Yasna brings together recent headlines from selected sources and makes them easier to sort with tags, filters, and search.
Search across headline titles and summaries.
Weekly headline count for the current query.
What researchers dubbed the most sophisticated AI-integrated ICS campaign to date hit a brick wall in the form of a SCADA login screen.
Also: Spanish Hacker Granted Russian Asylum, Microsoft Patches Zero-DaysThis week, a CISA warning, Nest footage in Nancy Guthrie case, Signal phishing. Spanish hacker, Russian asylum. Spanish ministry services offline. BYOVD ransomware. The Conduent breach hit Volvo. Microsoft patched zero-days. ZeroDayRAT targeted devices. The SmarterMail breach. Another Fortinet flaw.
Pro-Russia hacktivist groups have been observed exploiting exposed virtual network computing connections to breach OT systems
Global Conflicts and Tariff Wars Are Driving New OT Threats and Supply Chain RisksGlobal conflicts and tariff wars provide new opportunities for cyber adversaries, especially those targeting operational technology systems. Now attackers are focusing on fragile supply chains. Claroty researchers predict attackers will breach at least one major cyber-physical system in the next year.
Also: US Cyber Grants Are Dwindling; Hybrid Threats Renew Focus on OT ResilienceIn this week’s update, four ISMG editors examined the voice phishing attacks linked to the Google and Cisco breaches, the funding gap in U.S. cybersecurity support for local governments and the implications of hybrid warfare on operational technology resilience.
'Bless Their Heart,' Says Threat Intel Executive of Pro-Iranian GroupSecurity experts have dismissed pro-Iranian hacktivist group LulzSec Black's claim to have breached Indian nuclear secrets in reprisal for the country's support of Israel. Pro-Iran hacktivist groups' SCADA-targeting, DDoS launching, data leaking and nuisance-level activities have surged.
Fortinet Uncovers Long-Term Cyberespionage in RegionAn Iranian state-sponsored threat group conducted a years-long cyberespionage campaign targeting a Middle East critical infrastructure provider, with its operational technology network a key target. The attackers focused reconnaissance activity and credential theft on the OT network.
SANS recently published its 2024 State of ICS.OT Cybersecurity report, highlighting the skills of cyber professionals working in critical infrastructure, budget estimates, and emerging technologies. The report also looked at the most common types of attack vectors used against ICT/OT networks.
Also: Implications of a Critical Linux Utility Backdoor; Focus on Cloud SecurityIn the latest weekly update, ISMG editors discussed key insights on OT security from the Cyber Security for Critical Assets Summit in Houston, the implications of a critical Linux utility found to have a backdoor, and a CISO's perspective on comprehensive cloud security strategy.
The booster station shut off its automated system and moved to a manual system once the alarms sounded the breach.
Barracuda research finds organizations are struggling to protect operational technology and getting breached as a result.