CISA is urging water facilities to change the default passwords on their Unitronics PLCs and disconnect them from the internet after a water treatment facility in Pennsylvania was hit by a cyberattack.

Article here (w/ input from Jennifer Lyn Walker WaterISAC):
duo.com/decipher/cisa-…

We appreciate the work you and your team at Cybersecurity and Infrastructure Security Agency is doing to help protect our water and wastewater systems!

Check out details on the free cyber vulnerability scanning offered for water & wastewater utilityies by CISA here - bit.ly/44MIC6j

#cybersecurity

OT Cybersecurity Best Practices for SMBs: How to Implement Change Management | Dragos dragos.com/blog/ot-cybers…

Q2 2023 proved to be an exceptionally active period for #ransomware groups, posing significant threats to industrial organizations and infrastructure. Learn more in our detailed analysis: hubs.la/Q01ZqR6S0 #OTsecurity

#Cl0p has started to share data via torrent. #MOVEit .

The ICS[AP] CISA KEVs for CISA ICS Advisories dashboards are updated with the one known exploited vulnerability added 07/31:
CVE-2023-35801 - Ivanti Endpoint Manager Mobile (EPMM) Path Traversal Vulnerability
No correlation to any CISA ICS Advisory CVEs.

#cybersecurity

New #Security Sprint! Jennifer Lyn Walker & andy 🇺🇸 return! New SEC Rules & #cybersecurity for everyone, not-so-subtle #China cyber threat foot-stomping plus anger, radicalization and political violence, the critical-ist of infrastructure and…so much more! gate15.global/weekly-securit…

📢 July's Cyber Threat Briefing is next week!

Join speakers from MITRE and Loudoun Water to hear about Water and Wastewater OT Cyber Resilience.

WaterISAC Members Only. Details and registration here - bit.ly/3uK1qF4

#cyber #resilience #water

ICS[AP] has released 2 New Interactive CISA KEV Catalog Dashboards that provide a tool to filter on CVE CVSS Vector and CWE metrics as well as a filter for the 2023 CWE Top 25 Most Dangerous Software Weaknesses. Visit: icsadvisoryproject.com/ics-advisory-d… #cybersecurity #CISA #CVSS #CWE

Check out our new FB-ISAO Newsletter, v5, Issue 7!
-Managing Out of Office Notices
-DBIR Anyone?
-SPOTLIGHT: Priority Intelligence Requirements
+Upcoming Events

faithbased-isao.org/fb-isao-newsle… #faith #cybersecurity #security

ICS[AP] Dashboards are updated w/9 new & updated CISA ICS Advisories released on 7/13/23:
Siemens: 4 New
Rockwell Automation: 1 New
Honeywell: 1 new
BD: 1 New
Mitsubishi Electric: 1 Update
Enphase Envoy: 1 Update
icsadvisoryproject.com
#ICS #Cybersecurity

Heads up ICS peeps this is a big one

Check out the latest Gate 15 Security Sprint podcast where Jennifer Lyn Walker and I talk about hostile events, cyber-punk scams (Prime Day), weather and more! spotifyanchor-web.app.link/e/KakXNdRrlBb

ICYMI: Dragos OT-CERT best practice blogs feature advice tailored for small-to-medium businesses, with practical insights for industrial #cybersecurity asset owners and operators, with limited experience in #OTsecurity . Check out the growing collection at: hubs.la/Q01WL5rC0

Cisco warns of bug that lets attackers break traffic encryption - Sergiu Gatlan
bleepingcomputer.com/news/security/…

Ghost in the Machine: a Future Look at AI and OT — Ampere Industrial Security amperesec.com/podcast/ghost-…

In Today's Security & Resilience Update: Cyber Threat Briefing Tomorrow, BlackLotus Mitigation Guide from NSA/CSS, Research from Jumpsec Labs on New #MicrosoftTeams Vulnerability, Updated CISA Cyber ICS Vulnerability Advisories & more.

Full bulletin - bit.ly/3yTP4Zz

There is still time to register!

This Thursday at 2 PM we will be talking about food and ag cybersecurity with the Meat Institute.

Registration is open and free for all here → bit.ly/43wB0VA

#cybersecurity #foodandag isac #foodandag #agriculture

Calling all WaterISAC members!

This Wednesday our Cyber Threat Webinar is on IT/OT Convergence and how to work with your IT and OT teams. We are excited to have speakers from Garland Texas, South Coast Water District , and Loudoun Water!

Registration here - bit.ly/3uK1qF4

Siemens Gamesa Uncovers Deep Flaws in Legacy Wind Turbine Fleet scq.io/RLLDUNu