Latest cybersecurity reporting from selected sources.

CISA’s CI Fortify initiative aim for critical infrastructure operators to build isolation & recovery

CISA has revealed Iranian attacks causing disruption and financial loss at US critical infrastructure firms

CISA and FBI warn of Medusa ransomware impacting over 300 victims across critical infrastructure sectors with double extortion tactics

The US Cybersecurity and Infrastructure Security Agency confirmed it will keep defending against Russian cyber threats to US critical infrastructure

CISA claims US critical infrastructure providers are improving cyber hygiene and remediation activities

CISA’s 2025-2026 International Strategic Plan aims to strengthen external partnerships to reduce risks to critical infrastructure relied on in the US

CISA’s RVWP program sent 1754 ransomware vulnerability notifications to government and critical infrastructure entities in 2023, leading to 852 devices being secured

CISA has revealed the first draft for an update of the Cyber Incident Reporting for Critical Infrastructure (CIRCIA) Act of 2022

The agency has issued a fact sheet about the threat actor, emphasizing the importance of cyber-risk as a core business concern

These will focus on countering APTs, fortifying critical infrastructure and anticipating emerging risks

CISA’s advisory provides mitigations for vulnerabilities in ICS products used in critical infrastructure industries like energy, manufacturing and transportation

The guide outlines mitigation strategies and best practices to counteract prevalent cyber-threats

Resources could help to stem the tide of breaches

The Agency will warn critical infrastructure entities to enable mitigation before an incident

The document is the result of a July 2021 security memorandum signed by President Biden

Daixin Team is actively targeting US businesses, mainly in the healthcare sector