November 2024
08.11.2024
US CERT
2023 Top Routinely Exploited Vulnerabilities
Titel
2023 Top Routinely Exploited Vulnerabilities
Veröffentlicht
8. November 2024 22:04
URL
https://www.cisa.gov/news-events/cybersecurity-advisories/aa24-317a
Text
Summary The following cybersecurity agencies coauthored this joint Cybersecurity Advisory (hereafter collectively referred to as the authoring agencies): United States: The Cybersecurity and Infrastructure Security Agency (CISA), the Federal Bureau of Investigation (FBI), and National Security Agency (NSA) Australia: Australian Signals Directorate’s Australian Cyber Security Centre (ACSC) Canada: Canadian Centre ...
Oktober 2024
08.10.2024
US CERT
Microsoft Releases October 2024 Security Updates
Titel
Microsoft Releases October 2024 Security Updates
Veröffentlicht
8. Oktober 2024 20:41
URL
https://www.cisa.gov/news-events/alerts/2024/10/08/microsoft-releases-october-2024-security-updates
Text
Microsoft released security updates to address vulnerabilities in multiple products. A cyber threat actor could exploit some of these vulnerabilities to take control of an affected system. CISA encourages users and administrators to review the following and apply necessary updates: Microsoft Security Update Guide for October
September 2024
30.09.2024
US CERT
Iranian Cyber Actors’ Brute Force and Credential Access Activity Compromises Critical Infrastructure Organizations
Titel
Iranian Cyber Actors’ Brute Force and Credential Access Activity Compromises Critical Infrastructure Organizations
Veröffentlicht
30. September 2024 18:28
URL
https://www.cisa.gov/news-events/cybersecurity-advisories/aa24-290a
Text
Summary The Federal Bureau of Investigation (FBI), the Cybersecurity and Infrastructure Security Agency (CISA), the National Security Agency (NSA), the Communications Security Establishment Canada (CSE), the Australian Federal Police (AFP), and Australian Signals Directorate's Australian Cyber Security Centre (ASD's ACSC) are releasing this joint Cybersecurity Advisory to warn network defenders ...
19.09.2024
US CERT
CISA Adds One Known Exploited Vulnerability to Catalog
Titel
CISA Adds One Known Exploited Vulnerability to Catalog
Veröffentlicht
19. September 2024 17:28
URL
https://www.cisa.gov/news-events/alerts/2024/09/19/cisa-adds-one-known-exploited-vulnerability-catalog
Text
CISA has added one new vulnerability to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. CVE-2024-8963 Ivanti Cloud Services Appliance (CSA) Path Traversal Vulnerability These types of vulnerabilities are frequent attack vectors for malicious cyber actors and pose significant risks to the federal enterprise. Binding Operational Directive ...
04.09.2024
US CERT
Russian Military Cyber Actors Target US and Global Critical Infrastructure
Titel
Russian Military Cyber Actors Target US and Global Critical Infrastructure
Veröffentlicht
4. September 2024 21:01
URL
https://www.cisa.gov/news-events/cybersecurity-advisories/aa24-249a
Text
Summary The Federal Bureau of Investigation (FBI), Cybersecurity and Infrastructure Security Agency (CISA), and National Security Agency (NSA) assess that cyber actors affiliated with the Russian General Staff Main Intelligence Directorate (GRU) 161st Specialist Training Center (Unit 29155) are responsible for computer network operations against global targets for the purposes ...
August 2024
29.08.2024
US CERT
#StopRansomware: RansomHub Ransomware
Titel
#StopRansomware: RansomHub Ransomware
Veröffentlicht
29. August 2024 15:17
URL
https://www.cisa.gov/news-events/cybersecurity-advisories/aa24-242a
Text
Summary Note: This joint Cybersecurity Advisory is part of an ongoing #StopRansomware effort to publish advisories for network defenders that detail various ransomware variants and ransomware threat actors. These #StopRansomware advisories include recently and historically observed tactics, techniques, and procedures (TTPs) and indicators of compromise (IOCs) to help organizations protect ...
23.08.2024
US CERT
Iran-based Cyber Actors Enabling Ransomware Attacks on US Organizations
Titel
Iran-based Cyber Actors Enabling Ransomware Attacks on US Organizations
Veröffentlicht
23. August 2024 18:41
URL
https://www.cisa.gov/news-events/cybersecurity-advisories/aa24-241a
Text
Summary The Federal Bureau of Investigation (FBI), Cybersecurity and Infrastructure Security Agency (CISA), and the Department of Defense Cyber Crime Center (DC3) are releasing this joint Cybersecurity Advisory (CSA) to warn network defenders that, as of August 2024, a group of Iran-based cyber actors continues to exploit U.S. and foreign ...
