Explore

CISA Enhances Cyber Incident Reporting Form Amidst Pending CIRCIA Mandate

CISA Enhances Cyber Incident Reporting Form Amidst Pending CIRCIA Mandate

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has launched an updated cyber incident reporting form, featuring more detailed questions about incident types and utilizing MITRE ATT&CK terms for observed activity. This enhancement, announced on November 9, aims to improve data quality, enabling CISA to identify broader threat trends from seemingly separate incidents. The revised form includes questions on malware, social engineering, hacking techniques, and insider threats. Currently, only federal civilian agencies are mandated to report incidents to CISA, but the agency encourages voluntary reporting from other organizations, with submitted information protected under the Protected Critical Infrastructure Information (PCII) Program. This update comes as the final rule for the Cyber Incident Reporting for Critical Infrastructure Act (CIRCIA) awaits approval from the White House, having been under review since October 1.

CISA Updates Cyber Incident Reporting Form with Granular Data Requirements

CISA Updates Cyber Incident Reporting Form with Granular Data Requirements

The Cybersecurity and Infrastructure Security Agency (CISA) has launched a revamped cyber incident reporting form designed to collect more detailed information about security breaches. Announced on November 9, the updated web-based questionnaire includes granular questions on specific incident types such as malware, social engineering, and insider threats. A key enhancement is the integration of the MITRE Adversarial Tactics, Techniques and Common Knowledge (ATT&CK) framework, which enables organizations to describe adversary behavior using standardized terminology. This improved data quality is intended to help CISA correlate related threat activity into broader trends, facilitating faster and more thorough threat analysis. While currently mandatory only for federal civilian agencies, CISA encourages voluntary reporting from other sectors, offering protections under the Protected Critical Infrastructure Information Program. This initiative precedes the final rule for the Cyber Incident Reporting for Criti...

Law Firms Face Significant Cyber Extortion Threats Despite High Security Spending

Law Firms Face Significant Cyber Extortion Threats Despite High Security Spending

Law Firms Face Significant Cyber Extortion Threats Despite High Security Spending

The Real Reason Security Engineers Disagree About Becoming a Security Analyst in the U.S.

The Real Reason Security Engineers Disagree About Becoming a Security Analyst in the U.S.

Beyond salary, a deep divide in philosophy and career trajectory separates security engineers and analysts. Here’s what it means for your career.

Cargill CISO Emphasizes Employee Training as Key Defense Against Cyber Attacks in Agrifood Sector

Cargill CISO Emphasizes Employee Training as Key Defense Against Cyber Attacks in Agrifood Sector

Cargill CISO Emphasizes Employee Training as Key Defense Against Cyber Attacks in Agrifood Sector

CrowdStrike Seeks Red Team Manager to Enhance Cybersecurity Offerings

CrowdStrike Seeks Red Team Manager to Enhance Cybersecurity Offerings

CrowdStrike Seeks Red Team Manager to Enhance Cybersecurity Offerings

Plante Moran Partner Warns of AI's Impact on Cybersecurity, Declares 'Security Through Obscurity' Dead

Plante Moran Partner Warns of AI's Impact on Cybersecurity, Declares 'Security Through Obscurity' Dead

Plante Moran Partner Warns of AI's Impact on Cybersecurity, Declares 'Security Through Obscurity' Dead

FBI Warns of Increasing Operational Technology Hacking Threat to Critical U.S. Infrastructure

FBI Warns of Increasing Operational Technology Hacking Threat to Critical U.S. Infrastructure

The FBI is issuing a warning to U.S. companies and organizations regarding a growing threat of hackers targeting operational technology (OT) systems. According to FBI Seattle Special Agent in Charge Mike Herrington, these attacks have become more frequent over the past few years and pose significant concerns. Herrington highlighted that many operational systems, some decades old, lack modern security features and are not designed to withstand current sophisticated hacking techniques. He noted that hackers often scan the internet for vulnerable devices, such as specific programmable logic controllers, and exploit unpatched systems. The FBI emphasizes that these operational technology hacks could lead to severe consequences, including loss of life, injuries, or substantial financial damages. An example cited involved an attempt to tamper with dam settings, which, while not physically connected at the time, illustrates the potential for widespread disruption.

FBI Issues Urgent Warning on Cyberattacks Targeting Industrial Refrigeration and Cold Chain Systems

FBI Issues Urgent Warning on Cyberattacks Targeting Industrial Refrigeration and Cold Chain Systems

The FBI and its U.S. government partners have released an advisory warning about malicious cyber actors actively targeting industrial refrigeration and cold chain systems globally. This alert follows a recent attempted disruption of refrigeration at three French national blood service facilities, which was thwarted by staff response. These critical systems are vital for protecting food and medicine across various sectors, including healthcare, food and agriculture, and other essential industries within the United States. Attackers are exploiting vulnerabilities such as unpatched controllers, internet-exposed systems, and devices still using default manufacturer passwords. The FBI is urging organizations to take immediate mitigation steps to secure these systems against potential cyber threats.

DHS Orders Federal Agencies to Remove Acronis Products from Systems

DHS Orders Federal Agencies to Remove Acronis Products from Systems

The Department of Homeland Security (DHS) has issued a directive requiring federal civilian agencies to cease purchasing and remove all products from Acronis, a Swiss data-backup and cybersecurity firm, from their systems. This order follows similar actions taken by the Office of the Director of National Intelligence (ODNI) and the Department of Defense (DOD). The directive targets Acronis products, which are utilized by various federal agencies for data backup and cybersecurity measures. The specific reasons for this widespread removal order have not been detailed in the provided information, but it indicates a significant concern regarding the security or reliability of Acronis's offerings within federal infrastructure.

MassMutual India Seeks Associate for Security Operations Centre Amidst Digital Enablement Push

MassMutual India Seeks Associate for Security Operations Centre Amidst Digital Enablement Push

MassMutual India Seeks Associate for Security Operations Centre Amidst Digital Enablement Push

Pentagon Investigates Suspected Cyberattacks on Military Base Refrigeration Systems in U.S.

Pentagon Investigates Suspected Cyberattacks on Military Base Refrigeration Systems in U.S.

The Pentagon is currently investigating refrigeration malfunctions at military bases across the United States, suspecting these incidents may be the result of cyberattacks. These investigations follow similar incidents in Europe, where refrigeration systems in French blood banks and numerous supermarkets across France, Belgium, Sweden, Luxembourg, and Ireland have been targeted. In one instance, hundreds of French supermarkets experienced remote manipulation of refrigeration systems, causing temperatures to rise significantly and spoiling large quantities of chilled and frozen food. The incidents highlight a growing vulnerability in modern food distribution and storage infrastructure, which increasingly relies on interconnected technology for remote monitoring and control. While responsibility for these attacks has not been definitively established, and online claims by pro-Russian hacking groups remain unverified, the pattern suggests a coordinated effort to disrupt essential services. The U.S. military's...