Opswright

Automation tools for secure engineering design

[Opswright @opswright]

🛡️Defending Democracy🛡️

The Office of the Director of National Intelligence, the FBI, and CISA have updated on Iran's efforts to influence U.S. elections, revealing that Iranian cyber actors targeted individuals with emails containing stolen materials.
https://t.co/0sW4xnLm10

[Opswright @opswright]

📨Enforcing Emails📨

Critical infrastructure sectors are particularly vulnerable to cyberattacks due to their control of essential physical systems; OPSWAT's recent study highlights the significant risks these sectors face from email-based threats.
https://t.co/QAqBd2mrpd

[Opswright @opswright]

⚡Enhancing Electric⚡

FERC proposed new standards to bolster the cybersecurity of the bulk-power system in response to escalating threats by malicious actors, including enhancing CIP standards to ensure more rigorous internal network security monitoring.
https://t.co/dLw8lhCAok

[Opswright @opswright]

⚠️Crashing Cranes⚠️

A joint report by the Select Committee on the CCP and the House Committee on Homeland Security has raised alarms about the U.S.'s heavy reliance on Chinese cranes in its seaports, highlighting significant national security risks.
https://t.co/NqXn1FfBXr

[Opswright @opswright]

😱Corrupt Cars😱

The Commerce Department seeks to implement a ban on the sale of connected and autonomous vehicles that contain Chinese and Russian software and hardware, targeting a full prohibition by 2027 for software and 2030 for hardware.
https://t.co/LFsY9RImly

[Opswright @opswright]

🫵Taking Responsibilty🫵

Jen Easterly strongly criticized software vendors for shipping products with security flaws, labeling them as the actual culprits behind enabling cybercrimes, emphasizing that these "product defects" open the door for criminals.
https://t.co/ry4RFk7zPz

[Opswright @opswright]

🗣️Clearing the Air🗣️

The FBI and CISA released a joint PSA titled "Just So You Know: False Claims of Hacked Voter Information Likely Intended to Sow Distrust of U.S. Elections" as part of their efforts to address disinformation during the election cycle.
https://t.co/E28afdaSF5

[Opswright @opswright]

🔎Sanctioning Spyware🔎

The Department of the Treasury imposed sanctions on 5 executives and 1 entity associated with the Intellexa Consortium, known for developing and distributing the Predator spyware, used to illicitly access victim's personal data.
https://t.co/dRABqCEUU9

[Opswright @opswright]

😬Risky Remotes😬

Claroty highlights the significant cybersecurity and operational challenges posed by the excessive use of remote access tools in OT environments by increasing the attack surface, complicating identity management, and reducing visibility.
https://t.co/3xsrqVSIhg

[Opswright @opswright]

🛣️Helping Highways🛣️

This week, the Federal Highway Administration (FHWA) within the U.S. Department of Transportation endorsed the Cyber Security Evaluation Tool (CSET) to assist transportation authorities in bolstering their cybersecurity measures.
https://t.co/nFla8pmmuy

[Opswright @opswright]

⚠️Critical Attack⚠️

Halliburton has confirmed a data breach in a recent SEC filing, stating that sensitive information was stolen by an unauthorized third party, linked to the RansomHub ransomware gang.
https://t.co/HBoh6JBY8u

[Opswright @opswright]

🚨Advisory Alert🚨

CISA has issued several critical advisories targeting vulnerabilities in industrial control systems, including medical devices, as part of their ongoing effort to enhance cybersecurity across critical infrastructure sectors.
https://t.co/NErJtLU60p

[Opswright @opswright]

💪A Powerful Portal💪

CISA launched the new Services Portal, enhancing its commitment to fortifying national cybersecurity by making incident reporting more accessible and effective by simplifying the reporting process and incorporating advanced features.
https://t.co/adWXemLpH1

[Opswright @opswright]

🪙Crashing Crypto🪙

The FBI has issued a warning about sophisticated social engineering attacks planned by North Korean operatives targeting decentralized finance organizations by engaging in detailed reconnaissance aimed at stealing cryptocurrency.
https://t.co/aHp78FgjNG

[Opswright @opswright]

🫷Tackling Zero Trust🫸

CISA released a detailed guide encouraging connected communities to adopt zero-trust principles to secure interconnected critical infrastructure systems effectively in the face of increasing network interconnections across sectors.
https://t.co/P7AvhucCUr

[Opswright @opswright]

✅Empowering Elections✅

CISA introduced two crucial election security checklists designed to bolster the resilience of election infrastructure against both cyber and physical threats and to support election officials. Check them out in the link below!
https://t.co/qWgWst0coM

[Opswright @opswright]

🤯Startling Statistics🤯

Forescout Technologies released a report highlighting a 43% increase in reported vulnerabilities and identifying a rise in state-sponsored groups disguising themselves as hacktivists, with the U.S. as the primary target.
https://t.co/c2UyQ5VmHT

[Opswright @opswright]

🚨Intensified Attacks🚨

Microsoft has identified a new threat from Iranian state-sponsored hacker group Peach Sandstorm, which is actively deploying a custom backdoor malware called Tickler in intelligence-gathering operations against US infrastructure.
https://t.co/jXtnV2SCcD

[Opswright @opswright]

📈Escalating Attacks📈

The KnowBe4 report highlights a 30% increase in one year surge in cyberattacks targeting critical infrastructure sectors like energy, transportation, and telecommunications due to their reliance on interconnected technologies.
https://t.co/0TdJUt1Ggh

[Opswright @opswright]

🐈‍⬛Creeping Cat🐈‍⬛

Iranian government-backed cybercriminals, identified as Pioneer Kitten, have been exploiting vulnerabilities in network devices to infiltrate U.S. and foreign networks, engaging in data theft and ransomware deployment.
https://t.co/3ccZW05bdn