20.08.2024
US CERT
Best Practices for Event Logging and Threat Detection
Titel
Best Practices for Event Logging and Threat Detection
Veröffentlicht
20. August 2024 18:35
URL
https://www.cisa.gov/news-events/cybersecurity-advisories/aa24-234a
Text
Executive Summary This publication defines a baseline for event logging best practices to mitigate cyber threats. It was developed by the Australian Signals Directorate’s Australian Cyber Security Centre (ASD’s ACSC) in cooperation with the following international partners: United States (US) Cybersecurity and Infrastructure Security Agency (CISA), the Federal Bureau of ...
12.08.2024
US CERT
CISA Adds Six Known Exploited Vulnerabilities to Catalog
Titel
CISA Adds Six Known Exploited Vulnerabilities to Catalog
Veröffentlicht
12. August 2024 19:38
URL
https://www.cisa.gov/news-events/alerts/2024/08/13/cisa-adds-six-known-exploited-vulnerabilities-catalog
Text
CISA has added six new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. CVE-2024-38189 Microsoft Project Remote Code Execution Vulnerability CVE-2024-38178 Microsoft Windows Scripting Engine Memory Corruption Vulnerability CVE-2024-38213 Microsoft Windows SmartScreen Security Feature Bypass Vulnerability CVE-2024-38193 Microsoft Windows Ancillary Function Driver for WinSock Privilege ...
02.08.2024
US CERT
Enhancing Cyber Resilience: Insights from CISA Red Team Assessment of a US Critical Infrastructure Sector Organization
Titel
Enhancing Cyber Resilience: Insights from CISA Red Team Assessment of a US Critical Infrastructure Sector Organization
Veröffentlicht
2. August 2024 19:17
URL
https://www.cisa.gov/news-events/cybersecurity-advisories/aa24-326a
Text
EXECUTIVE SUMMARY The Cybersecurity and Infrastructure Security Agency (CISA) conducted a red team assessment (RTA) at the request of a critical infrastructure organization. During RTAs, CISA’s red team simulates real-world malicious cyber operations to assess an organization’s cybersecurity detection and response capabilities. In coordination with the assessed organization, CISA is ...
Juli 2024
24.07.2024
US CERT
North Korea Cyber Group Conducts Global Espionage Campaign to Advance Regime’s Military and Nuclear Programs
Titel
North Korea Cyber Group Conducts Global Espionage Campaign to Advance Regime’s Military and Nuclear Programs
Veröffentlicht
24. Juli 2024 18:37
URL
https://www.cisa.gov/news-events/cybersecurity-advisories/aa24-207a
Text
Summary The U.S. Federal Bureau of Investigation (FBI) and the following authoring partners are releasing this Cybersecurity Advisory to highlight cyber espionage activity associated with the Democratic People’s Republic of Korea (DPRK)’s Reconnaissance General Bureau (RGB) 3rd Bureau based in Pyongyang and Sinuiju: U.S. Cyber National Mission Force (CNMF) U.S. ...
09.07.2024
US CERT
CISA Red Team’s Operations Against a Federal Civilian Executive Branch Organization Highlights the Necessity of Defense-in-Depth
Titel
CISA Red Team’s Operations Against a Federal Civilian Executive Branch Organization Highlights the Necessity of Defense-in-Depth
Veröffentlicht
9. Juli 2024 16:09
URL
https://www.cisa.gov/news-events/cybersecurity-advisories/aa24-193a
Text
EXECUTIVE SUMMARY In early 2023, the Cybersecurity and Infrastructure Security Agency (CISA) conducted a SILENTSHIELD red team assessment against a Federal Civilian Executive Branch (FCEB) organization. During SILENTSHIELD assessments, the red team first performs a no-notice, long-term simulation of nation-state cyber operations. The team mimics the techniques, tradecraft, and behaviors ...
08.07.2024
US CERT
People’s Republic of China (PRC) Ministry of State Security APT40 Tradecraft in Action
Titel
People’s Republic of China (PRC) Ministry of State Security APT40 Tradecraft in Action
Veröffentlicht
8. Juli 2024 15:52
URL
https://www.cisa.gov/news-events/cybersecurity-advisories/aa24-190a
Text
Overview Background This advisory, authored by the Australian Signals Directorate’s Australian Cyber Security Centre (ASD’s ACSC), the United States Cybersecurity and Infrastructure Security Agency (CISA), the United States National Security Agency (NSA), the United States Federal Bureau of Investigation (FBI), the United Kingdom National Cyber Security Centre (NCSC-UK), the Canadian ...
