, 2023
The post The Week in Cyber Security and Data Privacy: 20 – 26 November 2023 appeared first on IT Governance UK Blog. We’ll be back next week with the biggest and most interesting news stories, all rounded up in one place for you. In the meantime, if you missed it, check out last week’s round-up.
Data Privacy 52
52 
5 Major Cybersecurity Trends to Know for 2024
eSecurity Planet
DECEMBER 19, 2023
.” “Organizations faced similar security visibility and control challenges with SaaS apps like Box or Dropbox,” adds Kunal Agarwal, Founder and CEO, dope.security. For more on governance and policies, check out our article on IT security policies , including their importance and benefits, plus tips to create or improve your own policy.
Cybersecurity 140
140 
Infosource Global IDP Vertical Market Analysis 2023-2024 Update
Info Source
DECEMBER 18, 2024
Sectors with lower digital maturity, such as Legal and Education, show varied deployment speeds. Additionally, some sectors actively contribute to IDP development, with governments playing a key role through funding and directives, and infrastructure providers like Telecom and Energy companies enabling digital transformation.
Marketing 52
52 
How AI Could Write Our Laws
Schneier on Security
MARCH 14, 2023
Big energy companies expect action whenever there is a move to end drilling leases for federal lands, in exchange for the tens of millions they contribute to congressional reelection campaigns. The bill appealed to many privacy-conscious education advocates, and appropriately so. In some cases, the objective of that money is obvious.
Hidden Biases in Cybersecurity Reviews – And How to Use Them
eSecurity Planet
SEPTEMBER 8, 2023
For example, when surveying the market for email security, survey results should include respondents from each category that might represent different needs. The survey should have representation from categories such as: Company size: small to large Industry vertical: healthcare, energy, etc.
Cybersecurity 102
102 
A Soccer Field on the Data Center, Chickens in the Parking Lot - in Northern Virginia
Interactive Information Management
JANUARY 31, 2014
Does this concentration of sensitive, valuable information pose a physical, critical infrastructure security threat to my community? A user/purchaser of local resources, from facility supplies, energy and materials to IT equipment and services 4. A local workforce development, education and training resource 9.
The CyberWire Daily Podcast EP. 389 With Guest Speaker David Brumley
ForAllSecure
AUGUST 14, 2019
The CyberWire Daily podcast delivers the day's cyber security news into a concise format. Dave Bittner: [00:00:03] A contractor for Russia's FSB security agency was apparently breached. Dave Bittner: [00:00:03] A contractor for Russia's FSB security agency was apparently breached. It's time to build your security the same way.
Cloud 52
52 
The Hacker Mind Podcast: Reverse Engineering Smart Meters
ForAllSecure
MAY 13, 2022
For example, in 2009, the Obama administration provided financial incentives to utilities in the United States. And again, smart meters were positioned squarely as making the environment more friendly by knowing how and when energy is being used by individual customers. But we all know how security by obscurity works in the end.
Infosource Global Capture & IDP Vertical Market Analysis 2022-2023 Update
Info Source
DECEMBER 8, 2023
It is important to note that in countries where organisations in segments like Healthcare, Education, Transportation or Finance are fully or partially owned by the respective state, the sectors are covered in their respective verticals. We predict a growth in global demand with double digit growth rates for the combined sector.
Marketing 40
40 
The CyberWire Daily Podcast EP. 389 With Guest Speaker David Brumley
ForAllSecure
AUGUST 14, 2019
The CyberWire Daily podcast delivers the day's cyber security news into a concise format. Dave Bittner: [00:00:03] A contractor for Russia's FSB security agency was apparently breached. Dave Bittner: [00:00:03] A contractor for Russia's FSB security agency was apparently breached. It's time to build your security the same way.
Cloud 40
40 
THE CYBERWIRE DAILY PODCAST EP. 389 WITH GUEST SPEAKER DAVID BRUMLEY
ForAllSecure
AUGUST 14, 2019
The CyberWire Daily podcast delivers the day's cyber security news into a concise format. Dave Bittner: [00:00:03] A contractor for Russia's FSB security agency was apparently breached. Dave Bittner: [00:00:03] A contractor for Russia's FSB security agency was apparently breached. It's time to build your security the same way.
