Latest cybersecurity reporting from selected sources.

National Risk Assessment Cites CrowdStrike Lessons Learned, Hybrid Warfare RisksThe British government's latest national security risk register sees a rising threat posed by cyberattacks disrupting operational technology in more critical national infrastructure sectors, and cites the CrowdStrike outage in "digital resilience failure" lessons to be learned.

Vital Service Providers Need a Plan to Work Through Internet Outages, CISA SaysCritical U.S. infrastructure like water, power and even banking systems will be successfully hacked by enemy cyber warriors in the event of a military confrontation with a peer adversary like Russia or China, officials from the nation's civilian cyber defense agency said.

Signature Healthcare EHRs, Patient Portal Offline; Some Cancer Care CancelledA Massachusetts healthcare system is diverting ambulance patients and is operating under downtime procedures as it deals with a cyberattack. The organization has also canceled certain cancer treatments, taken its patient portal offline and is unable to fill prescriptions at its retail pharmacies.

Medtech Maker Is Still Recovering While Iranian Hackers Threaten More Attack VictimsAs medtech maker Stryker continues working to restore global IT systems brought offline by a cyberattack last week, class action lawsuits against the company are piling up in federal court and the Iranian hackers claiming credit for the attack are warning of more assaults to come on other victims.

Medical Device Manufacturer Hack Was Likely OpportunisticAn Iranian cyberattack on medical device maker Stryker's internal IT environment does not appear to affect connected products used by the company's healthcare clients. But an outage of Stryker's electronic ordering system could lead to supply chain issues for its customers.

Also, Venezuela Cyberattack, Endesa Confirms Breach and Telegram IP LeakThis week, a software flaw caused the Verizon outage. U.S. cyberattack in Venezuela. ICE identities published online. BreachForums users leaked. Spanish energy provider Endesa data breach. Telegram privacy risk. A MuddyWater upgrade. Dutch man sentenced for hacking a maritime port. A ServiceNow patch.

Cyber Command Involved in Strikes on CaracasHere's what we don't know: Whether the Caracas grid outage triggered by the U.S. incursion was caused - or at least aided - by a cyberattack. A coordinated attack involving a cyber component against an adversarial electrical grid wouldn't be unprecedented.

IT Systems, Radiology Services Taken Offline; Ambulance Patients DivertedA North Central Massachusetts nonprofit healthcare system with two community hospitals, a medical group and several other care facilities has taken its IT network offline and is diverting ambulance patients as it continues to respond to a cyberattack that hit last week.

Dutch Servers Restored Following Moscow Led AttackThe Dutch Public Prosecution Service on Monday began phased restoration of its networks after a cyberattack last month forced the agency to take down its services offline. The agency confirmed that hackers exploited a vulnerability in a Citrix device.

After 'Criminal External, Threat Actor' Breach, Officials Take City Systems OfflineCybersecurity experts from the Minnesota National Guard have deployed to St. Paul to help the city respond to a cyberattack, owing to the "scale and complexity" involved. After a weekend spent attempting and failing to contain the intrusion, officials took the city's IT systems offline.

Erie Insurance and Philadelphia Insurance Still Recovering From Separate AttacksStatements by Erie Indemnity Co. and Philadelphia Insurance Companies indicate that voluntary decisions to disconnect their systems from the network - not ransomware encryption - have disrupted operations over the past 10 days since the carriers were hit with separate cyberattacks.

Erie Insurance and Philadelphia Insurance Still Recovering From Separate AttacksStatements by Erie Indemnity Co. and Philadelphia Insurance Companies indicate that voluntary decisions to disconnect their systems from the network - not ransomware encryption - have disrupted operations over the past 10 days since the carriers were hit with separate cyberattacks.

Iranian Officials Call Internet Outages Intentional to Disrupt Israeli OperationsIranian officials said widespread internet outages were deliberate and meant to disrupt covert Israeli operations within the country following days of missile attacks from Israel and a rapidly escalating regional conflict that experts warn could trigger major cyberattacks on critical infrastructure.

Disruption of Country's Biggest Bank Comes as Israel-Iran War IntensifiesA pro-Israel hacking group claims to have disrupted a major Iranian bank as hostilities between the two countries raged into their fifth day. Hacking group Gonjeshke said Tuesday morning it "conducted cyberattacks which destroyed the data of the Islamic Revolutionary Guard Corps' Bank Sepah."

Catholic Healthcare Organization Took IT Systems Offline in Response to IncidentCovenant Health, a Catholic healthcare organization serving New England and parts of Pennsylvania, is dealing with a cyber incident that has forced the entity to take its IT systems offline, affecting services at several of its facilities. That includes some hospitals and medical testing labs.

Labour Government Blames ToriesBritish law firms representing low-income criminal defendants and civil litigants are having to work for free for weeks or decline new cases as the fallout of a cyberattack against the U.K. Legal Aid Agency forced the agency to yank its online portal offline.

Experts Pointing a Finger at Interlock Ransomware Gang for Kettering Health AttackOhio-based Kettering Health is in its second day responding to a cyberattack that's disrupted patient care services and downed its IT systems, including its patient portal and phones. Some cybersecurity insiders say Interlock ransomware is responsible.

Also: Gartner's Sydney Summit Highlights, Rising OT Security RisksIn this week's update, ISMG editors discussed X’s major DDoS outages, politically motivated cyberattacks, key takeaways from Gartner’s Security & Risk Summit in Sydney, and rising operational technology threats highlighted in recent Dragos and Gartner reports.

IT Outages Are Affecting Patient Services, NC Practice Is 'Temporarily Closed'A small North Carolina radiology practice and a 25-bed Pennsylvania hospital and are among the latest rural healthcare providers struggling to recover from recent cyberattacks that are disrupting their technology operations and affecting patient care services. How will this end up?

No Disruption to Service; Manual Operations ImplementedFBI and U.S. Department of Homeland Security officials are in Arkansas City, Kansas, to investigate a cyberattack at the city's water treatment facility. "There has been no disruption to service. Out of caution, the Water Treatment Facility has switched to manual operations," said the city manager.