Mai 2024
10.05.2024
US CERT
#StopRansomware: Black Basta
Titel
#StopRansomware: Black Basta
Veröffentlicht
10. Mai 2024 15:02
URL
https://www.cisa.gov/news-events/cybersecurity-advisories/aa24-131a
Text
SUMMARY Note: This joint Cybersecurity Advisory (CSA) is part of an ongoing #StopRansomware effort to publish advisories for network defenders that detail various ransomware variants and ransomware threat actors. These #StopRansomware advisories include recently and historically observed tactics, techniques, and procedures (TTPs) and indicators of compromise (IOCs) to help organizations ...
April 2024
17.04.2024
US CERT
#StopRansomware: Akira Ransomware
Titel
#StopRansomware: Akira Ransomware
Veröffentlicht
17. April 2024 18:23
URL
https://www.cisa.gov/news-events/cybersecurity-advisories/aa24-109a
Text
SUMMARY Note: This joint Cybersecurity Advisory (CSA) is part of an ongoing #StopRansomware effort to publish advisories for network defenders that detail various ransomware variants and ransomware threat actors. These #StopRansomware advisories include recently and historically observed tactics, techniques, and procedures (TTPs) and indicators of compromise (IOCs) to help organizations ...
Februar 2024
26.02.2024
US CERT
#StopRansomware: Phobos Ransomware
Titel
#StopRansomware: Phobos Ransomware
Veröffentlicht
26. Februar 2024 15:51
URL
https://www.cisa.gov/news-events/cybersecurity-advisories/aa24-060a
Text
SUMMARY Note: This joint Cybersecurity Advisory (CSA) is part of an ongoing #StopRansomware effort to publish advisories for network defenders that detail various ransomware variants and ransomware threat actors. These #StopRansomware advisories include recently and historically observed tactics, techniques, and procedures (TTPs) and indicators of compromise (IOCs) to help organizations ...
23.02.2024
US CERT
SVR Cyber Actors Adapt Tactics for Initial Cloud Access
Titel
SVR Cyber Actors Adapt Tactics for Initial Cloud Access
Veröffentlicht
23. Februar 2024 18:37
URL
https://www.cisa.gov/news-events/cybersecurity-advisories/aa24-057a
Text
How SVR-Attributed Actors are Adapting to the Move of Government and Corporations to Cloud Infrastructure OVERVIEW This advisory details recent tactics, techniques, and procedures (TTPs) of the group commonly known as APT29, also known as Midnight Blizzard, the Dukes, or Cozy Bear. The UK National Cyber Security Centre (NCSC) and ...
21.02.2024
US CERT
Threat Actors Exploit Multiple Vulnerabilities in Ivanti Connect Secure and Policy Secure Gateways
Titel
Threat Actors Exploit Multiple Vulnerabilities in Ivanti Connect Secure and Policy Secure Gateways
Veröffentlicht
21. Februar 2024 21:30
URL
https://www.cisa.gov/news-events/cybersecurity-advisories/aa24-060b
Text
SUMMARY The Cybersecurity and Infrastructure Security Agency (CISA) and the following partners (hereafter referred to as the authoring organizations) are releasing this joint Cybersecurity Advisory to warn that cyber threat actors are exploiting previously identified vulnerabilities in Ivanti Connect Secure and Ivanti Policy Secure gateways. CISA and authoring organizations appreciate ...
14.02.2024
US CERT
Threat Actor Leverages Compromised Account of Former Employee to Access State Government Organization
Titel
Threat Actor Leverages Compromised Account of Former Employee to Access State Government Organization
Veröffentlicht
14. Februar 2024 21:19
URL
https://www.cisa.gov/news-events/cybersecurity-advisories/aa24-046a
Text
SUMMARY The Cybersecurity and Infrastructure Security Agency (CISA) and the Multi-State Information Sharing & Analysis Center (MS-ISAC) conducted an incident response assessment of a state government organization’s network environment after documents containing host and user information, including metadata, were posted on a dark web brokerage site. Analysis confirmed that an ...