Cloud 40
40 
The Week in Cyber Security and Data Privacy: 27 November – 3 December 2023
IT Governance
DECEMBER 5, 2023
The security researcher Bob Diachenko of SecurityDiscovery first identified the exposed information in mid-September. Source (New) Education USA Yes 1,493 Kimber Mfg., Source (New) Manufacturing USA Yes 1,212 Butte School District Source (New) Education USA Yes 900+ Fenway Community Health Center, Inc.
Data Privacy 92
92 
News alert: Beazley reports on how AI, new tech distract businesses as cyber risk intensifies
The Last Watchdog
JULY 13, 2023
Is business becoming dulled to the cyber security threat As cyber fears decrease, the technological risk landscape has fragmented, with executives nearly as concerned about the perceived threat posed by disruptive new technologies, such as AI, as the risk of cybercrime.
Risk 189
189 
The Week in Cyber Security and Data Privacy: 4 – 10 December 2023
IT Governance
DECEMBER 11, 2023
Researchers from the German cyber security company Aplite discovered 3,806 servers from 111 countries accessible on the Internet. Source (New) Manufacturing Canada Yes 1.2 TB At least two South Korean defence companies and three other South Korean companies Source (New) Defence and unknown South Korea Yes 1.2
Data Privacy 89
89 
The Week in Cyber Security and Data Privacy: 11 – 18 December 2023
IT Governance
DECEMBER 19, 2023
An investigation determined that personal data, including names, addresses, phone numbers, Social Security numbers, dates of birth and bank account numbers, belonging to nearly 15 million people was obtained by an unauthorised party between 30 October and 1 November. Data breached: personal data belonging to 14,690,284 individuals.
Data Privacy 52
52 
The Hacker Mind Podcast: Hacking Industrial Control Systems
ForAllSecure
APRIL 26, 2022
So there’s a need, a definite need, for information security professionals to have access to industrial control systems -- not virtual, but actual hands on systems -- so they can learn. In a moment I’ll introduce you to someone who is trying to do that--bring ICS equipment to security conferences. Technology Security.
The Week in Cyber Security and Data Privacy: 22 – 28 January 2024
IT Governance
JANUARY 30, 2024
Mobile network database breach exposes 750 million Indians’ personal data The Indian security company CloudSEK claims to have found the personal data of 750 million Indians for sale on an “underground forum”. Data breached: 2 PB.
Data Privacy 52
52 
The Week in Cyber Security and Data Privacy: 12 – 18 February 2024
IT Governance
FEBRUARY 21, 2024
Fowler sent a responsible disclosure notice when he discovered the database and it was secured the following day. Source New Telecoms USA Yes 6,158 Nabholz Construction Company Employee Welfare Health Plan Source 1 ; source 2 New Healthcare USA Yes 5,326 Dawson James Securities, Inc. North Hill Home Health Care, Inc.,
Data Privacy 52
52 
The Week in Cyber Security and Data Privacy: 5 – 11 February 2024
IT Governance
FEBRUARY 14, 2024
Compromised data includes policyholders’ and their families’ civil status, dates of birth and social security numbers, as well as the name of their health insurer and information relating to their contracts. It has since been confirmed by Anukul Peedkaew, the permanent secretary of social development and human security.
Data Privacy 52
52 
The Weeks in Cyber Security and Data Privacy: 18 – 31 December 2023
IT Governance
JANUARY 3, 2024
billion records The security researcher Jeremiah Fowler discovered an unprotected database exposing more than 1.5 Fowler contacted the company, which secured the database. The security researcher Bob Diachenko identified the leak in September and contacted TuneFab, which fixed the misconfiguration within 24 hours.
Data Privacy 95
95 
How Content Services Are Enabling the Digital Transformation of Electric Utilities
AIIM
MARCH 4, 2022
Electric utilities in the United States are a major source of CO2 – they created 1.55 And according to the US Energy Information Agency, consumption is expected to grow by 50% by the year 2050. To get greener, electric utilities must digitally transform. The Slow Transition to Green Energy. Artificial Intelligence.
Content services 104
104 
The Week in Cyber Security and Data Privacy: 26 February – 3 March 2024
IT Governance
MARCH 5, 2024
Source (New) Engineering Japan Yes >5 TB Array Networks Source (New) Cyber security USA Yes 2.5 TB Turtlemint Source (New) Insurance India Yes 1,800,000 Chunghwa Telecom Source (New) Telecoms Taiwan Yes 1.7
Data Privacy 52
52 
Let's personalize your content