- Feb 2023
-
cyberscoop.com cyberscoop.com
-
Ransomware attacks surge against US manufacturing plants
TITLE: Rise in ransomware attacks against US manufacturing plans
CONTENT: A recent report by Dragos, one of the leading companies in critical infrastructure protection, highlights the rise in ransomware attacks against critical infrastructure and in particular against the manufacturing systems. The report shows that the manufacturing sector had at least 437 ransomware attacks in 2022, accounting for more than 70% of these disruptive attacks that industrial organizations experienced the previous year with two emerging groups, Chernovite and Bentonite, that focus on attacking the industrial sector.
EXCERPT: A recent report by Dragos, one of the leading companies in critical infrastructure protection, highlights the rise in ransomware attacks against critical infrastructure and in particular against manufacturing systems.
LINK: https://cyberscoop.com/ransomware-manufacturing-dragos/
TOPIC: Protection of Critical Infrastructure
TREND: Ransomware attacks
PROCESS: -
DATE: 14 February 2023
COUNTRY: United States
-
- Nov 2022
-
h.diplomacy.edu h.diplomacy.edu
-
TITLE: The White House to host the second Counter Ransomware Initiative Summit
CONTENT: This week, the White House will host the Counter Ransowmare Initiative Summit with representatives from 13 international firms and representatives from 36 countries and the European Union to discuss the growing threat posed by ransomware and other cybercrime on critical infrastructure and individuals. The goal of the Summit is to “institute a set of cyber norms and rules of the road that are recognized across the globe to counter criminal ransomware threats and hold malicious actors accountable”. A joint statement by participants is expected at the end of the Summit.
EXCERPT: The White House will host the second Counter Ransowmare Initiative Summit with representatives from 36 countries and the EU as well as private sector actors to discuss the threats posed by ransomware and other cybercrime on critical infrastructure.
TOPIC: Critical Infrastructure, Cybersecurity
TREND: Protection of Critical Infrastructure
PROCESS: -
DATE: 31October 2022
COUNTRY: United States
-
TITLE: Australia releases a practical framework for cyber governance principles
CONTENT: The Australian Institute of Company Directors (AICD) and the Cyber Security Cooperative Research Centre (CSCRC) have published the Cybersecurity Governance Principles, a set of governance principles and a “practical framework” for organizations to strengthen their cyber resilience. The principles cover five main areas: roles and responsibilities, cyber strategy, cyber risk management, cyber resilient culture, and cyber incident planning.
These guidelines build on the recently published Cybersecurity Performance Goals for Critical Infrastructure by the US Department of Homeland Security as an example of best practice and are being considered by the Australian government as it reviews its cyber laws following a spate of recent high-profile hacks.
EXCERPT: The Australian Institute of Company Directors (AICD) and the Cyber Security Cooperative Research Centre (CSCRC) have published the Cybersecurity Governance Principles, a set of governance principles and a “practical framework” for organizations to strengthen their cyber resilience.
TOPIC: Critical Infrastructure, Cybersecurity
TREND: Protection of Critical Infrastructure
PROCESS: -
DATE: 27 October 2022
COUNTRY: Australia
-
TITLE: The US Department of Homeland Security releases New Cybersecurity Performance Goals for Critical Infrastructure (CPGs)
CONTENT: On 27 October 2022, the United States Department of Homeland Security (DHS) released new Cybersecurity Performance Goals (CPGs). CPGs are voluntary and non-comprehensive “prioritized subset of IT and operational technology (OT) cybersecurity practices)” that identify the highest priorities and measures owners of critical infrastructures and supply chains should follow to protect against cyber attacks.
As part of the White House efforts and new investments in cybersecurity, the CPGs were developed by the Cybersecurity and Infrastructure Security Agency (CISA) in collaboration with governmental and private sector actors. These procedures are meant to be implemented in the National Institute of Standards and Technology's (NIST) Cybersecurity Framework (CSF), covering the following issues: account security, device security, data security, governance and training, vulnerability management, supply chain and third parties security, and finally recovery and response.
EXCERPT: The United States Department of Homeland Security released new New Cybersecurity Performance Goals for Critical Infrastructure (CPGs) to identify priorities and measures owners of critical infrastructures and supply chains should follow to protect against cyber attacks.
TOPIC: Critical Infrastructure, Cybersecurity
TREND: Protection of Critical Infrastructure
PROCESS: -
DATE: 27 October 2022
COUNTRY: United States
-