01.02.2024
US CERT
PRC State-Sponsored Actors Compromise and Maintain Persistent Access to U.S. Critical Infrastructure
Titel
PRC State-Sponsored Actors Compromise and Maintain Persistent Access to U.S. Critical Infrastructure
Veröffentlicht
1. Februar 2024 21:37
URL
https://www.cisa.gov/news-events/cybersecurity-advisories/aa24-038a
Text
SUMMARY The Cybersecurity and Infrastructure Security Agency (CISA), National Security Agency (NSA), and Federal Bureau of Investigation (FBI) assess that People’s Republic of China (PRC) state-sponsored cyber actors are seeking to pre-position themselves on IT networks for disruptive or destructive cyberattacks against U.S. critical infrastructure in the event of a ...
Januar 2024
12.01.2024
US CERT
Known Indicators of Compromise Associated with Androxgh0st Malware
Titel
Known Indicators of Compromise Associated with Androxgh0st Malware
Veröffentlicht
12. Januar 2024 18:13
URL
https://www.cisa.gov/news-events/cybersecurity-advisories/aa24-016a
Text
SUMMARY The Federal Bureau of Investigation (FBI) and the Cybersecurity and Infrastructure Security Agency (CISA) are releasing this joint Cybersecurity Advisory (CSA) to disseminate known indicators of compromise (IOCs) and tactics, techniques, and procedures (TTPs) associated with threat actors deploying Androxgh0st malware. Multiple, ongoing investigations and trusted third party reporting ...
Dezember 2023
19.12.2023
US CERT
#StopRansomware: ALPHV Blackcat
Titel
#StopRansomware: ALPHV Blackcat
Veröffentlicht
19. Dezember 2023 15:31
URL
https://www.cisa.gov/news-events/cybersecurity-advisories/aa23-353a
Text
SUMMARY Note: This joint Cybersecurity Advisory (CSA) is part of an ongoing #StopRansomware effort to publish advisories for network defenders that detail various ransomware variants and ransomware threat actors. These #StopRansomware advisories include recently and historically observed tactics, techniques, and procedures (TTPs) and indicators of compromise (IOCs) to help organizations ...
14.12.2023
US CERT
Enhancing Cyber Resilience: Insights from the CISA Healthcare and Public Health Sector Risk and Vulnerability Assessment
Titel
Enhancing Cyber Resilience: Insights from the CISA Healthcare and Public Health Sector Risk and Vulnerability Assessment
Veröffentlicht
14. Dezember 2023 01:24
URL
https://www.cisa.gov/news-events/cybersecurity-advisories/aa23-349a
Text
SUMMARY In January 2023, the Cybersecurity and Infrastructure Security Agency (CISA) conducted a Risk and Vulnerability Assessment (RVA) at the request of a Healthcare and Public Health (HPH) sector organization to identify vulnerabilities and areas for improvement. An RVA is a two-week penetration test of an entire organization, with one ...
12.12.2023
US CERT
Russian Foreign Intelligence Service (SVR) Exploiting JetBrains TeamCity CVE Globally
Titel
Russian Foreign Intelligence Service (SVR) Exploiting JetBrains TeamCity CVE Globally
Veröffentlicht
12. Dezember 2023 18:33
URL
https://www.cisa.gov/news-events/cybersecurity-advisories/aa23-347a
Text
SUMMARY The U.S. Federal Bureau of Investigation (FBI), U.S. Cybersecurity & Infrastructure Security Agency (CISA), U.S. National Security Agency (NSA), Polish Military Counterintelligence Service (SKW), CERT Polska (CERT.PL), and the UK’s National Cyber Security Centre (NCSC) assess Russian Foreign Intelligence Service (SVR) cyber actors—also known as Advanced Persistent Threat 29 ...
11.12.2023
US CERT
#StopRansomware: Play Ransomware
Titel
#StopRansomware: Play Ransomware
Veröffentlicht
11. Dezember 2023 23:41
URL
https://www.cisa.gov/news-events/cybersecurity-advisories/aa23-352a
Text
SUMMARY Note: This joint Cybersecurity Advisory (CSA) is part of an ongoing #StopRansomware effort to publish advisories for network defenders that detail various ransomware variants and ransomware threat actors. These #StopRansomware advisories include recently and historically observed tactics, techniques, and procedures (TTPs) and indicators of compromise (IOCs) to help organizations ...

Letzte Updates

BOSCH PSIRT
31.10.2024
SIEMENS CERT
22.11.2024
US CERT
08.11.2024
US CERT (ICS)
21.11.2024

Nach Quelle

Archiv

2024
2023
2022
2021
2020
2019
2018
2017

Feeds