Response to CISA Advisory (AA24-326A): Enhancing Cyber Resilience: Insights from CISA Red Team Assessment of a US Critical Infrastructure Sector Organization

In response to the recently published CISA Advisory (AA24-326A) which highlights the CISA Red Team's simulation of real-world malicious cyber operations, AttackIQ has provided actionable recommendations to help organizations emulate these attacks ...
infrastructure, ransomware,

Protecting Critical Infrastructure with Zero-Trust and Microsegmentation

Ransomware attacks are increasingly targeting critical infrastructure — essential systems like energy, water, transportation and finance. In 2023 alone, over 40% of attacks hit these sectors, according to the FBI. Meanwhile, agencies ...
Security Boulevard
Bridging the Gap: The Challenges of IT and OT Convergence

Bridging the Gap: The Challenges of IT and OT Convergence

Operational Technology (OT) networks and Industrial Control Systems, the backbone of critical infrastructure, have traditionally operated in isolation and designed more for reliability and efficiency than security. The increasing convergence of IT ...

Emulating the Destructive WhisperGate Malware

AttackIQ has released a new attack graph that seeks to emulate the Tactics, Techniques and Procedures (TTPs) associated with the destructive WhisperGate malware. The post Emulating the Destructive WhisperGate Malware appeared first ...
Cybersecurity Insights with Contrast CISO David Lindner | 11/8/24

Cybersecurity Insights with Contrast CISO David Lindner | 11/8/24

Insight #1:  Time for a new SIEM? Make it ADR-compatible When evaluating modern security information and event management (SIEM) solutions, prioritize those with robust integrations for Application Detection and Response (ADR). This ...
critical, infrastructure, threats, cybersecurity energy infrastructure CISA NSA

Strengthening Critical Infrastructure Defense: Shifting to an Exposure Management Mindset

A recent alert jointly issued by a myriad of governmental agencies including CISA, FBI, EPA, DOE, NSA and NCSC-UK has spotlighted activities by Russians targeting U.S. and European critical infrastructure ...
Security Boulevard
democracy, election, attackers, cybersecurity Iran Russia Trump disinformation elections Russia Walz

“Hacking” an Election is Harder Than You Think – But Security is Still a Priority  

By understanding attackers’ true goals, prioritizing transparency, and winning the optics battle, election officials can help keep the process secure and avoid losing the faith of the electorate ...
Security Boulevard
email, email security, organizations, Tax season scams

Email Security Breaches Rampant Among Critical Infrastructure Organizations

A full 80% of organizations within the critical infrastructure vertical experienced email-related security breaches in the past year, according to an OPSWAT survey ...
Security Boulevard

Response to CISA Advisory (AA24-249A): Russian Military Cyber Actors Target US and Global Critical Infrastructure

AttackIQ has released a new assessment template in response to the CISA Advisory (AA24-249A) published on September 5, 2024, that assesses cyber actors affiliated with the Russian General Staff Main Intelligence Directorate ...